Question 770
After Starlight IP Services deploys MP-BGP vpnv4 peering to exchange labeled VPN-IPv4 reachability among provider PEs, the primary acceptance check passes (remote PEs learn RD-qualified VPN NLRI with corresponding next-hop and labels). What remaining operational risk should still be part of the design review?
- Temporary duplicate site advertisements require careful route preference.
- PE loopbacks and MPLS transport must be reachable independent of VPN routes.
- Tag rewrite direction must be configured symmetrically on return traffic.
- Route-target and next-hop resolution remain prerequisites.
Explanation
Correct Answer
B:The relevant boundary of MP-BGP vpnv4 peering is that PE loopbacks and MPLS transport must be reachable independent of VPN routes. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to L3VPN overlapping subnet migration in a different scenario where operators need to move a customer site to a new PE while another tenant uses the same IP block. For the deployed MP-BGP vpnv4 peering approach, the relevant caution is instead that PE loopbacks and MPLS transport must be reachable independent of VPN routes.
C:This concern applies to VLAN tag pop at handoff in a different scenario where operators need to deliver untagged Ethernet to a customer while transporting a provider service tag. For the deployed MP-BGP vpnv4 peering approach, the relevant caution is instead that PE loopbacks and MPLS transport must be reachable independent of VPN routes.
D:This concern applies to EVPN IP prefix type 5 in a different scenario where operators need to advertise an IP prefix through a routed EVPN service without relying solely on individual MAC advertisements. For the deployed MP-BGP vpnv4 peering approach, the relevant caution is instead that PE loopbacks and MPLS transport must be reachable independent of VPN routes.
Question 771
Northstar Carrier must carry a VPN packet through a core that does not hold customer routes. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- PE to CE BGP routing
- Y.1731 Ethernet delay measurement
- MPLS L3VPN label stack
- VLAN tag pop at handoff
Explanation
Correct Answer
C:MPLS L3VPN label stack matches this requirement: the team should push a VPN service label beneath an appropriate transport label at the ingress PE. A relevant outcome would be that core P routers switch transport labels and egress PE selects the customer VRF.
Incorrect Answers
A:PE to CE BGP routing instead addresses a different condition: exchange customer subnet routes at a provider L3VPN boundary. It would instead require you to establish per-VRF BGP adjacency with suitable inbound and outbound policy, not the stated goal to carry a VPN packet through a core that does not hold customer routes.
B:Y.1731 Ethernet delay measurement instead addresses a different condition: measure frame delay and loss across a provisioned Ethernet service. It would instead require you to enable suitable service OAM performance measurement on supported MEPs, not the stated goal to carry a VPN packet through a core that does not hold customer routes.
D:VLAN tag pop at handoff instead addresses a different condition: deliver untagged Ethernet to a customer while transporting a provider service tag. It would instead require you to apply an explicit VLAN tag rewrite pop operation at the intended EFP boundary, not the stated goal to carry a VPN packet through a core that does not hold customer routes.
Question 772
At Orion Transit, the engineering change is approved for MPLS L3VPN label stack. The specific goal is to carry a VPN packet through a core that does not hold customer routes. Which implementation step belongs in this change plan?
- Establish per-VRF BGP adjacency with suitable inbound and outbound policy.
- Enable suitable service OAM performance measurement on supported MEPs.
- Apply an explicit VLAN tag rewrite pop operation at the intended EFP boundary.
- Push a VPN service label beneath an appropriate transport label at the ingress PE.
Explanation
Correct Answer
D:Implementing MPLS L3VPN label stack requires the operator to push a VPN service label beneath an appropriate transport label at the ingress PE. This makes the required goal testable using evidence that core P routers switch transport labels and egress PE selects the customer VRF.
Incorrect Answers
A:The proposed step is for PE to CE BGP routing, whose purpose is to exchange customer subnet routes at a provider L3VPN boundary. It would not perform the necessary MPLS L3VPN label stack operation: push a VPN service label beneath an appropriate transport label at the ingress PE.
B:The proposed step is for Y.1731 Ethernet delay measurement, whose purpose is to measure frame delay and loss across a provisioned Ethernet service. It would not perform the necessary MPLS L3VPN label stack operation: push a VPN service label beneath an appropriate transport label at the ingress PE.
