Courseiva

CCNA Networking Questions

75 of 218 questions · Page 1/3 · Networking · Answers revealed

1
MCQhard

A network engineer is troubleshooting MPLS LSP connectivity. The MPLS LDP session is up on both endpoints, but some MPLS labels are missing in the LFIB. Which configuration change would most likely resolve the issue?

A.Configure 'label protocol ldp' on all routers
B.Enable 'mpls ldp advertise-labels'
C.Configure 'mpls ip' on all interfaces
D.Enable 'mpls ldp explicit-null' on the ingress
AnswerB

This command ensures that LDP advertises labels for all FECs.

Why this answer

The 'mpls ldp advertise-labels' command ensures that LDP advertises label bindings to its peers. If this is disabled (default is enabled, but can be overridden), LDP sessions may be up but no labels are distributed, resulting in missing labels in the LFIB. Re-enabling it forces LDP to send label mappings for all FECs, resolving the connectivity issue.

Exam trap

Cisco often tests the distinction between LDP session establishment (which can be up) and label advertisement (which can be suppressed via filters), leading candidates to overlook the 'advertise-labels' command and instead focus on interface-level MPLS enablement or protocol selection.

How to eliminate wrong answers

Option A is wrong because 'label protocol ldp' is used to select LDP as the label distribution protocol on a per-interface basis, but if LDP sessions are already up, this command is not needed and does not address missing label advertisements. Option C is wrong because 'mpls ip' enables MPLS forwarding on an interface, but if LDP sessions are up and labels are missing, the issue is with label advertisement, not MPLS enablement on interfaces. Option D is wrong because 'mpls ldp explicit-null' configures the use of explicit null labels (label 0) for certain FECs, which is a traffic-engineering optimization and does not cause missing labels in the LFIB; it would only affect label values, not their presence.

2
MCQeasy

Which LISP feature allows a device to register its location to a mapping system so that another device can find it?

A.ETR
B.Map-Resolver (MR)
C.Proxy ITR (PITR)
D.xTR
AnswerA

ETR registers EID-to-RLOC mappings with the mapping system.

Why this answer

The Egress Tunnel Router (ETR) is the LISP device that registers its location (RLOC) to the mapping system (Map-Server) so that other devices can resolve the endpoint identifier (EID) to that RLOC. This registration process populates the mapping database, enabling remote Ingress Tunnel Routers (ITRs) to find and forward traffic to the ETR. Without ETR registration, the mapping system would have no location information for the EID.

Exam trap

Cisco often tests the distinction between the ETR (which registers) and the xTR (which is a device that can act as both ITR and ETR), leading candidates to incorrectly select xTR because they think it covers both functions, but the question specifically asks for the device that registers its location.

How to eliminate wrong answers

Option B (Map-Resolver, MR) is wrong because the MR handles map-request queries from ITRs, not registration; it does not register its own location. Option C (Proxy ITR, PITR) is wrong because a PITR encapsulates traffic for non-LISP sites and does not perform registration; it acts as an ITR on behalf of non-LISP hosts. Option D (xTR) is wrong because xTR is a combined ITR/ETR role, but the specific feature of registering location to the mapping system is performed by the ETR function, not the xTR as a whole; the question asks for the device that registers, which is the ETR.

3
Drag & Dropmedium

Drag and drop the steps to configure a Layer 3 interface on a Cisco switch (SVI) into the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4

Why this order

SVI configuration requires creating the VLAN, then the interface VLAN, assigning an IP, and enabling it.

4
MCQmedium

Based on the exhibit, what is preventing the BGP session from establishing?

A.The BGP MD5 password is mismatched
B.The BGP update-source is misconfigured
C.The neighbor has reached its maximum prefix limit
D.The TTL security check is blocking the connection
AnswerD

The error 'Connection is not permitted by TTL security check (TTL=1)' clearly indicates the TTL security mechanism is rejecting the packet.

Why this answer

The error message indicates the TTL security check is rejecting the connection because the incoming TTL is not 255 (as expected for an eBGP multihop session). The remote AS is shown as 65000, so it is eBGP. The neighbor is reached via a single-hop but the TTL check expects TTL=255, but the router sees a TTL less than that.

Option A is wrong because no MD5 password mismatch is indicated; the error explicitly mentions TTL security. Option B is wrong because the update-source is not the issue; the TTL check is the direct cause. Option C is wrong because the error message does not mention prefix limits; it clearly states TTL security.

5
MCQeasy

Which IS-IS TLV is used to carry IPv6 reachability information?

A.TLV 135
B.TLV 236
C.TLV 232
D.TLV 242
AnswerB

TLV 236 is IPv6 Reachability.

Why this answer

TLV 236 (IPv6 Reachability) carries IPv6 prefixes and associated metrics.

6
MCQeasy

In an OSPF network, an engineer wants to reduce the size of the routing table and prevent external routes from being advertised into an area. Which area type should be configured?

