Question 720
After Bluebird Infrastructure deploys 802.1ad Q-in-Q tag separation to carry duplicate customer VLAN IDs from multiple subscribers over a provider Ethernet access network, the primary acceptance check passes (provider S-tag distinguishes the subscriber services independently of C-tag values). What remaining operational risk should still be part of the design review?
- Measurement accuracy depends on platform clock and path support.
- Intentional shared services require explicit route-leak controls.
- Label resolution and egress service state are both required for delivery.
- Link MTU must allow the additional Ethernet tag bytes.
Explanation
Correct Answer
D:The relevant boundary of 802.1ad Q-in-Q tag separation is that link MTU must allow the additional Ethernet tag bytes. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to Y.1731 Ethernet delay measurement in a different scenario where operators need to measure frame delay and loss across a provisioned Ethernet service. For the deployed 802.1ad Q-in-Q tag separation approach, the relevant caution is instead that link MTU must allow the additional Ethernet tag bytes.
B:This concern applies to VRF customer routing isolation in a different scenario where operators need to prevent two subscribers with overlapping private addresses from mixing their forwarding routes. For the deployed 802.1ad Q-in-Q tag separation approach, the relevant caution is instead that link MTU must allow the additional Ethernet tag bytes.
C:This concern applies to MPLS L3VPN label stack in a different scenario where operators need to carry a VPN packet through a core that does not hold customer routes. For the deployed 802.1ad Q-in-Q tag separation approach, the relevant caution is instead that link MTU must allow the additional Ethernet tag bytes.
Question 721
Horizon Exchange must reduce provider core visibility into customer MAC addresses for a large Ethernet service. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- 802.1ah provider backbone bridging
- 802.1ad Q-in-Q tag separation
- PIM-SSM source-specific join
- controlled Internet breakout
Explanation
Correct Answer
A:802.1ah provider backbone bridging matches this requirement: the team should apply PBB service encapsulation with backbone MAC and service identifiers where supported. A relevant outcome would be that the core switches backbone encapsulation while customer identities stay at the edge.
Incorrect Answers
B:802.1ad Q-in-Q tag separation instead addresses a different condition: carry duplicate customer VLAN IDs from multiple subscribers over a provider Ethernet access network. It would instead require you to push a provider service VLAN tag while preserving each customer's C-tag, not the stated goal to reduce provider core visibility into customer MAC addresses for a large Ethernet service.
C:PIM-SSM source-specific join instead addresses a different condition: let subscribers request an explicitly selected multicast source and group pair. It would instead require you to use SSM with source-aware membership such as IGMPv3 on supported receivers, not the stated goal to reduce provider core visibility into customer MAC addresses for a large Ethernet service.
D:controlled Internet breakout instead addresses a different condition: provide Internet access for an L3VPN tenant without leaking private customer prefixes. It would instead require you to place an explicit default-route or shared-services handoff inside the authorized VPN routing design, not the stated goal to reduce provider core visibility into customer MAC addresses for a large Ethernet service.
Question 722
At Cedar Wireless, the engineering change is approved for 802.1ah provider backbone bridging. The specific goal is to reduce provider core visibility into customer MAC addresses for a large Ethernet service. Which implementation step belongs in this change plan?
- Push a provider service VLAN tag while preserving each customer's C-tag.
- Apply PBB service encapsulation with backbone MAC and service identifiers where supported.
- Use SSM with source-aware membership such as IGMPv3 on supported receivers.
- Place an explicit default-route or shared-services handoff inside the authorized VPN routing design.
Explanation
Correct Answer
B:Implementing 802.1ah provider backbone bridging requires the operator to apply PBB service encapsulation with backbone MAC and service identifiers where supported. This makes the required goal testable using evidence that the core switches backbone encapsulation while customer identities stay at the edge.
Incorrect Answers
A:The proposed step is for 802.1ad Q-in-Q tag separation, whose purpose is to carry duplicate customer VLAN IDs from multiple subscribers over a provider Ethernet access network. It would not perform the necessary 802.1ah provider backbone bridging operation: apply PBB service encapsulation with backbone MAC and service identifiers where supported.
C:The proposed step is for PIM-SSM source-specific join, whose purpose is to let subscribers request an explicitly selected multicast source and group pair. It would not perform the necessary 802.1ah provider backbone bridging operation: apply PBB service encapsulation with backbone MAC and service identifiers where supported.
