350-501 Networking — 40 Questions

Question 1

A service provider is deploying MPLS L3VPN over an OSPF backbone. The PE routers are configured with OSPF as the IGP. The CE router of customer A is connected to two PEs for redundancy. Which configuration is required on the PE routers to ensure that the CE router can load-balance traffic across both PEs without loops?

Accepted Answer

Configure OSPF with the capability vrf-lite and enable the down-bit on the PE-CE link.. Option C is correct because configuring OSPF with the capability vrf-lite and enabling the down-bit on the PE-CE link prevents routing loops in a multi-homed CE scenario. The down-bit is set by the PE when redistributing routes into OSPF, ensuring that the CE does not re-advertise those routes back to another PE, which would cause a loop. The vrf-lite capability allows the CE to understand the down-bit without requiring full MPLS/VPN functionality, enabling load-balancing across both PEs safely.

Answer

Use OSPF sham-links between the two PEs.

Answer

Use the BGP cost community to adjust the path selection on the CE.

Answer

Disable the DN-bit on the PE-CE OSPF interface.

Question 2

An ISP is designing an MPLS core network and needs to choose an IGP that supports fast convergence. Which IGP meets this requirement and is most commonly used in MPLS core networks?

Accepted Answer

IS-IS. IS-IS is the correct choice because it is a link-state IGP that inherently supports fast convergence through mechanisms like incremental SPF (iSPF) and prefix-independent convergence (PIC). It is widely deployed in MPLS core networks due to its scalability, extensibility via TLVs, and native support for MPLS Traffic Engineering (MPLS-TE) without requiring additional protocol extensions like OSPF's opaque LSA.

Answer

OSPFv3

Answer

EIGRP

Answer

RIPng

Question 3

A network engineer is troubleshooting an MPLS L3VPN where the CE router is receiving the correct VPN prefixes from the PE, but traffic from the CE to those prefixes is being dropped. The PE has a default route pointing to the CE. What is the most likely cause?

Accepted Answer

The PE does not have a specific route for the destination in its global routing table.. The CE is receiving the correct VPN prefixes from the PE, so the VRF import/export is working. However, when the CE sends traffic to those prefixes, the PE must forward the packets. The PE has a default route pointing to the CE, but if the PE's global routing table lacks a specific route for the destination prefix (which is normal for L3VPN, as VPN routes are in the VRF, not the global table), the PE will drop the traffic because it cannot find a valid next hop in the global table for the outer IP header. This is a classic issue where the PE's global table must have a route to the CE's loopback or the PE-CE link subnet to enable recursive forwarding.

Answer

The VRF on the PE is not configured with the correct route-target import.

Answer

The CE does not have a route back to the PE's loopback.

Answer

The PE-CE link MTU is smaller than the packet size.

Question 4

A service provider is deploying segment routing in its MPLS core. Which label allocation method is used by segment routing to distribute prefix SIDs?

Accepted Answer

IGP (IS-IS or OSPF). Segment routing uses the IGP (IS-IS or OSPF) to distribute prefix SIDs. The IGP extensions for segment routing (RFC 8665 for OSPF, RFC 8667 for IS-IS) carry the prefix SID sub-TLV within the prefix reachability information, allowing each router to allocate and advertise the SID associated with a prefix. This is the native label allocation method for segment routing, as it leverages the existing IGP database without requiring a separate label distribution protocol.

Answer

LDP

Answer

BGP

Answer

RSVP-TE

Question 5

An engineer is configuring an MPLS L3VPN and needs to ensure that the PE router installs VPNv4 routes from a remote PE into the VRF of a customer. The remote PE sends a VPNv4 route with route-target 100:1. Which configuration on the local PE causes the route to be imported into the VRF?

Accepted Answer

vrf definition CUSTOMER
 rd 100:1
 route-target import 100:1. Option C is correct because the `route-target import 100:1` command under the VRF definition configures the local PE to accept VPNv4 routes that carry the specified route-target (100:1) from the remote PE. This import RT must match the export RT of the remote PE for the route to be installed into the VRF's routing table. The `rd 100:1` defines the route distinguisher, which is separate from the RT and ensures uniqueness of the VPNv4 prefix.