A.Stub area
B.Totally stubby area
C.Backbone Area 0
D.NSSA
AnswerA

Stub area blocks type 5 LSAs; uses default route to the ABR.

Why this answer

A stub area does not allow AS-external LSAs (type 5), reducing routing table size. NSSA allows limited external routes via type 7 LSAs.

7
MCQmedium

In an MPLS network, a PE router receives a VPNv4 route from a route reflector. The route is not being installed in the VRF table. Which condition could cause this?

A.The route target does not match the VRF import map.
B.The MPLS label is missing.
C.The route distinguisher is incorrect.
D.The next-hop is unreachable.
AnswerA

VRF import filters based on route targets; if mismatch, the route is not installed.

Why this answer

A VPNv4 route is installed into a VRF table only if its Route Target (RT) matches an import statement in the VRF's route-target import list or import map. If the RT does not match, the PE router will not import the route into the VRF, even though the route is valid in the BGP VPNv4 table. This is the most common cause for a VPNv4 route being present in BGP but missing from the VRF.

Exam trap

Cisco often tests the distinction between the Route Distinguisher (which makes prefixes unique) and the Route Target (which controls import/export), leading candidates to incorrectly blame the RD when the RT is the actual filter.

How to eliminate wrong answers

Option B is wrong because a missing MPLS label would prevent the route from being usable for forwarding, but the route can still be installed in the VRF table as long as the RT matches and next-hop is reachable. Option C is wrong because the Route Distinguisher (RD) is used to make VPNv4 prefixes unique across VRFs; an incorrect RD would cause a different issue (e.g., prefix collision or wrong VRF association), but it does not prevent installation if the RT matches. Option D is wrong because an unreachable next-hop would cause the route to be marked as invalid in the BGP table and not installed in the IP routing table, but the route could still be present in the VRF table if the RT matches; the next-hop check occurs after import.

8
MCQmedium

Refer to the exhibit. The router cannot form a full OSPF adjacency with 10.0.0.2. Which is the most likely cause?

A.Duplicate router IDs.
B.Mismatched authentication.
C.Mismatched hello interval.
D.Mismatched MTU.
AnswerD

OSPF Database Description packets include MTU; a mismatch prevents progression from EXSTART.

Why this answer

The most likely cause is a mismatched MTU because OSPF uses the interface MTU to determine whether to form an adjacency. If the MTU on one side is smaller than the size of the Database Description (DBD) packet, the neighbor will reject the packet and remain in the EXSTART state, preventing full adjacency. This is a common issue when connecting interfaces with different MTU values, such as a default 1500 bytes on one side and a lower value on the other.

Exam trap

Cisco often tests the MTU mismatch scenario by showing a neighbor stuck in EXSTART state, leading candidates to mistakenly choose mismatched hello intervals or authentication, which would instead cause the neighbor to be stuck in DOWN or INIT.

How to eliminate wrong answers

Option A is wrong because duplicate router IDs would cause the router to reject the neighbor entirely, often resulting in a state of DOWN or ATTEMPT, not a failure to progress from EXSTART to FULL. Option B is wrong because mismatched authentication would cause OSPF packets to be dropped, typically resulting in the neighbor state remaining at DOWN or INIT, not EXSTART. Option C is wrong because mismatched hello intervals would prevent the neighbor from being discovered, keeping the state at DOWN, not causing a stuck EXSTART state.

9
MCQeasy

Which OSPF neighbor state indicates that a router has received a hello packet from a neighbor but the neighbor's Router ID is not yet seen in its own hello packet?

A.Down
B.Two-way
C.Init
D.ExStart
AnswerC

Init state indicates hello received but not bidirectional.

Why this answer

The Init state is the first step in OSPF neighbor formation after the Down state. A router enters Init when it receives a Hello packet from a neighbor but does not yet see its own Router ID in the neighbor's Hello packet, indicating that bidirectional communication is not yet confirmed.

Exam trap

Cisco often tests the distinction between Init and Two-way states, and the trap here is confusing the receipt of a Hello packet (Init) with the confirmation of bidirectional communication (Two-way).

How to eliminate wrong answers

Option A is wrong because the Down state means no Hello packets have been received from the neighbor at all, not that a Hello was received without the router's ID. Option B is wrong because the Two-way state is reached after both routers have seen each other's Router IDs in their respective Hello packets, confirming bidirectional communication. Option D is wrong because ExStart is a later state in the database exchange process, occurring after the Two-way state and the election of the Designated Router and Backup Designated Router.

10
Multi-Selecthard

Which THREE of the following are characteristics of Segment Routing (SR-MPLS) compared to traditional MPLS with LDP?

Select 3 answers
A.It can only be used for transit, not for egress routers.
B.The IGP (IS-IS or OSPF) is used to advertise prefix SIDs.
C.It supports explicit path control via segment lists.
D.Labels are distributed via multicast to all routers.
E.No need for LDP or RSVP-TE for label distribution.
AnswersB, C, E

Correct. IGP extensions carry label information.

