Question 690
After Bluebird Infrastructure deploys inter-AS VPN option B route exchange to exchange labeled VPN routes between autonomous systems through AS border routers, the primary acceptance check passes (VPN reachability crosses the border with the expected labeled route entries). What remaining operational risk should still be part of the design review?
- Rapid MAC moves need dampening and loop-protection policy.
- ASBR trust and route-target filtering are critical at inter-provider edges.
- Link MTU must allow the additional Ethernet tag bytes.
- Measurement accuracy depends on platform clock and path support.
Explanation
Correct Answer
B:The relevant boundary of inter-AS VPN option B route exchange is that ASBR trust and route-target filtering are critical at inter-provider edges. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to EVPN MAC/IP route type 2 in a different scenario where operators need to advertise a reachable customer MAC address over a provider EVPN fabric. For the deployed inter-AS VPN option B route exchange approach, the relevant caution is instead that ASBR trust and route-target filtering are critical at inter-provider edges.
C:This concern applies to 802.1ad Q-in-Q tag separation in a different scenario where operators need to carry duplicate customer VLAN IDs from multiple subscribers over a provider Ethernet access network. For the deployed inter-AS VPN option B route exchange approach, the relevant caution is instead that ASBR trust and route-target filtering are critical at inter-provider edges.
D:This concern applies to Y.1731 Ethernet delay measurement in a different scenario where operators need to measure frame delay and loss across a provisioned Ethernet service. For the deployed inter-AS VPN option B route exchange approach, the relevant caution is instead that ASBR trust and route-target filtering are critical at inter-provider edges.
Question 691
Horizon Exchange must let a carrier customer transport its own labeled VPN services over another carrier backbone. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- EVPN MAC/IP route type 2
- weighted random early detection
- carrier supporting carrier VPN
- DSCP class marking at ingress
Explanation
Correct Answer
C:carrier supporting carrier VPN matches this requirement: the team should build a supported carrier-supporting-carrier architecture with appropriate labeled route exchange. A relevant outcome would be that the carrier CE can transport customer labeled traffic through the upstream core.
Incorrect Answers
A:EVPN MAC/IP route type 2 instead addresses a different condition: advertise a reachable customer MAC address over a provider EVPN fabric. It would instead require you to enable MAC learning and Type-2 EVPN route advertisement for the correct service, not the stated goal to let a carrier customer transport its own labeled VPN services over another carrier backbone.
B:weighted random early detection instead addresses a different condition: avoid persistent tail-drop synchronization in a congested packet queue. It would instead require you to configure supported WRED thresholds and drop probability by traffic class, not the stated goal to let a carrier customer transport its own labeled VPN services over another carrier backbone.
D:DSCP class marking at ingress instead addresses a different condition: mark customer traffic into a contracted provider forwarding class before queuing. It would instead require you to classify trusted traffic and apply the agreed DSCP or MPLS Traffic Class mapping, not the stated goal to let a carrier customer transport its own labeled VPN services over another carrier backbone.
Question 692
At Cedar Wireless, the engineering change is approved for carrier supporting carrier VPN. The specific goal is to let a carrier customer transport its own labeled VPN services over another carrier backbone. Which implementation step belongs in this change plan?
- Enable MAC learning and Type-2 EVPN route advertisement for the correct service.
- Configure supported WRED thresholds and drop probability by traffic class.
- Classify trusted traffic and apply the agreed DSCP or MPLS Traffic Class mapping.
- Build a supported carrier-supporting-carrier architecture with appropriate labeled route exchange.
Explanation
Correct Answer
D:Implementing carrier supporting carrier VPN requires the operator to build a supported carrier-supporting-carrier architecture with appropriate labeled route exchange. This makes the required goal testable using evidence that the carrier CE can transport customer labeled traffic through the upstream core.
Incorrect Answers
A:The proposed step is for EVPN MAC/IP route type 2, whose purpose is to advertise a reachable customer MAC address over a provider EVPN fabric. It would not perform the necessary carrier supporting carrier VPN operation: build a supported carrier-supporting-carrier architecture with appropriate labeled route exchange.