Answer

router bgp 100
 address-family ipv4 vrf CUSTOMER
 route-target import 100:1

Answer

vrf definition CUSTOMER
 rd 100:1
 route-target both 100:1 route-map IMPORT

Answer

vrf definition CUSTOMER
 rd 100:1
 route-target export 100:1

Question 6

Which TWO of the following are characteristics of MPLS-TE (Traffic Engineering)?

Accepted Answer

Uses explicit paths to route traffic away from shortest-path IGP.. MPLS-TE uses explicit paths (either strict or loose) to direct traffic away from the shortest path determined by the IGP (e.g., OSPF or IS-IS). This allows network operators to engineer traffic flows based on administrative policies, such as load balancing or avoiding congested links, rather than relying solely on the IGP's metric-based shortest path.

Answer

Uses LDP for label distribution along the TE tunnel.

Answer

Requires per-platform label space for TE tunnels.

Answer

Requires all routers in the TE tunnel to be in the same OSPF area.

Question 7

Which THREE are valid methods for label distribution in an MPLS network?

Accepted Answer

Segment Routing via IGP. Segment Routing via IGP (Option A) is a valid label distribution method because it uses the IGP (OSPF or IS-IS) to advertise prefix-SIDs, which are MPLS labels. The IGP distributes these labels as part of its link-state database, eliminating the need for a separate label distribution protocol like LDP. This is defined in RFC 8660 and RFC 8665 for OSPF and IS-IS respectively.

Answer

BGP

Answer

TDP

Question 8

Based on the exhibit, which prefix is NOT reachable via MPLS forwarding?

Accepted Answer

10.5.5.5/32. Option D (10.5.5.5/32) is correct because the exhibit shows that the LDP label bindings are only present for prefixes 10.1.1.1/32, 10.2.2.2/32, and 10.3.3.3/32. The prefix 10.5.5.5/32 is not in the LDP label information base (LIB), meaning no MPLS label has been assigned to it, so it cannot be forwarded via MPLS and must be forwarded using standard IP routing instead.

Answer

10.1.1.1/32

Answer

10.3.3.3/32

Answer

10.2.2.2/32

Question 9

Based on the exhibit, what is the purpose of the 'mpls ldp neighbor ... password cisco' commands?

Accepted Answer

To authenticate the LDP session using MD5.. The 'mpls ldp neighbor ... password cisco' command configures a Message Digest 5 (MD5) authentication password for the LDP session with a specific neighbor. This ensures that the TCP connection used for LDP exchanges is authenticated, preventing spoofed or unauthorized LDP messages from being accepted, as defined in RFC 5036.

Answer

To synchronize LDP and IGP convergence.

Answer

To control the label allocation for prefixes from that neighbor.

Answer

To enable LDP session protection for the neighbor.

Question 10

A service provider is designing a Layer 2 MPLS VPN to connect multiple customer sites. Which technology should be used to provide end-to-end Ethernet service with MAC address transparency and support for multiple customer VLANs?

Accepted Answer

VPLS (Virtual Private LAN Service). VPLS (Virtual Private LAN Service) is the correct choice because it emulates an Ethernet bridge across an MPLS core, providing MAC address transparency and supporting multiple customer VLANs through a multipoint-to-multipoint topology. Unlike point-to-point services, VPLS learns MAC addresses and forwards frames based on them, enabling end-to-end Ethernet service across distributed sites.

Answer

MPLS Traffic Engineering (MPLS TE)

Answer

VPWS (Virtual Private Wire Service)

Answer

RSVP-TE signaling

Question 11

An engineer is troubleshooting a BGP peering issue between two routers. The peering is established, but routes are not being exchanged. On router R1, 'show bgp neighbors 192.0.2.2' shows the neighbor state as 'Established' but the 'Prefixes received' counter is zero. What is most likely the cause?