Why this answer

In Segment Routing (SR-MPLS), the IGP (IS-IS or OSPF) is extended to advertise prefix Segment Identifiers (SIDs), which are used to build MPLS labels directly from the IGP database. This eliminates the need for a separate label distribution protocol like LDP, as the IGP itself carries the label information within its link-state advertisements.

Exam trap

Cisco often tests the misconception that SR-MPLS still requires LDP or RSVP-TE for label distribution, when in fact the IGP itself carries the SID information, making those protocols unnecessary.

11
MCQmedium

In BGP, what is the purpose of the ORIGINATOR_ID attribute in a route reflector environment?

A.Indicates the next-hop router
B.Sets the local preference
C.Identifies the originating router to prevent loops
D.Identifies the route reflector cluster
AnswerC

ORIGINATOR_ID is used to detect and avoid loops.

Why this answer

ORIGINATOR_ID is set by the route reflector to identify the originator of the route. It is used to prevent loops in iBGP.

12
Multi-Selectmedium

A network engineer is troubleshooting a BGP route selection issue on a router that receives the same prefix from two different peers. Which THREE BGP attributes are considered in the route selection process before the 'prefer the route with the lowest metric' step?

Select 5 answers
A.Highest weight
B.Shortest AS_PATH
C.Prefer locally originated routes (network or aggregate)
D.Highest local preference
E.Lowest origin type (IGP < EGP < incomplete)
AnswersA, B, C, D, E

Correct. Highest weight is checked first in the BGP path selection process, before any other attribute including metric.

Why this answer

The BGP best-path selection algorithm considers attributes in a specific order before using the metric (MED). The sequence is: highest Weight, highest Local Preference, prefer locally originated routes, shortest AS_PATH, lowest Origin type, and then lowest metric. Therefore, all five options A, B, C, D, and E are evaluated before the metric step.

Exam trap

Candidates often forget that AS_PATH and Origin are evaluated after local preference and locally originated routes but before metric. The trap is thinking only weight, local pref, and local origin are before metric, but the full order includes AS_PATH and origin as well.

How to eliminate wrong answers

Option B is wrong because the shortest AS_PATH is considered after local preference and locally originated routes, not before the lowest metric step; it is actually step 4 in the standard BGP decision process. Option E is wrong because the lowest origin type (IGP < EGP < incomplete) is evaluated after the AS_PATH comparison, not before the metric step; it is step 5 in the BGP best-path algorithm.

13
MCQeasy

Which IS-IS TLV is used to carry Traffic Engineering (TE) information such as link bandwidth and TE metric in modern SP networks?

A.TLV 22 (extended IS reachability)
B.TLV 128 (IP reachability)
C.TLV 135 (extended IP reachability)
D.TLV 1 (area addresses)
AnswerA

Correct. TLV 22 carries extended IS reachability with sub-TLVs for TE.

Why this answer

IS-IS TE extensions use sub-TLVs within the extended IS reachability TLV (type 22). Specifically, TLV 135 (extended IP reachability) carries wide metrics, but TE information is carried in the extended IS reachability TLV (type 22) with sub-TLVs. The question asks for the TLV that carries TE info; the correct answer is the extended IS reachability TLV (type 22).

14
MCQmedium

An engineer is configuring IS-IS fast convergence. Which mechanism provides sub-second failure detection independently of the routing protocol?

A.BFD
B.LSP fast flooding
C.PRC (Partial Route Computation)
D.iSPF (incremental SPF)
AnswerA

BFD provides sub-second failure detection.

Why this answer

BFD (Bidirectional Forwarding Detection) provides fast failure detection at the link layer, triggering routing protocol convergence.

15
MCQhard

A service provider is deploying BGP PIC (Prefix Independent Convergence) to improve convergence after a link failure. Which mechanism does BGP PIC leverage to achieve fast failover?

A.It decreases the BGP update timer to propagate withdrawals faster.
B.It reduces the BGP hold timer to detect failures faster.
C.It uses BFD to detect failures and triggers BGP to recompute routes immediately.
D.It pre-installs a backup path in the routing table and forwarding plane.
AnswerD

Correct. BGP PIC pre-installs backup paths for prefix-independent convergence.

Why this answer

BGP PIC uses backup paths that are pre-installed in the RIB/FIB. When the primary path fails, traffic is immediately switched to the backup path without waiting for BGP re-convergence.

16
Multi-Selecthard

An ISP is deploying BGP confederations to reduce iBGP mesh requirements. Which of the following statements about BGP confederations are true? (Choose two.)

Select 2 answers
A.The next-hop attribute is unchanged across confederation boundaries
B.The AS_PATH length calculation includes confederation segments when selecting the best path
C.Confederations use a special type of eBGP between sub-ASes, but they retain the IGP metric across the confederation
D.The MED attribute is replaced by a confederation-specific metric
E.Confederations allow an AS to be divided into multiple sub-ASes to reduce iBGP peering
AnswersA, E

Next-hop is not changed; it remains the same as iBGP.