C:The proposed step is for VLAN tag pop at handoff, whose purpose is to deliver untagged Ethernet to a customer while transporting a provider service tag. It would not perform the necessary MPLS L3VPN label stack operation: push a VPN service label beneath an appropriate transport label at the ingress PE.
Question 773
Meridian Networks has deployed MPLS L3VPN label stack to carry a VPN packet through a core that does not hold customer routes. The implementation step was to push a VPN service label beneath an appropriate transport label at the ingress PE. Which observation demonstrates that the requested service is working?
- Core P routers switch transport labels and egress PE selects the customer VRF.
- Authorized customer prefixes appear in the matching PE VRF.
- The provider obtains delay or frame-loss measurements for the contracted EVC.
- The customer handoff sends untagged frames while core transport retains its expected tag.
Explanation
Correct Answer
A:For MPLS L3VPN label stack, successful verification means that core P routers switch transport labels and egress PE selects the customer VRF. That evidence directly tests whether the provider can carry a VPN packet through a core that does not hold customer routes after deployment.
Incorrect Answers
B:The observation would verify PE to CE BGP routing under the separate requirement to exchange customer subnet routes at a provider L3VPN boundary. It does not demonstrate the needed MPLS L3VPN label stack result: core P routers switch transport labels and egress PE selects the customer VRF.
C:The observation would verify Y.1731 Ethernet delay measurement under the separate requirement to measure frame delay and loss across a provisioned Ethernet service. It does not demonstrate the needed MPLS L3VPN label stack result: core P routers switch transport labels and egress PE selects the customer VRF.
D:The observation would verify VLAN tag pop at handoff under the separate requirement to deliver untagged Ethernet to a customer while transporting a provider service tag. It does not demonstrate the needed MPLS L3VPN label stack result: core P routers switch transport labels and egress PE selects the customer VRF.
Question 774
While troubleshooting MPLS L3VPN label stack at Kestrel Broadband, the intended acceptance outcome is still missing: core P routers switch transport labels and egress PE selects the customer VRF. Which fault condition should be investigated first for this particular design?
- The CE peering is configured only in global BGP rather than the correct VRF.
- Customer IP prefixes are installed in every P router instead of using labeled VPN transport.
- Physical link utilization is used as a substitute for per-service delay measurement.
- The S-tag leaks to a customer interface contracted for untagged delivery.
Explanation
Correct Answer
B:The suspected defect directly frustrates MPLS L3VPN label stack: customer IP prefixes are installed in every P router instead of using labeled VPN transport. Correcting it should allow verification that core P routers switch transport labels and egress PE selects the customer VRF.
Incorrect Answers
A:This defect belongs to PE to CE BGP routing, where the affected outcome is to exchange customer subnet routes at a provider L3VPN boundary. It is not the direct failure mode identified for the MPLS L3VPN label stack design in this case: customer IP prefixes are installed in every P router instead of using labeled VPN transport.
C:This defect belongs to Y.1731 Ethernet delay measurement, where the affected outcome is to measure frame delay and loss across a provisioned Ethernet service. It is not the direct failure mode identified for the MPLS L3VPN label stack design in this case: customer IP prefixes are installed in every P router instead of using labeled VPN transport.
D:This defect belongs to VLAN tag pop at handoff, where the affected outcome is to deliver untagged Ethernet to a customer while transporting a provider service tag. It is not the direct failure mode identified for the MPLS L3VPN label stack design in this case: customer IP prefixes are installed in every P router instead of using labeled VPN transport.
Question 775
After Harbor Metro deploys MPLS L3VPN label stack to carry a VPN packet through a core that does not hold customer routes, the primary acceptance check passes (core P routers switch transport labels and egress PE selects the customer VRF). What remaining operational risk should still be part of the design review?
- Customer AS loop-prevention design needs review across multiple sites.
- Measurement accuracy depends on platform clock and path support.
- Label resolution and egress service state are both required for delivery.
- Tag rewrite direction must be configured symmetrically on return traffic.
