You must be able to choose correct service-layer designs and configurations for L2VPN, L3VPN, MVPN, QoS, and MPLS TE, and to plan a migration to SR-MPLS. The most important thing is matching the right signaling, address family, and protection mechanism to the stated requirement.
Start practicing
Services — choose a session length
Free · No account required
Domain overview
The Services domain of Cisco 350-501 covers the SP service layer built on MPLS and BGP: L2VPN pseudowires, L3VPN, MVPN multicast, QoS, and traffic engineering. Questions are scenario-based, asking you to pick correct statements, valid protection or signaling methods, and the right migration path between LDP, RSVP-TE, and SR-MPLS.
Exam objectives
QoS policy propagation via BGP (QPPB) using BGP attributes to set QoS on PE routers
Pseudowire protection methods such as redundant pseudowires and MPLS TE fast reroute
MVPN with BGP signaling using the IPv4 MVPN address family and VRF multicast routing
SR-MPLS migration from LDP and RSVP-TE, including mapping server and SR-TE policies
Assuming QPPB marks traffic itself; it propagates policy via BGP, and actual marking or policing happens through route-map and policy-map actions.
Treating all pseudowire protection options as valid; some listed methods do not protect the pseudowire path and must be ruled out.
Confusing MVPN address families or signaling modes, such as draft-rosen BGP versus PIM, and selecting the wrong AFI/SAFI.
Click any question to see the full explanation and answer options, or start a focused practice session above.
A service provider is designing a multicast solution for a Layer 3 VPN. They want to use MVPN with BGP signaling (draft-rosen). The PE routers are configured with VRF and multicast routing enabled. Which BGP address family must be enabled between PE routers to carry multicast routing information?
2A network engineer is troubleshooting an MPLS TE tunnel that is not coming up. The tunnel is configured with a strict explicit path, and the path includes an interface that is currently down. Which action should the engineer take to allow the tunnel to use an alternative path?
3A service provider is planning to offer L2VPN services using MPLS. Which TWO statements are true regarding Ethernet over MPLS (EoMPLS) and Virtual Private LAN Service (VPLS)?
4Drag and drop the steps to configure a GRE tunnel on a Cisco router into the correct order.
5A service provider is migrating its MPLS core from LDP to Segment Routing with MPLS data plane (SR-MPLS). The network currently uses TE tunnels with RSVP-TE for traffic engineering. Which technology can the provider use to continue performing traffic engineering after the migration without requiring RSVP-TE?
6A service provider is deploying EVPN-VPWS to replace legacy pseudowire connections for point-to-point Layer 2 services. They notice that MAC addresses learned from a CE device are not properly advertised to the remote PE. Which EVPN route type is responsible for advertising MAC address reachability information in a VPWS scenario?
7A network engineer is configuring QoS on a Cisco ASR 9000 router to support multiple traffic classes. The policy must ensure that real-time traffic (EF) is not starved by high-volume bulk data (AF11). Which queuing strategy should be applied to the EF class to provide low latency and strict priority?
8An SP is designing a MPLS L3VPN service with BGP as the PE-CE routing protocol. They want to ensure that the CE router does not become a transit router between two sites. Which BGP feature should be configured on the PE to prevent the CE from advertising routes received from one site to another?
9A service provider is implementing QoS policies on an access aggregation router. They want to shape traffic to a downstream DSLAM to 10 Mbps, but they do not want to exceed the shaping rate even if the line rate is higher. Which QoS tool should be used on the interface facing the DSLAM?
10An SP is troubleshooting an MPLS L2VPN VPLS network where MAC flapping is occurring between two PEs. Which mechanism in VPLS prevents loops and ensures that a broadcast frame from one PE is not reflected back to the originating PE?
11Which TWO of the following are characteristics of Segment Routing (SR-MPLS) compared to traditional LDP-based MPLS? (Select two.)
12Which THREE of the following are correct statements about EVPN-VXLAN in a data center fabric? (Select three.)
13A service provider deploys MPLS L3VPN to connect multiple customer sites. Which VPN address family must be enabled on the PE routers to exchange customer IPv4 routes between PEs?
14A customer requires MPLS Layer 2 VPN connectivity between two sites using Pseudowire. Which control protocol is used to signal the pseudowire label?
15Which technology allows a service provider to offer different classes of service over a single MPLS network?
16Refer to the exhibit. A network engineer applies this policy on the PE-CE link. What is the expected behavior for VoIP traffic matching the access list?
17During a multicast deployment, some receivers are not receiving the stream. The PIM neighbor table shows the upstream interface is correct. Which command would verify whether the multicast routing table has the correct outgoing interface list?