Why this answer

BGP confederations divide an AS into sub-ASes. eBGP-like behavior is used between sub-ASes, but the AS_PATH length calculation treats the confederation as a single AS. The sub-AS number is appended to the AS_PATH with a special type code, but the AS_PATH length for best path selection ignores confederation segments.

17
MCQmedium

A service provider is implementing 6PE to carry IPv6 traffic over an existing MPLS IPv4 core. Which BGP extension is required on the provider edge (PE) routers to exchange IPv6 prefixes with an IPv4 next-hop?

A.BGP IPv6 unicast address family with IPv6 next-hop
B.BGP IPv4 unicast address family with the IPv6 prefix as a label
C.BGP VPNv4 address family
D.MP-BGP for the IPv6 address family with an IPv4 next-hop encoded in the MP_REACH_NLRI
AnswerD

Correct. 6PE uses MP-BGP to advertise IPv6 prefixes with an IPv4 next-hop.

Why this answer

6PE uses BGP multiprotocol extensions (MP-BGP) with the IPv6 Address Family Identifier (AFI) and subsequent AFI (SAFI) to carry IPv6 prefixes. The next-hop is encoded as an IPv4 address using the 'next-hop' attribute with an IPv4 address. This is done via MP_REACH_NLRI for IPv6 with an IPv4 next-hop.

18
MCQmedium

In BGP route selection, which attribute is considered before LOCAL_PREF?

A.AS_PATH length
B.MED
C.LOCAL_PREF
D.Weight
AnswerD

Weight is checked first; it is Cisco proprietary.

Why this answer

BGP route selection starts with the highest weight (Cisco proprietary), then highest LOCAL_PREF, then locally originated routes.

19
MCQeasy

Which technology should be used to provide per-flow load balancing across multiple equal-cost paths in an MPLS network while preserving packet order?

A.ECMP with a hash algorithm based on layer 3 and layer 4 headers
B.LAG with default hashing
C.Policy-based routing with next-hop per destination
D.Per-packet round-robin load balancing
AnswerA

ECMP hashing preserves flow ordering.

Why this answer

ECMP with a hash algorithm based on Layer 3 and Layer 4 headers is the correct choice because it provides per-flow load balancing by computing a hash over source/destination IP addresses and TCP/UDP port numbers, ensuring that all packets belonging to the same flow are forwarded over the same equal-cost path. This preserves packet order while distributing different flows across multiple paths in an MPLS network.

Exam trap

Cisco often tests the distinction between per-flow and per-packet load balancing, and the trap here is that candidates confuse ECMP with per-packet round-robin, assuming both preserve order, but only per-flow hashing guarantees packet ordering within a flow.

How to eliminate wrong answers

Option B is wrong because LAG (Link Aggregation Group) with default hashing operates at the link level, not at the network layer, and does not provide per-flow load balancing across multiple equal-cost paths in an MPLS network; it bundles physical links into a single logical link and may reorder packets if the hash is not flow-aware. Option C is wrong because policy-based routing with next-hop per destination is a static, destination-based forwarding mechanism that does not dynamically load balance per flow across equal-cost paths and can lead to packet reordering if policies change. Option D is wrong because per-packet round-robin load balancing sends packets sequentially across paths without considering flow affinity, which breaks packet order and causes severe reordering issues in TCP and other stateful protocols.

20
Multi-Selecthard

Which THREE actions can help mitigate the impact of BGP prefix flapping in a service provider network?

Select 3 answers
A.Use route summarization.
B.Implement route dampening.
C.Use BGP peer groups.
D.Increase the BGP hold timer.
E.Apply BGP graceful restart.
AnswersA, B, D

Summarization aggregates multiple prefixes, reducing the impact of individual flaps.

Why this answer

Route summarization (A) reduces the number of BGP prefixes advertised, which inherently limits the impact of flapping because a single summary prefix represents many more-specific prefixes. If a specific subprefix flaps, the aggregate remains stable, preventing the flapping from propagating to BGP peers. This is a proactive approach to minimize the control-plane churn caused by unstable routes.

Exam trap

Cisco often tests the distinction between mechanisms that reduce control-plane churn (summarization, dampening) versus those that maintain forwarding during failures (graceful restart), leading candidates to incorrectly select graceful restart as a flapping mitigation tool.

21
MCQmedium

An SP is designing an OSPF network with a totally stubby area to reduce the LSA database. Which LSA types are blocked by default in a totally stubby area?

A.Type 3 and Type 5 only
B.Type 5 only
C.Type 3, Type 4, and Type 5
D.Type 4 and Type 5 only
AnswerC

Totally stubby blocks all inter-area (Type 3) except default, and all external (Type 4/5).

Why this answer

Totally stubby area blocks Type 4 (ASBR Summary) and Type 5 (External) LSAs, and also Type 3 (Summary) LSAs except for the default route.

