350-501 Networking Practice Test 2 — 15 Questions

Question 1

An engineer is configuring an MPLS L3VPN and needs to ensure that the PE router installs VPNv4 routes from a remote PE into the VRF of a customer. The remote PE sends a VPNv4 route with route-target 100:1. Which configuration on the local PE causes the route to be imported into the VRF?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

vrf definition CUSTOMER
 rd 100:1
 route-target import 100:1. The `route-target import 100:1` command under the VRF definition configures the local PE to accept VPNv4 routes that carry the specified route-target (100:1) from the remote PE. This import RT must match the export RT of the remote PE for the route to be installed into the VRF's routing table. The `rd 100:1` defines the route distinguisher, which is separate from the RT and ensures uniqueness of the VPNv4 prefix.

Answer

router bgp 100
 address-family ipv4 vrf CUSTOMER
 route-target import 100:1

Answer

vrf definition CUSTOMER
 rd 100:1
 route-target both 100:1 route-map IMPORT

Answer

vrf definition CUSTOMER
 rd 100:1
 route-target export 100:1

Question 2

Which TWO of the following are characteristics of MPLS-TE (Traffic Engineering)?

Accepted Answer

Uses explicit paths to route traffic away from shortest-path IGP.. MPLS-TE uses explicit paths (either strict or loose) to direct traffic away from the shortest path determined by the IGP (e.g., OSPF or IS-IS). This allows network operators to engineer traffic flows based on administrative policies, such as load balancing or avoiding congested links, rather than relying solely on the IGP's metric-based shortest path.

Answer

Uses LDP for label distribution along the TE tunnel.

Answer

Requires per-platform label space for TE tunnels.

Answer

Requires all routers in the TE tunnel to be in the same OSPF area.

Question 3

Which THREE are valid methods for label distribution in an MPLS network?

Accepted Answer

Segment Routing via IGP. Segment Routing via IGP (Option A) is a valid label distribution method because it uses the IGP (OSPF or IS-IS) to advertise prefix-SIDs, which are MPLS labels. The IGP distributes these labels as part of its link-state database, eliminating the need for a separate label distribution protocol like LDP. This is defined in RFC 8660 and RFC 8665 for OSPF and IS-IS respectively.

Answer

BGP

Answer

TDP

Question 4

Based on the exhibit, which prefix is NOT reachable via MPLS forwarding?

Accepted Answer

10.5.5.5/32. (10.5.5.5/32) is correct because the exhibit shows that the LDP label bindings are only present for prefixes 10.1.1.1/32, 10.2.2.2/32, and 10.3.3.3/32. The prefix 10.5.5.5/32 is not in the LDP label information base (LIB), meaning no MPLS label has been assigned to it, so it cannot be forwarded via MPLS and must be forwarded using standard IP routing instead.

Answer

10.1.1.1/32

Answer

10.3.3.3/32

Answer

10.2.2.2/32

Question 5

Based on the exhibit, what is the purpose of the 'mpls ldp neighbor ... password cisco' commands?

Accepted Answer

To authenticate the LDP session using MD5.. The 'mpls ldp neighbor ... password cisco' command configures a Message Digest 5 (MD5) authentication password for the LDP session with a specific neighbor. This ensures that the TCP connection used for LDP exchanges is authenticated, preventing spoofed or unauthorized LDP messages from being accepted, as defined in RFC 5036.

Answer

To synchronize LDP and IGP convergence.

Answer

To control the label allocation for prefixes from that neighbor.

Answer

To enable LDP session protection for the neighbor.

Question 6

A service provider is designing a Layer 2 MPLS VPN to connect multiple customer sites. Which technology should be used to provide end-to-end Ethernet service with MAC address transparency and support for multiple customer VLANs?

Accepted Answer

VPLS (Virtual Private LAN Service). VPLS (Virtual Private LAN Service) is the correct choice because it emulates an Ethernet bridge across an MPLS core, providing MAC address transparency and supporting multiple customer VLANs through a multipoint-to-multipoint topology. Unlike point-to-point services, VPLS learns MAC addresses and forwards frames based on them, enabling end-to-end Ethernet service across distributed sites.

