Question 70
After Bluebird Infrastructure deploys uniform MPLS QoS to carry a consistent class treatment across IP-to-MPLS transitions, the primary acceptance check passes (the observed IP and MPLS class indicators follow the uniform forwarding policy). What remaining operational risk should still be part of the design review?
- Label generation and middlebox behavior vary across implementations.
- Customers may observe provider-induced marking propagation at the edge.
- Certificate rollover must be coordinated to prevent management outages.
- The operator still needs rollback planning for service-affecting errors.
Explanation
Correct Answer
B:The relevant boundary of uniform MPLS QoS is that customers may observe provider-induced marking propagation at the edge. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to IPv6 flow label distinction in a different scenario where operators need to retain IPv6 per-flow classification clues without mistaking the flow label for a QoS reservation. For the deployed uniform MPLS QoS approach, the relevant caution is instead that customers may observe provider-induced marking propagation at the edge.
C:This concern applies to management API certificate trust in a different scenario where operators need to protect provider management APIs from accepting an untrusted endpoint. For the deployed uniform MPLS QoS approach, the relevant caution is instead that customers may observe provider-induced marking propagation at the edge.
D:This concern applies to IOS XR committed transaction in a different scenario where operators need to deploy an IOS XR configuration change with explicit commit semantics. For the deployed uniform MPLS QoS approach, the relevant caution is instead that customers may observe provider-induced marking propagation at the edge.
Question 71
Horizon Exchange must protect delay-sensitive packet classes during congestion on a provider egress. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- short-pipe MPLS QoS
- control-plane punt protection
- low latency priority queue
- customer edge ACL anti-spoof
Explanation
Correct Answer
C:low latency priority queue matches this requirement: the team should classify approved voice traffic into a bounded strict-priority low-latency queue. A relevant outcome would be that priority-class latency remains bounded while other classes retain service.
Incorrect Answers
A:short-pipe MPLS QoS instead addresses a different condition: keep customer IP traffic marking intact while applying independent provider-core forwarding treatment. It would instead require you to classify provider-core packets using MPLS Traffic Class without necessarily rewriting customer IP DSCP, not the stated goal to protect delay-sensitive packet classes during congestion on a provider egress.
B:control-plane punt protection instead addresses a different condition: limit exception traffic that can consume service-provider routing CPU. It would instead require you to apply CoPP or IOS XR LPTS punt policing to selected control-plane classes, not the stated goal to protect delay-sensitive packet classes during congestion on a provider egress.
D:customer edge ACL anti-spoof instead addresses a different condition: permit only delegated customer source prefixes at a provider access boundary. It would instead require you to apply an ingress ACL matching the customer's assigned source address space, not the stated goal to protect delay-sensitive packet classes during congestion on a provider egress.
Question 72
At Cedar Wireless, the engineering change is approved for low latency priority queue. The specific goal is to protect delay-sensitive packet classes during congestion on a provider egress. Which implementation step belongs in this change plan?
- Classify provider-core packets using MPLS Traffic Class without necessarily rewriting customer IP DSCP.
- Apply CoPP or IOS XR LPTS punt policing to selected control-plane classes.
- Apply an ingress ACL matching the customer's assigned source address space.
- Classify approved voice traffic into a bounded strict-priority low-latency queue.
Explanation
Correct Answer
D:Implementing low latency priority queue requires the operator to classify approved voice traffic into a bounded strict-priority low-latency queue. This makes the required goal testable using evidence that priority-class latency remains bounded while other classes retain service.
Incorrect Answers
A:The proposed step is for short-pipe MPLS QoS, whose purpose is to keep customer IP traffic marking intact while applying independent provider-core forwarding treatment. It would not perform the necessary low latency priority queue operation: classify approved voice traffic into a bounded strict-priority low-latency queue.
B:The proposed step is for control-plane punt protection, whose purpose is to limit exception traffic that can consume service-provider routing CPU. It would not perform the necessary low latency priority queue operation: classify approved voice traffic into a bounded strict-priority low-latency queue.