Accepted Answer

An outbound route-map on the neighbor is filtering all routes.. The neighbor state is 'Established', confirming that the TCP session and BGP open messages have been successfully exchanged. However, zero prefixes received indicates that R1 is not receiving any routes from the neighbor. An outbound route-map applied on the neighbor (the router sending routes to R1) can filter all prefixes before they are advertised, resulting in zero received prefixes while the session remains up.

Answer

The 'maximum-prefix' limit is exceeded, causing the session to reset.

Answer

The BGP session is in the Idle state due to a misconfigured update-source.

Answer

The 'next-hop-self' command is missing on R1.

Question 12

A service provider is deploying segment routing (SR) with MPLS data plane. The network uses OSPF as the IGP. Which configuration is required to enable SR-MPLS and ensure that routers advertise prefix-SIDs for their loopback interfaces?

Accepted Answer

Configure 'segment-routing mpls' globally and assign a prefix-SID to the loopback interface under OSPF.. Option D is correct because to enable SR-MPLS with OSPF, you must globally enable segment routing with the 'segment-routing mpls' command, and then assign a prefix-SID to the loopback interface under the OSPF process using the 'prefix-sid' command. This ensures that routers advertise the prefix-SID for their loopback via OSPF extensions, which is the fundamental requirement for SR-MPLS operation without LDP.

Answer

Configure 'mpls ip' on all interfaces and 'router ospf 1 mpls ldp auto-config'.

Answer

Configure 'label mode per-prefix' under the OSPF process and assign a label to the loopback.

Answer

Configure 'segment-routing global-block 16000 23999' globally and enable 'mpls ip' on all interfaces.

Question 13

A network administrator is configuring a Cisco ASR 9000 router for MPLS L3VPN. The PE receives customer routes via eBGP from the CE. Which command is required to redistribute these routes into the VPNv4 BGP table on the PE?

Accepted Answer

Configure 'address-family ipv4 unicast' under the VRF configuration and then 'address-family vpnv4 unicast' under the BGP process.. Option A is correct because in MPLS L3VPN, customer routes learned via eBGP from the CE must be placed into the VRF's IPv4 unicast table first, and then the 'address-family vpnv4 unicast' under BGP is required to redistribute those VRF routes into the VPNv4 BGP table, which carries the route with its route distinguisher (RD) and extended community. This two-step process ensures the PE can advertise the route as a VPNv4 prefix to other PEs via MP-BGP.

Answer

Configure 'address-family ipv4 vrf CUSTOMER' under the BGP process and activate the neighbor.

Answer

Enter 'vrf CUSTOMER' in the BGP process and then 'address-family ipv4 unicast' under the VRF.

Answer

Enter 'redistribute bgp 100' under the VRF's OSPF or static route configuration.

Question 14

A customer reports intermittent packet loss on a MPLS L3VPN connection. The PE router shows 'show mpls forwarding' entries for the CE prefix, but ping from the PE to the CE fails intermittently. Which action should be taken to isolate the issue?

Accepted Answer

Check 'show ip route vrf CUSTOMER' and 'show bgp vpnv4 unicast vrf CUSTOMER' to confirm the VRF routes.. Option A is correct because the intermittent packet loss suggests a control-plane issue rather than a data-plane problem. By checking 'show ip route vrf CUSTOMER' and 'show bgp vpnv4 unicast vrf CUSTOMER', you can verify that the VRF route for the CE prefix is present in the routing table and that BGP is advertising the correct VPNv4 route with the proper next-hop and label. This isolates whether the failure is due to missing or incorrect route propagation, which is a common cause of intermittent reachability in MPLS L3VPN.

Answer

Use 'show mpls lsp' to verify the LSP to the CE's PE.

Answer

Examine the 'show mpls forwarding vrf CUSTOMER' output to see label operations.

Answer

Review the 'show bgp vpnv4 unicast all' output to verify route advertisement.

Question 15

A service provider is deploying L3VPN with inter-AS option B (ASBR-to-ASBR). Which TWO statements are true about this design?