22
MCQeasy

A network engineer needs to ensure that a specific customer's traffic is not adversely affected by other customers' traffic in a shared MPLS core. Which technology should be used?

A.QoS policies on PE routers with shaping and policing
B.iBGP route reflectors
C.MPLS Traffic Engineering
D.802.1Q VLANs
AnswerA

QoS allows per-customer traffic controls.

Why this answer

QoS policies on PE routers with shaping and policing allow the service provider to enforce traffic contracts per customer, ensuring that one customer's traffic does not consume bandwidth allocated to another. This is achieved by applying ingress policing to limit customer traffic to the Committed Information Rate (CIR) and egress shaping to smooth bursts, preventing congestion in the MPLS core from affecting other customers.

Exam trap

Cisco often tests the distinction between traffic engineering (path optimization) and QoS (rate enforcement), leading candidates to mistakenly choose MPLS TE when the question asks about preventing one customer's traffic from adversely affecting another.

How to eliminate wrong answers

Option B is wrong because iBGP route reflectors are used to reduce the number of BGP sessions in an autonomous system by reflecting routes to clients; they do not provide traffic isolation or rate limiting between customers. Option C is wrong because MPLS Traffic Engineering (TE) optimizes the path of traffic through the network based on bandwidth constraints and administrative policies, but it does not enforce per-customer rate limits or prevent one customer's traffic from overwhelming another's. Option D is wrong because 802.1Q VLANs operate at Layer 2 to segment traffic within a single broadcast domain, but they are not applicable in an MPLS core where traffic is forwarded based on labels, not VLAN tags, and they do not provide per-customer rate limiting.

23
Multi-Selectmedium

Which TWO statements about BGP route reflectors are true?

Select 2 answers
A.The cluster ID is used to detect routing loops.
B.A route reflector does not modify the next-hop attribute.
C.Route reflectors modify the AS_PATH attribute.
D.Route reflectors must be fully meshed.
E.A route reflector passes routes from non-client to non-client.
AnswersA, B

Multiple RRs in the same cluster use the cluster ID to avoid loops.

Why this answer

BGP route reflectors use the cluster ID to detect and prevent routing loops. When a route reflector receives an update containing its own cluster ID in the cluster-list attribute, it discards the route, breaking the loop. This mechanism is defined in RFC 4456 and is essential for loop-free route propagation in non-full-mesh iBGP topologies.

Exam trap

Cisco often tests the misconception that route reflectors modify the AS_PATH or that they pass routes between non-clients, when in fact they preserve the AS_PATH and only reflect routes from non-clients to clients, not between non-clients.

24
MCQhard

A service provider is implementing 6VPE to provide IPv6 L3VPN services over an MPLS core. Which BGP address family must be configured on the PE routers to exchange IPv6 VPN routes?

A.IPv6 unicast
B.VPNv4 unicast
C.IPv4 unicast
D.VPNv6 unicast
AnswerD

VPNv6 unicast carries IPv6 VPN prefixes.

Why this answer

6VPE uses the VPNv6 address family (or IPv6 labeled unicast with VPN extensions) to carry IPv6 prefixes with VPN-IPv6 addresses.

25
MCQhard

A network engineer is troubleshooting an OSPF adjacency issue between two routers connected via a serial link. The routers are configured with point-to-point network type. The adjacency stays in EXSTART state. What is the most likely cause?

A.Mismatched OSPF area ID.
B.Mismatched hello/dead intervals.
C.Mismatched MTU.
D.Duplicate router IDs.
AnswerC

OSPF uses the MTU in Database Description packets; a mismatch causes the adjacency to stay in EXSTART.

Why this answer

On a point-to-point OSPF link, the EXSTART state indicates that the routers have formed a bidirectional communication (2WAY) and are now negotiating the master/slave relationship for database description (DBD) packet exchange. A mismatched MTU between the two interfaces causes the DBD packets to be dropped or rejected, preventing the adjacency from progressing beyond EXSTART. This is a common issue on serial links where one side may have a different MTU configured.

Exam trap

Cisco often tests the EXSTART state trap by making candidates confuse it with the more common mismatched hello/dead intervals or area ID issues, which actually prevent reaching EXSTART, while MTU mismatch is the specific cause of stalling in EXSTART.

How to eliminate wrong answers

Option A is wrong because a mismatched OSPF area ID would prevent the adjacency from forming at all, typically stalling in the INIT or 2WAY state, not EXSTART. Option B is wrong because mismatched hello/dead intervals would cause the adjacency to fail during the INIT or 2WAY state, as routers would not receive Hello packets within the expected interval. Option D is wrong because duplicate router IDs would cause one router to reject the other's Hello packets, leading to a state of DOWN or INIT, not EXSTART.

26
MCQeasy

In an IS-IS network, a router has a NET of 49.0001.1921.6800.1001.00. What does the '00' at the end represent?

A.System ID
B.SEL (NSAP Selector)
C.AFI
D.Area ID
AnswerB

SEL is always 00 for IS-IS.