D:The proposed step is for controlled Internet breakout, whose purpose is to provide Internet access for an L3VPN tenant without leaking private customer prefixes. It would not perform the necessary 802.1ah provider backbone bridging operation: apply PBB service encapsulation with backbone MAC and service identifiers where supported.
Question 723
Willow Regional has deployed 802.1ah provider backbone bridging to reduce provider core visibility into customer MAC addresses for a large Ethernet service. The implementation step was to apply PBB service encapsulation with backbone MAC and service identifiers where supported. Which observation demonstrates that the requested service is working?
- Provider S-tag distinguishes the subscriber services independently of C-tag values.
- The forwarding entry matches the requested source and group without RP discovery.
- The core switches backbone encapsulation while customer identities stay at the edge.
- Tenant traffic reaches a controlled egress while internal VPN routes remain isolated.
Explanation
Correct Answer
C:For 802.1ah provider backbone bridging, successful verification means that the core switches backbone encapsulation while customer identities stay at the edge. That evidence directly tests whether the provider can reduce provider core visibility into customer MAC addresses for a large Ethernet service after deployment.
Incorrect Answers
A:The observation would verify 802.1ad Q-in-Q tag separation under the separate requirement to carry duplicate customer VLAN IDs from multiple subscribers over a provider Ethernet access network. It does not demonstrate the needed 802.1ah provider backbone bridging result: the core switches backbone encapsulation while customer identities stay at the edge.
B:The observation would verify PIM-SSM source-specific join under the separate requirement to let subscribers request an explicitly selected multicast source and group pair. It does not demonstrate the needed 802.1ah provider backbone bridging result: the core switches backbone encapsulation while customer identities stay at the edge.
D:The observation would verify controlled Internet breakout under the separate requirement to provide Internet access for an L3VPN tenant without leaking private customer prefixes. It does not demonstrate the needed 802.1ah provider backbone bridging result: the core switches backbone encapsulation while customer identities stay at the edge.
Question 724
While troubleshooting 802.1ah provider backbone bridging at Atlas Backbone, the intended acceptance outcome is still missing: the core switches backbone encapsulation while customer identities stay at the edge. Which fault condition should be investigated first for this particular design?
- Customer C-tag alone is treated as globally unique across unrelated tenants.
- An any-source IGMPv2 membership is used expecting source-specific filtering.
- A global default route is assumed automatically present in every VRF.
- The provider core learns every subscriber MAC despite planned PBB isolation.
Explanation
Correct Answer
D:The suspected defect directly frustrates 802.1ah provider backbone bridging: the provider core learns every subscriber MAC despite planned PBB isolation. Correcting it should allow verification that the core switches backbone encapsulation while customer identities stay at the edge.
Incorrect Answers
A:This defect belongs to 802.1ad Q-in-Q tag separation, where the affected outcome is to carry duplicate customer VLAN IDs from multiple subscribers over a provider Ethernet access network. It is not the direct failure mode identified for the 802.1ah provider backbone bridging design in this case: the provider core learns every subscriber MAC despite planned PBB isolation.
B:This defect belongs to PIM-SSM source-specific join, where the affected outcome is to let subscribers request an explicitly selected multicast source and group pair. It is not the direct failure mode identified for the 802.1ah provider backbone bridging design in this case: the provider core learns every subscriber MAC despite planned PBB isolation.
C:This defect belongs to controlled Internet breakout, where the affected outcome is to provide Internet access for an L3VPN tenant without leaking private customer prefixes. It is not the direct failure mode identified for the 802.1ah provider backbone bridging design in this case: the provider core learns every subscriber MAC despite planned PBB isolation.
Question 725
After Starlight IP Services deploys 802.1ah provider backbone bridging to reduce provider core visibility into customer MAC addresses for a large Ethernet service, the primary acceptance check passes (the core switches backbone encapsulation while customer identities stay at the edge). What remaining operational risk should still be part of the design review?
- Edge encapsulation points and service ID mapping require consistent configuration.
- Link MTU must allow the additional Ethernet tag bytes.
- The receiver must know and signal the intended multicast source.
- Stateful firewall and return-path policies must match the breakout design.