Accepted Answer

ASBRs peer using eBGP and exchange labeled VPN-IPv4 prefixes.. In inter-AS Option B, ASBRs peer using eBGP and exchange labeled VPN-IPv4 prefixes (AFI 1, SAFI 128). This allows the VPNv4 routes to be carried across AS boundaries without requiring a full mesh of MP-IBGP between PEs, as the ASBRs re-advertise the routes with a new next-hop and perform label allocation for the VPN labels.

Answer

The VPN label is removed by the ASBR before forwarding to the neighbor AS.

Answer

Route reflectors are required to propagate VPN routes between ASes.

Answer

ASBRs exchange unlabeled IPv4 routes and use MP-BGP to carry VPNv4 routes.

Question 16

A network engineer is troubleshooting a BGP route selection issue on a router that receives the same prefix from two different peers. Which THREE BGP attributes are considered in the route selection process before the 'prefer the route with the lowest metric' step?

Accepted Answer

Highest weight. Weight is a Cisco-proprietary BGP attribute that is locally significant to the router and is checked first in the BGP best-path selection process. A route with a higher weight is preferred over all other attributes, including local preference and AS_PATH length, making it the most influential attribute for inbound traffic engineering on a single router.

Answer

Shortest AS_PATH

Answer

Lowest origin type (IGP < EGP < incomplete)

Question 17

A service provider is deploying MPLS L3VPN to connect multiple customer sites. The PE router receives a route from a CE router via MP-BGP. Which attribute must the PE router add to the route before advertising it to the route reflector?

Accepted Answer

Route distinguisher (RD). When a PE router receives a customer route from a CE router via MP-BGP, it must first make the route unique within the MPLS VPN context by adding a Route Distinguisher (RD). The RD prepended to the IPv4 prefix creates a VPNv4 address (per RFC 4364), which is the format required for advertisement to a route reflector. Without the RD, the route would not be distinguishable from other customers' overlapping IP prefixes in the BGP table.

Answer

MPLS label

Answer

Route target (RT)

Answer

IGP metric

Question 18

A network engineer is troubleshooting MPLS LSP connectivity. The MPLS LDP session is up on both endpoints, but some MPLS labels are missing in the LFIB. Which configuration change would most likely resolve the issue?

Accepted Answer

Enable 'mpls ldp advertise-labels'. Option B is correct because the 'mpls ldp advertise-labels' command ensures that LDP advertises label bindings to its peers. If this is disabled (default is enabled, but can be overridden), LDP sessions may be up but no labels are distributed, resulting in missing labels in the LFIB. Re-enabling it forces LDP to send label mappings for all FECs, resolving the connectivity issue.

Answer

Configure 'label protocol ldp' on all routers

Answer

Configure 'mpls ip' on all interfaces

Answer

Enable 'mpls ldp explicit-null' on the ingress

Question 19

A network administrator is designing an MPLS TE tunnel for a service provider backbone. The goal is to provide bandwidth protection for voice traffic. Which MPLS TE feature should be configured?

Accepted Answer

Fast Reroute (FRR). MPLS TE Fast Reroute (FRR) provides sub-50 ms protection against link or node failures by pre-computing and pre-signaling a backup tunnel that bypasses the protected element. This meets the requirement for bandwidth protection of voice traffic, which is sensitive to packet loss and delay during network convergence.

Answer

Autoroute announce

Answer

Path-option

Answer

Bandwidth protection

Question 20

Which TWO statements correctly describe the use of OSPF in a service provider network?

Accepted Answer

OSPF uses different LSA types to advertise different types of routing information.. Option B is correct because OSPF uses different LSA types (e.g., Type 1 Router LSA, Type 2 Network LSA, Type 3 Summary LSA, Type 5 AS-External LSA) to advertise different categories of routing information, such as router links, network links, inter-area routes, and external routes. This LSA-type differentiation is fundamental to OSPF's link-state architecture, enabling efficient flooding and route computation within and across areas.

Answer

OSPF uses the Bellman-Ford algorithm to compute routes.

Answer

OSPF is a distance-vector routing protocol.

Answer

OSPF uses TLVs to encode routing information.