Why this answer

The last byte '00' is the SEL (NSAP Selector), which is always '00' for IS-IS routing.

27
MCQeasy

In IS-IS, what is the purpose of the System ID portion of the NET address?

A.It identifies the router within the area
B.It identifies the area to which the router belongs
C.It indicates the routing protocol version
D.It specifies the ISO layer (SEL) for routing
AnswerA

Correct; System ID is unique per router in the area.

Why this answer

The NET (Network Entity Title) consists of AFI, Area ID, System ID, and SEL. The System ID uniquely identifies a router within an area.

28
MCQhard

A network engineer is troubleshooting an MPLS L3VPN where the CE router is receiving the correct VPN prefixes from the PE, but traffic from the CE to those prefixes is being dropped. The PE has a default route pointing to the CE. What is the most likely cause?

A.The VRF on the PE is not configured with the correct route-target import.
B.The PE does not have a specific route for the destination in its global routing table.
C.The CE does not have a route back to the PE's loopback.
D.The PE-CE link MTU is smaller than the packet size.
AnswerB

Without a specific route, the PE may not push the correct MPLS label, causing the core to drop the packet.

Why this answer

The CE is receiving the correct VPN prefixes from the PE, so the VRF import/export is working. However, when the CE sends traffic to those prefixes, the PE must forward the packets. The PE has a default route pointing to the CE, but if the PE's global routing table lacks a specific route for the destination prefix (which is normal for L3VPN, as VPN routes are in the VRF, not the global table), the PE will drop the traffic because it cannot find a valid next hop in the global table for the outer IP header.

This is a classic issue where the PE's global table must have a route to the CE's loopback or the PE-CE link subnet to enable recursive forwarding.

Exam trap

Cisco often tests the misconception that a VRF route alone is sufficient for forwarding, but in reality, the PE must have a global route to the BGP next-hop (typically the remote PE's loopback) for the MPLS label-switched path to function.

How to eliminate wrong answers

Option A is wrong because the CE is already receiving the correct VPN prefixes, which proves the VRF route-target import is functioning correctly; if it were misconfigured, the prefixes would not be present on the CE. Option C is wrong because the CE does not need a route back to the PE's loopback; the CE only needs a route to the PE's interface IP (or a default route) to send traffic, and the problem is on the PE side, not the CE. Option D is wrong because an MTU mismatch would typically cause fragmentation issues or ICMP unreachables, not a complete drop of all traffic to the VPN prefixes, and the CE is receiving routes, so the control plane is unaffected.

29
MCQmedium

Which OSPF area type does not allow external routes (Type 5 LSAs) but does allow inter-area routes and can have a default route injected?

A.Totally stubby area
B.Backbone area (Area 0)
C.Not-So-Stubby Area (NSSA)
D.Stub area
AnswerD

Stub areas block Type 5 and have a default.

Why this answer

A stub area blocks Type 5 LSAs, and a default route is injected for external destinations.

30
MCQhard

An SP is implementing IPv6 transition using MAP-T. Which encapsulation method does MAP-T use?

A.MPLS label switching
B.IPv4 in IPv6 encapsulation
C.IPv6 in IPv4 encapsulation
D.IPv4-IPv6 translation (NAT64-like)
AnswerD

MAP-T uses translation in the data plane.

Why this answer

MAP-T (Mapping of Address and Port using Translation) uses IPv4-IPv6 translation (stateless NAT64-like) at the customer edge, not encapsulation.

31
Multi-Selectmedium

Which TWO statements correctly describe the use of OSPF in a service provider network?

Select 2 answers
A.OSPF uses the Bellman-Ford algorithm to compute routes.
B.OSPF uses different LSA types to advertise different types of routing information.
C.OSPF is a distance-vector routing protocol.
D.OSPF can support multiple areas with a backbone area 0.
E.OSPF uses TLVs to encode routing information.
AnswersB, D

LSA types 1-5 and 7 are used.

Why this answer

OSPF uses different LSA types (e.g., Type 1 Router LSA, Type 2 Network LSA, Type 3 Summary LSA, Type 5 AS-External LSA) to advertise different categories of routing information, such as router links, network links, inter-area routes, and external routes. This LSA-type differentiation is fundamental to OSPF's link-state architecture, enabling efficient flooding and route computation within and across areas.

Exam trap

Cisco often tests the distinction between link-state and distance-vector protocols, and candidates may mistakenly associate OSPF with Bellman-Ford or TLVs due to superficial similarities with other protocols like IS-IS or EIGRP.

32
Multi-Selectmedium

An engineer is designing an iBGP route reflector topology to improve scalability. Which two statements about BGP route reflectors are correct?

Select 2 answers
A.The originator-id attribute prevents the route from being advertised back to the originating router.
B.All clients must be fully meshed with each other.
C.Route reflectors modify the AS_PATH attribute to prevent loops.
D.The cluster-id is used to identify a group of route reflectors.
E.Route reflectors are only used in eBGP topologies.
AnswersA, D

Originator-id is set by the RR and checked to avoid loops.