C:The proposed step is for customer edge ACL anti-spoof, whose purpose is to permit only delegated customer source prefixes at a provider access boundary. It would not perform the necessary low latency priority queue operation: classify approved voice traffic into a bounded strict-priority low-latency queue.
Question 73
Willow Regional has deployed low latency priority queue to protect delay-sensitive packet classes during congestion on a provider egress. The implementation step was to classify approved voice traffic into a bounded strict-priority low-latency queue. Which observation demonstrates that the requested service is working?
- Priority-class latency remains bounded while other classes retain service.
- The provider queue selection follows TC and preserved IP markings emerge at egress.
- Normal protocol adjacencies remain stable while excess punts are counted or dropped.
- Permitted customer sources pass and nonassigned sources are denied and counted.
Explanation
Correct Answer
A:For low latency priority queue, successful verification means that priority-class latency remains bounded while other classes retain service. That evidence directly tests whether the provider can protect delay-sensitive packet classes during congestion on a provider egress after deployment.
Incorrect Answers
B:The observation would verify short-pipe MPLS QoS under the separate requirement to keep customer IP traffic marking intact while applying independent provider-core forwarding treatment. It does not demonstrate the needed low latency priority queue result: priority-class latency remains bounded while other classes retain service.
C:The observation would verify control-plane punt protection under the separate requirement to limit exception traffic that can consume service-provider routing CPU. It does not demonstrate the needed low latency priority queue result: priority-class latency remains bounded while other classes retain service.
D:The observation would verify customer edge ACL anti-spoof under the separate requirement to permit only delegated customer source prefixes at a provider access boundary. It does not demonstrate the needed low latency priority queue result: priority-class latency remains bounded while other classes retain service.
Question 74
While troubleshooting low latency priority queue at Atlas Backbone, the intended acceptance outcome is still missing: priority-class latency remains bounded while other classes retain service. Which fault condition should be investigated first for this particular design?
- The provider core accidentally trusts and changes the customer's IP DSCP.
- A weighted bulk-data queue is mistaken for the voice priority class.
- A data-plane ACL is changed but high-rate routing-CPU punts remain unrestricted.
- An egress ACL is installed where it never checks inbound spoofed packets.
Explanation
Correct Answer
B:The suspected defect directly frustrates low latency priority queue: a weighted bulk-data queue is mistaken for the voice priority class. Correcting it should allow verification that priority-class latency remains bounded while other classes retain service.
Incorrect Answers
A:This defect belongs to short-pipe MPLS QoS, where the affected outcome is to keep customer IP traffic marking intact while applying independent provider-core forwarding treatment. It is not the direct failure mode identified for the low latency priority queue design in this case: a weighted bulk-data queue is mistaken for the voice priority class.
C:This defect belongs to control-plane punt protection, where the affected outcome is to limit exception traffic that can consume service-provider routing CPU. It is not the direct failure mode identified for the low latency priority queue design in this case: a weighted bulk-data queue is mistaken for the voice priority class.
D:This defect belongs to customer edge ACL anti-spoof, where the affected outcome is to permit only delegated customer source prefixes at a provider access boundary. It is not the direct failure mode identified for the low latency priority queue design in this case: a weighted bulk-data queue is mistaken for the voice priority class.
Question 75
After Starlight IP Services deploys low latency priority queue to protect delay-sensitive packet classes during congestion on a provider egress, the primary acceptance check passes (priority-class latency remains bounded while other classes retain service). What remaining operational risk should still be part of the design review?
- The egress provider must define the mapping from core class to service priority.
- Too aggressive policing can suppress legitimate routing control packets.
- Unbounded priority traffic may starve other queues without a cap.
- A prefix change requires a synchronized ACL update to avoid customer outage.
Explanation
Correct Answer
C:The relevant boundary of low latency priority queue is that unbounded priority traffic may starve other queues without a cap. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to short-pipe MPLS QoS in a different scenario where operators need to keep customer IP traffic marking intact while applying independent provider-core forwarding treatment. For the deployed low latency priority queue approach, the relevant caution is instead that unbounded priority traffic may starve other queues without a cap.