Answer

MPLS Traffic Engineering (MPLS TE)

Answer

VPWS (Virtual Private Wire Service)

Answer

RSVP-TE signaling

Question 7

An engineer is troubleshooting a BGP peering issue between two routers. The peering is established, but routes are not being exchanged. On router R1, 'show bgp neighbors 192.0.2.2' shows the neighbor state as 'Established' but the 'Prefixes received' counter is zero. What is most likely the cause?

Accepted Answer

An outbound route-map on the neighbor is filtering all routes.. The neighbor state is 'Established', confirming that the TCP session and BGP open messages have been successfully exchanged. However, zero prefixes received indicates that R1 is not receiving any routes from the neighbor. An outbound route-map applied on the neighbor (the router sending routes to R1) can filter all prefixes before they are advertised, resulting in zero received prefixes while the session remains up.

Answer

The 'maximum-prefix' limit is exceeded, causing the session to reset.

Answer

The BGP session is in the Idle state due to a misconfigured update-source.

Answer

The 'next-hop-self' command is missing on R1.

Question 8

A service provider is deploying segment routing (SR) with MPLS data plane. The network uses OSPF as the IGP. Which configuration is required to enable SR-MPLS and ensure that routers advertise prefix-SIDs for their loopback interfaces?

Accepted Answer

Configure 'segment-routing mpls' globally and assign a prefix-SID to the loopback interface under OSPF.. To enable SR-MPLS with OSPF, you must globally enable segment routing with the 'segment-routing mpls' command, and then assign a prefix-SID to the loopback interface under the OSPF process using the 'prefix-sid' command. This ensures that routers advertise the prefix-SID for their loopback via OSPF extensions, which is the fundamental requirement for SR-MPLS operation without LDP.

Answer

Configure 'mpls ip' on all interfaces and 'router ospf 1 mpls ldp auto-config'.

Answer

Configure 'label mode per-prefix' under the OSPF process and assign a label to the loopback.

Answer

Configure 'segment-routing global-block 16000 23999' globally and enable 'mpls ip' on all interfaces.

Question 9

A network administrator is configuring a Cisco ASR 9000 router for MPLS L3VPN. The PE receives customer routes via eBGP from the CE. Which command is required to redistribute these routes into the VPNv4 BGP table on the PE?

Accepted Answer

Configure 'address-family ipv4 unicast' under the VRF configuration and then 'address-family vpnv4 unicast' under the BGP process.. In MPLS L3VPN, customer routes learned via eBGP from the CE must be placed into the VRF's IPv4 unicast table first, and then the 'address-family vpnv4 unicast' under BGP is required to redistribute those VRF routes into the VPNv4 BGP table, which carries the route with its route distinguisher (RD) and extended community. This two-step process ensures the PE can advertise the route as a VPNv4 prefix to other PEs via MP-BGP.

Answer

Configure 'address-family ipv4 vrf CUSTOMER' under the BGP process and activate the neighbor.

Answer

Enter 'vrf CUSTOMER' in the BGP process and then 'address-family ipv4 unicast' under the VRF.

Answer

Enter 'redistribute bgp 100' under the VRF's OSPF or static route configuration.

Question 10

A customer reports intermittent packet loss on a MPLS L3VPN connection. The PE router shows 'show mpls forwarding' entries for the CE prefix, but ping from the PE to the CE fails intermittently. Which action should be taken to isolate the issue?

Accepted Answer

Check 'show ip route vrf CUSTOMER' and 'show bgp vpnv4 unicast vrf CUSTOMER' to confirm the VRF routes.. The intermittent packet loss suggests a control-plane issue rather than a data-plane problem. By checking 'show ip route vrf CUSTOMER' and 'show bgp vpnv4 unicast vrf CUSTOMER', you can verify that the VRF route for the CE prefix is present in the routing table and that BGP is advertising the correct VPNv4 route with the proper next-hop and label. This isolates whether the failure is due to missing or incorrect route propagation, which is a common cause of intermittent reachability in MPLS L3VPN.