B:The proposed step is for weighted random early detection, whose purpose is to avoid persistent tail-drop synchronization in a congested packet queue. It would not perform the necessary carrier supporting carrier VPN operation: build a supported carrier-supporting-carrier architecture with appropriate labeled route exchange.
C:The proposed step is for DSCP class marking at ingress, whose purpose is to mark customer traffic into a contracted provider forwarding class before queuing. It would not perform the necessary carrier supporting carrier VPN operation: build a supported carrier-supporting-carrier architecture with appropriate labeled route exchange.
Question 693
Willow Regional has deployed carrier supporting carrier VPN to let a carrier customer transport its own labeled VPN services over another carrier backbone. The implementation step was to build a supported carrier-supporting-carrier architecture with appropriate labeled route exchange. Which observation demonstrates that the requested service is working?
- The carrier CE can transport customer labeled traffic through the upstream core.
- Remote PEs learn the MAC via BGP EVPN and can forward to its advertising PE.
- Drop probability rises before queue exhaustion while sensitive classes remain prioritized.
- Packets enter the correct queue with expected marking at the provider boundary.
Explanation
Correct Answer
A:For carrier supporting carrier VPN, successful verification means that the carrier CE can transport customer labeled traffic through the upstream core. That evidence directly tests whether the provider can let a carrier customer transport its own labeled VPN services over another carrier backbone after deployment.
Incorrect Answers
B:The observation would verify EVPN MAC/IP route type 2 under the separate requirement to advertise a reachable customer MAC address over a provider EVPN fabric. It does not demonstrate the needed carrier supporting carrier VPN result: the carrier CE can transport customer labeled traffic through the upstream core.
C:The observation would verify weighted random early detection under the separate requirement to avoid persistent tail-drop synchronization in a congested packet queue. It does not demonstrate the needed carrier supporting carrier VPN result: the carrier CE can transport customer labeled traffic through the upstream core.
D:The observation would verify DSCP class marking at ingress under the separate requirement to mark customer traffic into a contracted provider forwarding class before queuing. It does not demonstrate the needed carrier supporting carrier VPN result: the carrier CE can transport customer labeled traffic through the upstream core.
Question 694
While troubleshooting carrier supporting carrier VPN at Atlas Backbone, the intended acceptance outcome is still missing: the carrier CE can transport customer labeled traffic through the upstream core. Which fault condition should be investigated first for this particular design?
- Only an IP-prefix route is advertised and MAC reachability remains unknown.
- An ordinary Internet transit service is assumed to preserve customer MPLS labels.
- The queue only drops packets after reaching a hard tail limit.
- Customer traffic is passed through without classification despite SLA differentiation.
Explanation
Correct Answer
B:The suspected defect directly frustrates carrier supporting carrier VPN: an ordinary Internet transit service is assumed to preserve customer MPLS labels. Correcting it should allow verification that the carrier CE can transport customer labeled traffic through the upstream core.
Incorrect Answers
A:This defect belongs to EVPN MAC/IP route type 2, where the affected outcome is to advertise a reachable customer MAC address over a provider EVPN fabric. It is not the direct failure mode identified for the carrier supporting carrier VPN design in this case: an ordinary Internet transit service is assumed to preserve customer MPLS labels.
C:This defect belongs to weighted random early detection, where the affected outcome is to avoid persistent tail-drop synchronization in a congested packet queue. It is not the direct failure mode identified for the carrier supporting carrier VPN design in this case: an ordinary Internet transit service is assumed to preserve customer MPLS labels.
D:This defect belongs to DSCP class marking at ingress, where the affected outcome is to mark customer traffic into a contracted provider forwarding class before queuing. It is not the direct failure mode identified for the carrier supporting carrier VPN design in this case: an ordinary Internet transit service is assumed to preserve customer MPLS labels.
Question 695
After Starlight IP Services deploys carrier supporting carrier VPN to let a carrier customer transport its own labeled VPN services over another carrier backbone, the primary acceptance check passes (the carrier CE can transport customer labeled traffic through the upstream core). What remaining operational risk should still be part of the design review?
- Rapid MAC moves need dampening and loop-protection policy.
- Incorrect WRED thresholds may penalize important traffic before congestion is severe.
- Carrier-of-carrier design introduces inter-provider trust and scale constraints.
- Marking policy must handle untrusted subscriber-supplied values.