Why this answer

Route reflectors use cluster-id to detect loops and originator-id to prevent advertisement back to the originator. The non-client mesh requirement is eliminated with route reflectors.

33
Multi-Selectmedium

Which three BGP communities are standardized and commonly used for inter-AS traffic engineering? (Choose three.)

Select 3 answers
A.NOPEER
B.NO_EXPORT (0xFFFFFF01)
C.LOCAL_AS (0xFFFFFF03)
D.INTERNET (0x00000000)
E.NO_ADVERTISE (0xFFFFFF02)
AnswersB, C, E

Prevents route from being advertised to any eBGP peer.

Why this answer

Standard BGP communities include NO_EXPORT (0xFFFFFF01), NO_ADVERTISE (0xFFFFFF02), and LOCAL_AS (0xFFFFFF03). NO_EXPORT prevents advertisement to any eBGP peer; NO_ADVERTISE prevents advertisement to any peer; LOCAL_AS prevents advertisement outside the local AS.

34
MCQeasy

Which BGP attribute is locally significant and used to influence outbound traffic from an AS?

A.WEIGHT
B.LOCAL_PREF
C.AS_PATH
D.MED
AnswerB

LOCAL_PREF influences outbound traffic.

Why this answer

LOCAL_PREF is used to influence the path selection for outbound traffic within the AS, with higher preference preferred.

35
MCQhard

A network engineer applies the above configuration on a PE router. The PE receives route 172.16.1.0/24 from eBGP peer 10.1.1.1. Which communities will be attached to this route?

A.65000:100 only
B.No communities are attached because the route-map does not specify additive.
C.65000:200 only
D.65000:100 and 65000:200
AnswerD

The set community command can include multiple values.

Why this answer

The route-map 'SET_COMMUNITY' is applied to the eBGP neighbor 10.1.1.1 via the `neighbor 10.1.1.1 route-map SET_COMMUNITY in` command. The route-map first matches all routes with `match ip address prefix-list ANY` (which permits 0.0.0.0/0 le 32), then executes the `set community 65000:100 65000:200` action. Since the `additive` keyword is not used, the set command replaces any existing communities with the two listed communities (65000:100 and 65000:200).

Therefore, both communities are attached to the route 172.16.1.0/24.

Exam trap

Cisco often tests the misconception that the `additive` keyword is required for any communities to be attached, when in fact `additive` only controls whether existing communities are preserved or overwritten.

How to eliminate wrong answers

Option A is wrong because the route-map sets both 65000:100 and 65000:200, not just 65000:100. Option B is wrong because the `additive` keyword is only required to preserve existing communities while adding new ones; without it, the set command still attaches the specified communities (it replaces, not omits). Option C is wrong because the route-map sets both communities, not just 65000:200.

36
MCQmedium

A service provider's network uses MPLS TE with Fast Reroute (FRR) for link protection. After a fiber cut on a core link, the traffic is rerouted via a backup tunnel, but the backup tunnel's path suffers from high latency. The customer complains about poor voice quality. What can be done to avoid this scenario in future deployments?

A.Configure backup tunnels with explicit paths that avoid high-latency links
B.Increase the bandwidth reservations on the backup tunnel
C.Implement BGP PIC for edge routers
D.Use node protection instead of link protection
AnswerA

Explicit path constraint ensures backup tunnel follows desired low-latency links.

Why this answer

Configuring backup tunnels with explicit paths that avoid high-latency links ensures that when MPLS TE Fast Reroute (FRR) activates, the backup path meets the latency requirements for real-time traffic like voice. By specifying explicit routes (e.g., via the 'path-option' command with explicit-path objects), the operator can exclude links known to have high propagation delay or congestion, thus preventing the poor voice quality experienced after the fiber cut.

Exam trap

Cisco often tests the misconception that increasing bandwidth or using node protection will solve latency issues, but the trap here is that latency is a path property, not a bandwidth or protection-type attribute, so only explicit path control (Option A) directly addresses the problem.

How to eliminate wrong answers

Option B is wrong because increasing bandwidth reservations on the backup tunnel does not address the root cause of high latency; it only ensures sufficient bandwidth is available, but latency is a function of path length, link speed, and queuing delay, not bandwidth alone. Option C is wrong because BGP PIC (Prefix Independent Convergence) is designed to improve convergence for BGP routes at the edge, not to control the path selection of MPLS TE backup tunnels; it does not influence the latency of the FRR backup path. Option D is wrong because node protection (protecting against the failure of a downstream node) does not inherently avoid high-latency links; it only changes the scope of protection from link to node, and the backup tunnel could still traverse high-latency links if not explicitly configured to avoid them.

37
MCQeasy

Which BGP attribute influences inbound traffic to an AS by affecting the path selection of eBGP peers?

A.LOCAL_PREF
B.MED
C.Weight
D.AS_PATH
AnswerB

MED is used to influence inbound traffic.