Explanation
Correct Answer
C:The relevant boundary of MPLS L3VPN label stack is that label resolution and egress service state are both required for delivery. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to PE to CE BGP routing in a different scenario where operators need to exchange customer subnet routes at a provider L3VPN boundary. For the deployed MPLS L3VPN label stack approach, the relevant caution is instead that label resolution and egress service state are both required for delivery.
B:This concern applies to Y.1731 Ethernet delay measurement in a different scenario where operators need to measure frame delay and loss across a provisioned Ethernet service. For the deployed MPLS L3VPN label stack approach, the relevant caution is instead that label resolution and egress service state are both required for delivery.
D:This concern applies to VLAN tag pop at handoff in a different scenario where operators need to deliver untagged Ethernet to a customer while transporting a provider service tag. For the deployed MPLS L3VPN label stack approach, the relevant caution is instead that label resolution and egress service state are both required for delivery.
Question 776
Summit Service Provider must exchange customer subnet routes at a provider L3VPN boundary. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- route target VPN membership
- inter-AS VPN option A separation
- weighted random early detection
- PE to CE BGP routing
Explanation
Correct Answer
D:PE to CE BGP routing matches this requirement: the team should establish per-VRF BGP adjacency with suitable inbound and outbound policy. A relevant outcome would be that authorized customer prefixes appear in the matching PE VRF.
Incorrect Answers
A:route target VPN membership instead addresses a different condition: control which provider-edge VRFs import a shared customer's VPN routes. It would instead require you to configure matching import and export route-target policies between authorized VRFs, not the stated goal to exchange customer subnet routes at a provider L3VPN boundary.
B:inter-AS VPN option A separation instead addresses a different condition: interconnect L3VPN sites across two providers without sharing their internal VPNv4 BGP tables. It would instead require you to exchange isolated VRF routes over explicit per-VRF handoff subinterfaces, not the stated goal to exchange customer subnet routes at a provider L3VPN boundary.
C:weighted random early detection instead addresses a different condition: avoid persistent tail-drop synchronization in a congested packet queue. It would instead require you to configure supported WRED thresholds and drop probability by traffic class, not the stated goal to exchange customer subnet routes at a provider L3VPN boundary.
Question 777
At Ridgeway Networks, the engineering change is approved for PE to CE BGP routing. The specific goal is to exchange customer subnet routes at a provider L3VPN boundary. Which implementation step belongs in this change plan?
- Establish per-VRF BGP adjacency with suitable inbound and outbound policy.
- Configure matching import and export route-target policies between authorized VRFs.
- Exchange isolated VRF routes over explicit per-VRF handoff subinterfaces.
- Configure supported WRED thresholds and drop probability by traffic class.
Explanation
Correct Answer
A:Implementing PE to CE BGP routing requires the operator to establish per-VRF BGP adjacency with suitable inbound and outbound policy. This makes the required goal testable using evidence that authorized customer prefixes appear in the matching PE VRF.
Incorrect Answers
B:The proposed step is for route target VPN membership, whose purpose is to control which provider-edge VRFs import a shared customer's VPN routes. It would not perform the necessary PE to CE BGP routing operation: establish per-VRF BGP adjacency with suitable inbound and outbound policy.
C:The proposed step is for inter-AS VPN option A separation, whose purpose is to interconnect L3VPN sites across two providers without sharing their internal VPNv4 BGP tables. It would not perform the necessary PE to CE BGP routing operation: establish per-VRF BGP adjacency with suitable inbound and outbound policy.
D:The proposed step is for weighted random early detection, whose purpose is to avoid persistent tail-drop synchronization in a congested packet queue. It would not perform the necessary PE to CE BGP routing operation: establish per-VRF BGP adjacency with suitable inbound and outbound policy.
Question 778
Lakeside Transport has deployed PE to CE BGP routing to exchange customer subnet routes at a provider L3VPN boundary. The implementation step was to establish per-VRF BGP adjacency with suitable inbound and outbound policy. Which observation demonstrates that the requested service is working?
- Only the intended remote VRFs import the labeled customer routes.
- Authorized customer prefixes appear in the matching PE VRF.
- Customer connectivity works while each AS keeps its own VPN control plane.