18Which TWO features are used to improve BGP convergence in an MPLS VPN environment?
19Which THREE components are required to deploy MPLS Layer 3 VPN?
20Which TWO statements about QoS policy propagation via BGP (QPPB) are correct?
21A customer is experiencing packet loss during congestion on a link. The service provider wants to implement a QoS policy that drops less important traffic before more important traffic. Which queuing mechanism is best suited?
22A service provider is implementing QoS on a PE router for customer traffic. Which tool should be used to classify traffic based on application layer information?
23Which multicast RP model is recommended for large-scale networks to provide redundancy and load sharing?
24A service provider is migrating from LDP to Segment Routing. What is the correct order of operations to ensure uninterrupted MPLS forwarding?
25A service provider is using LISP to provide host mobility. Which LISP component is responsible for storing the mapping of EID to RLOC?
26Which two of the following are characteristics of MPLS Traffic Engineering that differentiate it from pure MPLS forwarding?
27Which three of the following are valid methods for protecting a pseudowire in an MPLS network?
28A service provider operates a Layer 2 MPLS VPN using VPLS. Recently, two new CE routers were added to the VPLS domain, but they cannot ping each other. The existing CEs can communicate. The network uses BGP autodiscovery and signaling. The new CEs are connected to different PEs. The 'show vfi status' command on the new PEs indicates the VFI is up but the pseudowire to the remote PE is down. The BGP session between the PEs is established and the L2VPN address family routes are exchanged. What is the most probable cause?
29A customer's MPLS L3VPN has two CE routers connected to two different PEs, but the PEs are not receiving the customer's routes from each other. The PE-CE routing protocol is OSPF. The PEs have the VRF configured with OSPF process, and the routes from CE are in the VRF routing table. The MP-BGP session between PEs is up and the VPNv4 address family is working. On the source PE, the routes show as not advertised to BGP. What is the likely issue?
30Which THREE factors must be considered when deploying MPLS Layer 3 VPN services to ensure optimal scalability and convergence?
31Given the output, which configuration mismatch would prevent a remote PE in the same VPN from installing this route into its VRF?
32A service provider operates an MPLS L3VPN backbone. The network engineer must enable QoS on a PE router so that customer traffic is classified based on the application-layer protocol (e.g., HTTP, VoIP) rather than only on IP header fields. Which Cisco IOS XR feature should be used to achieve this?
33A service provider runs an MPLS L3VPN backbone. A customer requires that voice traffic from a specific CE be marked with DSCP EF (46) and placed into the strict-priority queue on the PE egress interface. The PE router is Cisco IOS XR. Which MQC configuration on the PE ingress interface achieves this classification and marking?
34An engineer is configuring a Cisco ASR 9000 router to ensure that the control plane remains stable under heavy load while still allowing the data plane to forward traffic without interruption. The design requires that the router not reset any line cards if the RSP experiences a soft failure, and that the router continues to forward traffic using the existing forwarding information. Which feature should be configured?
35A service provider is deploying MPLS L3VPN for a customer that requires multicast traffic between sites. The provider uses PIM-SM in the core and wants to optimize multicast forwarding by using the MPLS backbone for multicast traffic instead of GRE tunnels. Which technology should be implemented?
36A service provider is configuring a new MPLS L3VPN customer. The customer requires that traffic from different VPN sites be isolated using unique route targets. Which BGP extended community should be used to identify the VPN membership of routes?
37A service provider is troubleshooting an MPLS L3VPN where a customer reports that traffic from Site A to Site B is being dropped. The provider verifies that the VPNv4 route for Site B's prefix is present on the ingress PE, but the MPLS label stack is missing the VPN label. Which action should be taken to resolve this?
38A service provider is deploying MPLS Traffic Engineering (TE) with RSVP-TE. The network engineer needs to ensure that the TE tunnels are not used for forwarding regular IP traffic unless explicitly desired. Which configuration on the tunnel interface accomplishes this?
39A service provider runs an MPLS L3VPN backbone with BGP route reflectors. A customer reports that a specific prefix from one site is not reachable at another site, even though the prefix exists in the VRF of the originating PE. On the route reflector, the operator sees the VPNv4 prefix in the BGP table, but the remote PE does not have it in its VRF. What is the most likely cause?
40A network engineer is configuring QoS on a Cisco ASR 9000 router to prioritize voice traffic over data traffic. The voice traffic is marked with DSCP EF (46). Which QoS mechanism should be used to ensure that voice packets are placed in a low-latency queue?