Explanation
Correct Answer
A:The relevant boundary of 802.1ah provider backbone bridging is that edge encapsulation points and service ID mapping require consistent configuration. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
B:This concern applies to 802.1ad Q-in-Q tag separation in a different scenario where operators need to carry duplicate customer VLAN IDs from multiple subscribers over a provider Ethernet access network. For the deployed 802.1ah provider backbone bridging approach, the relevant caution is instead that edge encapsulation points and service ID mapping require consistent configuration.
C:This concern applies to PIM-SSM source-specific join in a different scenario where operators need to let subscribers request an explicitly selected multicast source and group pair. For the deployed 802.1ah provider backbone bridging approach, the relevant caution is instead that edge encapsulation points and service ID mapping require consistent configuration.
D:This concern applies to controlled Internet breakout in a different scenario where operators need to provide Internet access for an L3VPN tenant without leaking private customer prefixes. For the deployed 802.1ah provider backbone bridging approach, the relevant caution is instead that edge encapsulation points and service ID mapping require consistent configuration.
Question 726
Northstar Carrier must protect a Carrier Ethernet ring from forwarding loops during normal operation. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- VLAN tag pop at handoff
- G.8032 Ethernet ring protection
- PIM-SSM source-specific join
- traffic shaping smoothing
Explanation
Correct Answer
B:G.8032 Ethernet ring protection matches this requirement: the team should configure Ethernet ring protection with its ring protection link behavior. A relevant outcome would be that one designated ring section is blocked in steady state and opens for a failure.
Incorrect Answers
A:VLAN tag pop at handoff instead addresses a different condition: deliver untagged Ethernet to a customer while transporting a provider service tag. It would instead require you to apply an explicit VLAN tag rewrite pop operation at the intended EFP boundary, not the stated goal to protect a Carrier Ethernet ring from forwarding loops during normal operation.
C:PIM-SSM source-specific join instead addresses a different condition: let subscribers request an explicitly selected multicast source and group pair. It would instead require you to use SSM with source-aware membership such as IGMPv3 on supported receivers, not the stated goal to protect a Carrier Ethernet ring from forwarding loops during normal operation.
D:traffic shaping smoothing instead addresses a different condition: smooth an egress stream to a slower contracted handoff rather than dropping every burst. It would instead require you to configure class-based shaping with an appropriate target rate, not the stated goal to protect a Carrier Ethernet ring from forwarding loops during normal operation.
Question 727
At Orion Transit, the engineering change is approved for G.8032 Ethernet ring protection. The specific goal is to protect a Carrier Ethernet ring from forwarding loops during normal operation. Which implementation step belongs in this change plan?
- Apply an explicit VLAN tag rewrite pop operation at the intended EFP boundary.
- Use SSM with source-aware membership such as IGMPv3 on supported receivers.
- Configure Ethernet ring protection with its ring protection link behavior.
- Configure class-based shaping with an appropriate target rate.
Explanation
Correct Answer
C:Implementing G.8032 Ethernet ring protection requires the operator to configure Ethernet ring protection with its ring protection link behavior. This makes the required goal testable using evidence that one designated ring section is blocked in steady state and opens for a failure.
Incorrect Answers
A:The proposed step is for VLAN tag pop at handoff, whose purpose is to deliver untagged Ethernet to a customer while transporting a provider service tag. It would not perform the necessary G.8032 Ethernet ring protection operation: configure Ethernet ring protection with its ring protection link behavior.
B:The proposed step is for PIM-SSM source-specific join, whose purpose is to let subscribers request an explicitly selected multicast source and group pair. It would not perform the necessary G.8032 Ethernet ring protection operation: configure Ethernet ring protection with its ring protection link behavior.
D:The proposed step is for traffic shaping smoothing, whose purpose is to smooth an egress stream to a slower contracted handoff rather than dropping every burst. It would not perform the necessary G.8032 Ethernet ring protection operation: configure Ethernet ring protection with its ring protection link behavior.
Question 728
Meridian Networks has deployed G.8032 Ethernet ring protection to protect a Carrier Ethernet ring from forwarding loops during normal operation. The implementation step was to configure Ethernet ring protection with its ring protection link behavior. Which observation demonstrates that the requested service is working?
- The customer handoff sends untagged frames while core transport retains its expected tag.
- The forwarding entry matches the requested source and group without RP discovery.