- Drop probability rises before queue exhaustion while sensitive classes remain prioritized.
Explanation
Correct Answer
B:For PE to CE BGP routing, successful verification means that authorized customer prefixes appear in the matching PE VRF. That evidence directly tests whether the provider can exchange customer subnet routes at a provider L3VPN boundary after deployment.
Incorrect Answers
A:The observation would verify route target VPN membership under the separate requirement to control which provider-edge VRFs import a shared customer's VPN routes. It does not demonstrate the needed PE to CE BGP routing result: authorized customer prefixes appear in the matching PE VRF.
C:The observation would verify inter-AS VPN option A separation under the separate requirement to interconnect L3VPN sites across two providers without sharing their internal VPNv4 BGP tables. It does not demonstrate the needed PE to CE BGP routing result: authorized customer prefixes appear in the matching PE VRF.
D:The observation would verify weighted random early detection under the separate requirement to avoid persistent tail-drop synchronization in a congested packet queue. It does not demonstrate the needed PE to CE BGP routing result: authorized customer prefixes appear in the matching PE VRF.
Question 779
While troubleshooting PE to CE BGP routing at Coastal Communications, the intended acceptance outcome is still missing: authorized customer prefixes appear in the matching PE VRF. Which fault condition should be investigated first for this particular design?
- Matching RDs are incorrectly assumed to grant VPN route import authorization.
- One provider assumes VPN label transport is shared over a plain VRF interface.
- The CE peering is configured only in global BGP rather than the correct VRF.
- The queue only drops packets after reaching a hard tail limit.
Explanation
Correct Answer
C:The suspected defect directly frustrates PE to CE BGP routing: the CE peering is configured only in global BGP rather than the correct VRF. Correcting it should allow verification that authorized customer prefixes appear in the matching PE VRF.
Incorrect Answers
A:This defect belongs to route target VPN membership, where the affected outcome is to control which provider-edge VRFs import a shared customer's VPN routes. It is not the direct failure mode identified for the PE to CE BGP routing design in this case: the CE peering is configured only in global BGP rather than the correct VRF.
B:This defect belongs to inter-AS VPN option A separation, where the affected outcome is to interconnect L3VPN sites across two providers without sharing their internal VPNv4 BGP tables. It is not the direct failure mode identified for the PE to CE BGP routing design in this case: the CE peering is configured only in global BGP rather than the correct VRF.
D:This defect belongs to weighted random early detection, where the affected outcome is to avoid persistent tail-drop synchronization in a congested packet queue. It is not the direct failure mode identified for the PE to CE BGP routing design in this case: the CE peering is configured only in global BGP rather than the correct VRF.
Question 780
After Bluebird Infrastructure deploys PE to CE BGP routing to exchange customer subnet routes at a provider L3VPN boundary, the primary acceptance check passes (authorized customer prefixes appear in the matching PE VRF). What remaining operational risk should still be part of the design review?
- Incorrect route targets can leak sensitive routes across tenants.
- Per-VRF handoff scaling and operational overhead grow with service count.
- Incorrect WRED thresholds may penalize important traffic before congestion is severe.
- Customer AS loop-prevention design needs review across multiple sites.
Explanation
Correct Answer
D:The relevant boundary of PE to CE BGP routing is that customer AS loop-prevention design needs review across multiple sites. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to route target VPN membership in a different scenario where operators need to control which provider-edge VRFs import a shared customer's VPN routes. For the deployed PE to CE BGP routing approach, the relevant caution is instead that customer AS loop-prevention design needs review across multiple sites.
B:This concern applies to inter-AS VPN option A separation in a different scenario where operators need to interconnect L3VPN sites across two providers without sharing their internal VPNv4 BGP tables. For the deployed PE to CE BGP routing approach, the relevant caution is instead that customer AS loop-prevention design needs review across multiple sites.
C:This concern applies to weighted random early detection in a different scenario where operators need to avoid persistent tail-drop synchronization in a congested packet queue. For the deployed PE to CE BGP routing approach, the relevant caution is instead that customer AS loop-prevention design needs review across multiple sites.
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) (350-501) Practice Tests