B:This concern applies to control-plane punt protection in a different scenario where operators need to limit exception traffic that can consume service-provider routing CPU. For the deployed low latency priority queue approach, the relevant caution is instead that unbounded priority traffic may starve other queues without a cap.
D:This concern applies to customer edge ACL anti-spoof in a different scenario where operators need to permit only delegated customer source prefixes at a provider access boundary. For the deployed low latency priority queue approach, the relevant caution is instead that unbounded priority traffic may starve other queues without a cap.
Question 76
Northstar Carrier must prevent a subscriber from assigning itself premium forwarding by arbitrary DSCP markings. The operator is comparing several service-provider methods. Which design or control directly addresses that stated requirement?
- short-pipe MPLS QoS
- routed optical convergence
- container isolation for tooling
- customer DSCP trust boundary
Explanation
Correct Answer
D:customer DSCP trust boundary matches this requirement: the team should remark or police traffic at the subscriber-to-provider classification boundary. A relevant outcome would be that untrusted DSCP is normalized before traffic reaches provider core queues.
Incorrect Answers
A:short-pipe MPLS QoS instead addresses a different condition: keep customer IP traffic marking intact while applying independent provider-core forwarding treatment. It would instead require you to classify provider-core packets using MPLS Traffic Class without necessarily rewriting customer IP DSCP, not the stated goal to prevent a subscriber from assigning itself premium forwarding by arbitrary DSCP markings.
B:routed optical convergence instead addresses a different condition: reduce layers between IP routing and transport while retaining an optical link path. It would instead require you to design routed-optical coherent optics with layer-3 routing over the provisioned optical channel, not the stated goal to prevent a subscriber from assigning itself premium forwarding by arbitrary DSCP markings.
C:container isolation for tooling instead addresses a different condition: run a small monitoring helper without deploying a full network-function virtual machine. It would instead require you to package the helper as a container with constrained network and filesystem privileges, not the stated goal to prevent a subscriber from assigning itself premium forwarding by arbitrary DSCP markings.
Question 77
At Orion Transit, the engineering change is approved for customer DSCP trust boundary. The specific goal is to prevent a subscriber from assigning itself premium forwarding by arbitrary DSCP markings. Which implementation step belongs in this change plan?
- Remark or police traffic at the subscriber-to-provider classification boundary.
- Classify provider-core packets using MPLS Traffic Class without necessarily rewriting customer IP DSCP.
- Design routed-optical coherent optics with layer-3 routing over the provisioned optical channel.
- Package the helper as a container with constrained network and filesystem privileges.
Explanation
Correct Answer
A:Implementing customer DSCP trust boundary requires the operator to remark or police traffic at the subscriber-to-provider classification boundary. This makes the required goal testable using evidence that untrusted DSCP is normalized before traffic reaches provider core queues.
Incorrect Answers
B:The proposed step is for short-pipe MPLS QoS, whose purpose is to keep customer IP traffic marking intact while applying independent provider-core forwarding treatment. It would not perform the necessary customer DSCP trust boundary operation: remark or police traffic at the subscriber-to-provider classification boundary.
C:The proposed step is for routed optical convergence, whose purpose is to reduce layers between IP routing and transport while retaining an optical link path. It would not perform the necessary customer DSCP trust boundary operation: remark or police traffic at the subscriber-to-provider classification boundary.
D:The proposed step is for container isolation for tooling, whose purpose is to run a small monitoring helper without deploying a full network-function virtual machine. It would not perform the necessary customer DSCP trust boundary operation: remark or police traffic at the subscriber-to-provider classification boundary.
Question 78
Meridian Networks has deployed customer DSCP trust boundary to prevent a subscriber from assigning itself premium forwarding by arbitrary DSCP markings. The implementation step was to remark or police traffic at the subscriber-to-provider classification boundary. Which observation demonstrates that the requested service is working?
- The provider queue selection follows TC and preserved IP markings emerge at egress.
- Untrusted DSCP is normalized before traffic reaches provider core queues.
- Router adjacency and coherent optical performance counters confirm end-to-end operation.
- The helper starts with only permitted access and the monitoring stream continues.