- Queued traffic is paced onto the handoff within the target rate.
- One designated ring section is blocked in steady state and opens for a failure.
Explanation
Correct Answer
D:For G.8032 Ethernet ring protection, successful verification means that one designated ring section is blocked in steady state and opens for a failure. That evidence directly tests whether the provider can protect a Carrier Ethernet ring from forwarding loops during normal operation after deployment.
Incorrect Answers
A:The observation would verify VLAN tag pop at handoff under the separate requirement to deliver untagged Ethernet to a customer while transporting a provider service tag. It does not demonstrate the needed G.8032 Ethernet ring protection result: one designated ring section is blocked in steady state and opens for a failure.
B:The observation would verify PIM-SSM source-specific join under the separate requirement to let subscribers request an explicitly selected multicast source and group pair. It does not demonstrate the needed G.8032 Ethernet ring protection result: one designated ring section is blocked in steady state and opens for a failure.
C:The observation would verify traffic shaping smoothing under the separate requirement to smooth an egress stream to a slower contracted handoff rather than dropping every burst. It does not demonstrate the needed G.8032 Ethernet ring protection result: one designated ring section is blocked in steady state and opens for a failure.
Question 729
While troubleshooting G.8032 Ethernet ring protection at Kestrel Broadband, the intended acceptance outcome is still missing: one designated ring section is blocked in steady state and opens for a failure. Which fault condition should be investigated first for this particular design?
- All ring links forward at once and create an Ethernet broadcast loop.
- The S-tag leaks to a customer interface contracted for untagged delivery.
- An any-source IGMPv2 membership is used expecting source-specific filtering.
- Policing discards transient bursts instead of buffering them for a slower link.
Explanation
Correct Answer
A:The suspected defect directly frustrates G.8032 Ethernet ring protection: all ring links forward at once and create an Ethernet broadcast loop. Correcting it should allow verification that one designated ring section is blocked in steady state and opens for a failure.
Incorrect Answers
B:This defect belongs to VLAN tag pop at handoff, where the affected outcome is to deliver untagged Ethernet to a customer while transporting a provider service tag. It is not the direct failure mode identified for the G.8032 Ethernet ring protection design in this case: all ring links forward at once and create an Ethernet broadcast loop.
C:This defect belongs to PIM-SSM source-specific join, where the affected outcome is to let subscribers request an explicitly selected multicast source and group pair. It is not the direct failure mode identified for the G.8032 Ethernet ring protection design in this case: all ring links forward at once and create an Ethernet broadcast loop.
D:This defect belongs to traffic shaping smoothing, where the affected outcome is to smooth an egress stream to a slower contracted handoff rather than dropping every burst. It is not the direct failure mode identified for the G.8032 Ethernet ring protection design in this case: all ring links forward at once and create an Ethernet broadcast loop.
Question 730
After Harbor Metro deploys G.8032 Ethernet ring protection to protect a Carrier Ethernet ring from forwarding loops during normal operation, the primary acceptance check passes (one designated ring section is blocked in steady state and opens for a failure). What remaining operational risk should still be part of the design review?
- Tag rewrite direction must be configured symmetrically on return traffic.
- Ring protection timers determine switchover and transient disruption.
- The receiver must know and signal the intended multicast source.
- Excess offered load can still cause queue delay or eventual buffer drops.
Explanation
Correct Answer
B:The relevant boundary of G.8032 Ethernet ring protection is that ring protection timers determine switchover and transient disruption. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to VLAN tag pop at handoff in a different scenario where operators need to deliver untagged Ethernet to a customer while transporting a provider service tag. For the deployed G.8032 Ethernet ring protection approach, the relevant caution is instead that ring protection timers determine switchover and transient disruption.
C:This concern applies to PIM-SSM source-specific join in a different scenario where operators need to let subscribers request an explicitly selected multicast source and group pair. For the deployed G.8032 Ethernet ring protection approach, the relevant caution is instead that ring protection timers determine switchover and transient disruption.
D:This concern applies to traffic shaping smoothing in a different scenario where operators need to smooth an egress stream to a slower contracted handoff rather than dropping every burst. For the deployed G.8032 Ethernet ring protection approach, the relevant caution is instead that ring protection timers determine switchover and transient disruption.
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) (350-501) Practice Tests