41A service provider is configuring QoS on a PE router to prioritize voice traffic over data traffic for a customer. The customer's voice traffic is marked with DSCP EF. Which QoS mechanism should be used to ensure voice traffic receives priority treatment?
42A service provider is deploying a VPLS service for a customer with multiple sites. The customer requires that the VPLS instance support MAC address learning and forwarding based on MAC addresses, and that the provider network not flood unknown unicast traffic to all PEs in the VPLS. Which VPLS feature should be enabled on the PE routers to meet this requirement?
43A service provider is deploying MPLS L3VPN and needs to configure a VRF on a PE router. The customer requires that the PE router use a unique route distinguisher (RD) for the VRF and that the RD be automatically generated based on the PE's loopback IP address and a VRF ID. Which configuration command should be used?
44A service provider is implementing MPLS Traffic Engineering (TE) with RSVP-TE in its core network. The network operator wants to ensure that TE tunnels are established along paths that meet specific bandwidth constraints. Which RSVP-TE object is used to signal the bandwidth requirement for a TE tunnel?
45A service provider is migrating its MPLS backbone from LDP to Segment Routing (SR) with MPLS data plane. The network currently uses LDP for label distribution. The provider wants to ensure uninterrupted MPLS forwarding during the migration. Which step should be taken first to allow SR and LDP to coexist and avoid traffic disruption?
46A service provider is deploying a multicast VPN (MVPN) using the Rosen GRE model in an MPLS L3VPN environment. The customer requires that multicast traffic be transported across the provider backbone without using MPLS labels for multicast. Which protocol is used to encapsulate multicast packets in the Rosen GRE model?
47A service provider is deploying MPLS L3VPN with multicast VPN (MVPN) using the Rosen GRE model. The operator wants to ensure that multicast traffic is properly forwarded across the MPLS backbone. Which two statements are true regarding the Rosen GRE model? (Choose two.)
48A service provider is deploying an MPLS L3VPN service for a customer. The customer requires that traffic from different VPN sites be kept separate, but also wants to allow selective communication between specific sites. The network engineer has configured VRFs on the PE routers and is using Route Targets (RTs) to control import and export of routes. Which statement accurately describes how Route Targets influence route distribution in this scenario?
49A service provider is implementing QoS on a Cisco ASR 9000 series router for a customer's MPLS L3VPN. The customer requires that voice traffic be marked with EF (Expedited Forwarding) and guaranteed low latency. Which QoS mechanism should be configured on the PE router to ensure that voice packets are prioritized and scheduled with minimal delay?
50A service provider is using MPLS Traffic Engineering (TE) with RSVP-TE to establish tunnels between PE routers. The network engineer notices that a particular TE tunnel is not being established, and the headend router reports 'RSVP reservation error: No Route.' Which condition is the most likely cause of this error?
51A service provider is implementing MPLS L3VPN services over an MPLS backbone. The provider wants to ensure that customer traffic is classified and marked correctly at the ingress PE so that the provider can offer different service levels. The provider decides to use QoS policies based on the MPLS Experimental (EXP) bits. Which statement describes how EXP bits are used in an MPLS L3VPN environment?
52A service provider is deploying QoS on its MPLS network to prioritize voice traffic over data traffic. The network engineer needs to ensure that voice packets are marked with the appropriate DSCP value and that the MPLS EXP bits are set accordingly when packets enter the MPLS domain. Which QoS mechanism should be used to map DSCP to MPLS EXP at the ingress PE router?
53A service provider is deploying a Multicast VPN (MVPN) using the Next-Generation MVPN (NG-MVPN) architecture with BGP MVPN address family. The provider wants to use the Provider Tunnel (P-Tunnel) based on mLDP (Multipoint LDP). Which two statements are true regarding the use of mLDP in this NG-MVPN deployment? (Choose two.)
54A service provider is implementing MPLS L3VPN with a hub-and-spoke topology. The hub site must receive all routes from the spoke sites, but the spoke sites should not receive routes from each other. Which BGP route-target configuration on the hub and spoke VRFs achieves this?
55A service provider is configuring an MPLS L3VPN and wants to ensure that customer routes are advertised only to the appropriate VPN sites. Which BGP extended community is used to control the distribution of VPN routes?
You must be able to choose correct service-layer designs and configurations for L2VPN, L3VPN, MVPN, QoS, and MPLS TE, and to plan a migration to SR-MPLS. The most important thing is matching the right signaling, address family, and protection mechanism to the stated requirement.
The Courseiva 350-501 question bank contains 55 questions in the Services domain, covering the 20% of the exam attributed to this domain in the official Cisco blueprint. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Services domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included