Explanation
Correct Answer
B:For customer DSCP trust boundary, successful verification means that untrusted DSCP is normalized before traffic reaches provider core queues. That evidence directly tests whether the provider can prevent a subscriber from assigning itself premium forwarding by arbitrary DSCP markings after deployment.
Incorrect Answers
A:The observation would verify short-pipe MPLS QoS under the separate requirement to keep customer IP traffic marking intact while applying independent provider-core forwarding treatment. It does not demonstrate the needed customer DSCP trust boundary result: untrusted DSCP is normalized before traffic reaches provider core queues.
C:The observation would verify routed optical convergence under the separate requirement to reduce layers between IP routing and transport while retaining an optical link path. It does not demonstrate the needed customer DSCP trust boundary result: untrusted DSCP is normalized before traffic reaches provider core queues.
D:The observation would verify container isolation for tooling under the separate requirement to run a small monitoring helper without deploying a full network-function virtual machine. It does not demonstrate the needed customer DSCP trust boundary result: untrusted DSCP is normalized before traffic reaches provider core queues.
Question 79
While troubleshooting customer DSCP trust boundary at Kestrel Broadband, the intended acceptance outcome is still missing: untrusted DSCP is normalized before traffic reaches provider core queues. Which fault condition should be investigated first for this particular design?
- The provider core accidentally trusts and changes the customer's IP DSCP.
- The transponder terminates optical traffic but no IP adjacency exists.
- The subscriber's self-assigned EF mark is blindly accepted into strict priority.
- A privileged host process is launched outside the container isolation policy.
Explanation
Correct Answer
C:The suspected defect directly frustrates customer DSCP trust boundary: the subscriber's self-assigned EF mark is blindly accepted into strict priority. Correcting it should allow verification that untrusted DSCP is normalized before traffic reaches provider core queues.
Incorrect Answers
A:This defect belongs to short-pipe MPLS QoS, where the affected outcome is to keep customer IP traffic marking intact while applying independent provider-core forwarding treatment. It is not the direct failure mode identified for the customer DSCP trust boundary design in this case: the subscriber's self-assigned EF mark is blindly accepted into strict priority.
B:This defect belongs to routed optical convergence, where the affected outcome is to reduce layers between IP routing and transport while retaining an optical link path. It is not the direct failure mode identified for the customer DSCP trust boundary design in this case: the subscriber's self-assigned EF mark is blindly accepted into strict priority.
D:This defect belongs to container isolation for tooling, where the affected outcome is to run a small monitoring helper without deploying a full network-function virtual machine. It is not the direct failure mode identified for the customer DSCP trust boundary design in this case: the subscriber's self-assigned EF mark is blindly accepted into strict priority.
Question 80
After Harbor Metro deploys customer DSCP trust boundary to prevent a subscriber from assigning itself premium forwarding by arbitrary DSCP markings, the primary acceptance check passes (untrusted DSCP is normalized before traffic reaches provider core queues). What remaining operational risk should still be part of the design review?
- The egress provider must define the mapping from core class to service priority.
- Optical impairments are not solved by an IP reroute alone.
- Containers still share host-kernel failure and security boundaries.
- Trusted markings require explicit customer policy and rate limits.
Explanation
Correct Answer
D:The relevant boundary of customer DSCP trust boundary is that trusted markings require explicit customer policy and rate limits. Passing the acceptance test does not eliminate this residual operational risk.
Incorrect Answers
A:This concern applies to short-pipe MPLS QoS in a different scenario where operators need to keep customer IP traffic marking intact while applying independent provider-core forwarding treatment. For the deployed customer DSCP trust boundary approach, the relevant caution is instead that trusted markings require explicit customer policy and rate limits.
B:This concern applies to routed optical convergence in a different scenario where operators need to reduce layers between IP routing and transport while retaining an optical link path. For the deployed customer DSCP trust boundary approach, the relevant caution is instead that trusted markings require explicit customer policy and rate limits.
C:This concern applies to container isolation for tooling in a different scenario where operators need to run a small monitoring helper without deploying a full network-function virtual machine. For the deployed customer DSCP trust boundary approach, the relevant caution is instead that trusted markings require explicit customer policy and rate limits.
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) (350-501) Practice Tests