Explanation
Correct Answer
C:The relevant boundary of carrier supporting carrier VPN is that carrier-of-carrier design introduces inter-provider trust and scale constraints. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to EVPN MAC/IP route type 2 in a different scenario where operators need to advertise a reachable customer MAC address over a provider EVPN fabric. For the deployed carrier supporting carrier VPN approach, the relevant caution is instead that carrier-of-carrier design introduces inter-provider trust and scale constraints.
B:This concern applies to weighted random early detection in a different scenario where operators need to avoid persistent tail-drop synchronization in a congested packet queue. For the deployed carrier supporting carrier VPN approach, the relevant caution is instead that carrier-of-carrier design introduces inter-provider trust and scale constraints.
D:This concern applies to DSCP class marking at ingress in a different scenario where operators need to mark customer traffic into a contracted provider forwarding class before queuing. For the deployed carrier supporting carrier VPN approach, the relevant caution is instead that carrier-of-carrier design introduces inter-provider trust and scale constraints.
Question 696
Northstar Carrier must carry customer multicast service across MPLS L3VPN provider edges. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- carrier supporting carrier VPN
- shared extranet route import
- MPLS L3VPN label stack
- multicast VPN PE distribution
Explanation
Correct Answer
D:multicast VPN PE distribution matches this requirement: the team should deploy supported mVPN provider routing and group distribution mechanisms. A relevant outcome would be that join and source state builds the appropriate provider multicast forwarding trees.
Incorrect Answers
A:carrier supporting carrier VPN instead addresses a different condition: let a carrier customer transport its own labeled VPN services over another carrier backbone. It would instead require you to build a supported carrier-supporting-carrier architecture with appropriate labeled route exchange, not the stated goal to carry customer multicast service across MPLS L3VPN provider edges.
B:shared extranet route import instead addresses a different condition: let only selected tenants reach a common internal service subnet. It would instead require you to create explicit selective route-target import or route-leak policies for the shared service, not the stated goal to carry customer multicast service across MPLS L3VPN provider edges.
C:MPLS L3VPN label stack instead addresses a different condition: carry a VPN packet through a core that does not hold customer routes. It would instead require you to push a VPN service label beneath an appropriate transport label at the ingress PE, not the stated goal to carry customer multicast service across MPLS L3VPN provider edges.
Question 697
At Orion Transit, the engineering change is approved for multicast VPN PE distribution. The specific goal is to carry customer multicast service across MPLS L3VPN provider edges. Which implementation step belongs in this change plan?
- Deploy supported mVPN provider routing and group distribution mechanisms.
- Build a supported carrier-supporting-carrier architecture with appropriate labeled route exchange.
- Create explicit selective route-target import or route-leak policies for the shared service.
- Push a VPN service label beneath an appropriate transport label at the ingress PE.
Explanation
Correct Answer
A:Implementing multicast VPN PE distribution requires the operator to deploy supported mVPN provider routing and group distribution mechanisms. This makes the required goal testable using evidence that join and source state builds the appropriate provider multicast forwarding trees.
Incorrect Answers
B:The proposed step is for carrier supporting carrier VPN, whose purpose is to let a carrier customer transport its own labeled VPN services over another carrier backbone. It would not perform the necessary multicast VPN PE distribution operation: deploy supported mVPN provider routing and group distribution mechanisms.
C:The proposed step is for shared extranet route import, whose purpose is to let only selected tenants reach a common internal service subnet. It would not perform the necessary multicast VPN PE distribution operation: deploy supported mVPN provider routing and group distribution mechanisms.
D:The proposed step is for MPLS L3VPN label stack, whose purpose is to carry a VPN packet through a core that does not hold customer routes. It would not perform the necessary multicast VPN PE distribution operation: deploy supported mVPN provider routing and group distribution mechanisms.
Question 698
Meridian Networks has deployed multicast VPN PE distribution to carry customer multicast service across MPLS L3VPN provider edges. The implementation step was to deploy supported mVPN provider routing and group distribution mechanisms. Which observation demonstrates that the requested service is working?
- The carrier CE can transport customer labeled traffic through the upstream core.
- Join and source state builds the appropriate provider multicast forwarding trees.