Answer

Use 'show mpls lsp' to verify the LSP to the CE's PE.

Answer

Examine the 'show mpls forwarding vrf CUSTOMER' output to see label operations.

Answer

Review the 'show bgp vpnv4 unicast all' output to verify route advertisement.

Question 11

A service provider is deploying L3VPN with inter-AS option B (ASBR-to-ASBR). Which TWO statements are true about this design?

Accepted Answer

ASBRs peer using eBGP and exchange labeled VPN-IPv4 prefixes.. In inter-AS Option B, ASBRs peer using eBGP and exchange labeled VPN-IPv4 prefixes (AFI 1, SAFI 128). This allows the VPNv4 routes to be carried across AS boundaries without requiring a full mesh of MP-IBGP between PEs, as the ASBRs re-advertise the routes with a new next-hop and perform label allocation for the VPN labels.

Answer

The VPN label is removed by the ASBR before forwarding to the neighbor AS.

Answer

Route reflectors are required to propagate VPN routes between ASes.

Answer

ASBRs exchange unlabeled IPv4 routes and use MP-BGP to carry VPNv4 routes.

Question 12

A network engineer is troubleshooting a BGP route selection issue on a router that receives the same prefix from two different peers. Which THREE BGP attributes are considered in the route selection process before the 'prefer the route with the lowest metric' step?

Accepted Answer

Highest weight. The BGP best-path selection algorithm considers attributes in a specific order before using the metric (MED). The sequence is: highest Weight, highest Local Preference, prefer locally originated routes, shortest AS_PATH, lowest Origin type, and then lowest metric. Therefore, all five options A, B, C, D, and E are evaluated before the metric step.

Question 13

A service provider is deploying MPLS L3VPN to connect multiple customer sites. The PE router receives a route from a CE router via MP-BGP. Which attribute must the PE router add to the route before advertising it to the route reflector?

Accepted Answer

Route distinguisher (RD). When a PE router receives a customer route from a CE router via MP-BGP, it must first make the route unique within the MPLS VPN context by adding a Route Distinguisher (RD). The RD prepended to the IPv4 prefix creates a VPNv4 address (per RFC 4364), which is the format required for advertisement to a route reflector. Without the RD, the route would not be distinguishable from other customers' overlapping IP prefixes in the BGP table.

Answer

MPLS label

Answer

Route target (RT)

Answer

IGP metric

Question 14

A network engineer is troubleshooting MPLS LSP connectivity. The MPLS LDP session is up on both endpoints, but some MPLS labels are missing in the LFIB. Which configuration change would most likely resolve the issue?

Accepted Answer

Enable 'mpls ldp advertise-labels'. The 'mpls ldp advertise-labels' command ensures that LDP advertises label bindings to its peers. If this is disabled (default is enabled, but can be overridden), LDP sessions may be up but no labels are distributed, resulting in missing labels in the LFIB. Re-enabling it forces LDP to send label mappings for all FECs, resolving the connectivity issue.

Answer

Configure 'label protocol ldp' on all routers

Answer

Configure 'mpls ip' on all interfaces

Answer

Enable 'mpls ldp explicit-null' on the ingress

Question 15

A network administrator is designing an MPLS TE tunnel for a service provider backbone. The goal is to provide bandwidth protection for voice traffic. Which MPLS TE feature should be configured?

Accepted Answer

Fast Reroute (FRR). MPLS TE Fast Reroute (FRR) provides sub-50 ms protection against link or node failures by pre-computing and pre-signaling a backup tunnel that bypasses the protected element. This meets the requirement for bandwidth protection of voice traffic, which is sensitive to packet loss and delay during network convergence.

Answer

Autoroute announce

Answer

Path-option

Answer

Bandwidth protection