- Authorized VRFs reach the shared prefix while unrelated VRFs remain isolated.
- Core P routers switch transport labels and egress PE selects the customer VRF.
Explanation
Correct Answer
B:For multicast VPN PE distribution, successful verification means that join and source state builds the appropriate provider multicast forwarding trees. That evidence directly tests whether the provider can carry customer multicast service across MPLS L3VPN provider edges after deployment.
Incorrect Answers
A:The observation would verify carrier supporting carrier VPN under the separate requirement to let a carrier customer transport its own labeled VPN services over another carrier backbone. It does not demonstrate the needed multicast VPN PE distribution result: join and source state builds the appropriate provider multicast forwarding trees.
C:The observation would verify shared extranet route import under the separate requirement to let only selected tenants reach a common internal service subnet. It does not demonstrate the needed multicast VPN PE distribution result: join and source state builds the appropriate provider multicast forwarding trees.
D:The observation would verify MPLS L3VPN label stack under the separate requirement to carry a VPN packet through a core that does not hold customer routes. It does not demonstrate the needed multicast VPN PE distribution result: join and source state builds the appropriate provider multicast forwarding trees.
Question 699
While troubleshooting multicast VPN PE distribution at Kestrel Broadband, the intended acceptance outcome is still missing: join and source state builds the appropriate provider multicast forwarding trees. Which fault condition should be investigated first for this particular design?
- An ordinary Internet transit service is assumed to preserve customer MPLS labels.
- All customer routes are mutually imported to enable one shared application.
- Customer PIM groups exist at the CE but no provider multicast VPN distribution is available.
- Customer IP prefixes are installed in every P router instead of using labeled VPN transport.
Explanation
Correct Answer
C:The suspected defect directly frustrates multicast VPN PE distribution: customer PIM groups exist at the CE but no provider multicast VPN distribution is available. Correcting it should allow verification that join and source state builds the appropriate provider multicast forwarding trees.
Incorrect Answers
A:This defect belongs to carrier supporting carrier VPN, where the affected outcome is to let a carrier customer transport its own labeled VPN services over another carrier backbone. It is not the direct failure mode identified for the multicast VPN PE distribution design in this case: customer PIM groups exist at the CE but no provider multicast VPN distribution is available.
B:This defect belongs to shared extranet route import, where the affected outcome is to let only selected tenants reach a common internal service subnet. It is not the direct failure mode identified for the multicast VPN PE distribution design in this case: customer PIM groups exist at the CE but no provider multicast VPN distribution is available.
D:This defect belongs to MPLS L3VPN label stack, where the affected outcome is to carry a VPN packet through a core that does not hold customer routes. It is not the direct failure mode identified for the multicast VPN PE distribution design in this case: customer PIM groups exist at the CE but no provider multicast VPN distribution is available.
Question 700
After Harbor Metro deploys multicast VPN PE distribution to carry customer multicast service across MPLS L3VPN provider edges, the primary acceptance check passes (join and source state builds the appropriate provider multicast forwarding trees). What remaining operational risk should still be part of the design review?
- Carrier-of-carrier design introduces inter-provider trust and scale constraints.
- Overly broad import policies break isolation and complicate return routing.
- Label resolution and egress service state are both required for delivery.
- MVPN scaling depends on provider tree and receiver-state design.
Explanation
Correct Answer
D:The relevant boundary of multicast VPN PE distribution is that mVPN scaling depends on provider tree and receiver-state design. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to carrier supporting carrier VPN in a different scenario where operators need to let a carrier customer transport its own labeled VPN services over another carrier backbone. For the deployed multicast VPN PE distribution approach, the relevant caution is instead that mVPN scaling depends on provider tree and receiver-state design.
B:This concern applies to shared extranet route import in a different scenario where operators need to let only selected tenants reach a common internal service subnet. For the deployed multicast VPN PE distribution approach, the relevant caution is instead that mVPN scaling depends on provider tree and receiver-state design.
C:This concern applies to MPLS L3VPN label stack in a different scenario where operators need to carry a VPN packet through a core that does not hold customer routes. For the deployed multicast VPN PE distribution approach, the relevant caution is instead that mVPN scaling depends on provider tree and receiver-state design.
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) (350-501) Practice Tests