Why this answer

MED (Multi-Exit Discriminator) is used to influence inbound traffic by suggesting to a neighbor AS which path to use.

38
Multi-Selectmedium

Which three BGP attributes are considered in the route selection process before comparing MED? (Choose three.)

Select 3 answers
A.Weight
B.MED
C.Local preference
D.Router ID
E.AS_PATH length
AnswersA, C, E

Highest weight is first in selection.

Why this answer

The order: weight, local pref, originate (locally originated), AS_PATH length, ORIGIN, MED. So weight, local pref, and AS_PATH length are before MED.

39
Multi-Selecthard

Which THREE are valid methods for label distribution in an MPLS network?

Select 3 answers
A.Segment Routing via IGP
B.RSVP-TE
C.BGP
D.LDP
E.TDP
AnswersA, B, D

Segment routing uses IGP extensions to distribute prefix SIDs.

Why this answer

Segment Routing via IGP (Option A) is a valid label distribution method because it uses the IGP (OSPF or IS-IS) to advertise prefix-SIDs, which are MPLS labels. The IGP distributes these labels as part of its link-state database, eliminating the need for a separate label distribution protocol like LDP. This is defined in RFC 8660 and RFC 8665 for OSPF and IS-IS respectively.

Exam trap

Cisco often tests the distinction between label distribution protocols for core LSP establishment versus label-carrying protocols for services, so candidates may mistakenly select BGP as a core label distribution method when it is actually used for VPN label distribution.

40
Multi-Selectmedium

Which TWO queuing mechanisms best meet the requirements for voice traffic (low latency and jitter) in a service provider network?

Select 2 answers
A.LLQ (Low Latency Queuing)
B.WRED (Weighted Random Early Detection)
C.Priority queuing
D.CBWFQ without LLQ
E.FIFO (First In First Out)
AnswersA, C

LLQ provides a strict priority queue for real-time traffic.

Why this answer

LLQ is correct because it combines a strict priority queue with CBWFQ, ensuring voice traffic (which is delay-sensitive) is always serviced first, thereby minimizing latency and jitter. The priority queue is policed to prevent starvation of other traffic, making it ideal for real-time applications like VoIP in service provider networks.

Exam trap

Cisco often tests the misconception that WRED or CBWFQ alone can handle voice traffic, but the trap here is that only LLQ (or strict priority queuing) provides the necessary low latency and jitter by guaranteeing immediate service for voice packets, while other mechanisms introduce delay or drop packets.

41
MCQeasy

A service provider router receives a route with a higher specific prefix length than the same prefix in the routing table. Which route will be preferred?

A.The route with higher administrative distance.
B.The route with lower metric.
C.The more specific prefix.
D.The less specific prefix.
AnswerC

Longest prefix match is the primary criterion in IP routing.

Why this answer

C is correct because a router always prefers the most specific prefix (longest prefix length) when forwarding packets, regardless of administrative distance or metric. This is a fundamental rule of IP routing: the route with the longest subnet mask match is chosen first, as it represents the most precise path to the destination.

Exam trap

Cisco often tests the misconception that administrative distance or metric can override the longest prefix match, leading candidates to incorrectly choose option A or B when the question explicitly states a higher specific prefix length.

How to eliminate wrong answers

Option A is wrong because administrative distance is only used to compare routes to the same prefix length; a less specific route with a lower AD cannot override a more specific route. Option B is wrong because metric is compared only among routes with the same prefix length and same routing protocol; a lower metric on a less specific route does not make it preferred over a more specific route. Option D is wrong because the less specific prefix is never preferred when a more specific prefix exists for the same destination; the longest prefix match rule always takes precedence.

42
Multi-Selecthard

Which TWO BGP path attributes are considered before AS-path length in the default best-path selection process?

Select 2 answers
A.Origin code
B.Community
C.MED
D.Weight
E.Local Preference
AnswersD, E

Weight is the first tie-breaker.

Why this answer

Weight (D) is a Cisco-proprietary attribute that is checked first in the BGP best-path selection process, before AS-path length. Local Preference (E) is the second attribute evaluated, also preceding AS-path length. Both are considered before the AS-path length comparison in the default BGP decision process.

Exam trap

Cisco often tests the exact order of BGP path selection attributes, and the trap here is that candidates mistakenly think MED or Origin are evaluated before AS-path length, when in fact they come later in the decision process.

43
MCQmedium

In BGP route selection, which attribute is considered before the MED when comparing routes from different ASes?

A.Local preference
B.Next-hop reachability
C.ORIGIN type
D.AS_PATH length
AnswerC

ORIGIN (IGP, EGP, incomplete) is compared before MED.

Why this answer

The BGP best path selection order is: weight, local pref, originated locally, AS_PATH length, ORIGIN, MED, etc. MED is considered after ORIGIN.

44
Matchingmedium

Match each service provider architecture term to its description.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Provider Edge router connecting to customer equipment

Provider core router forwarding traffic without VPN awareness

Customer Edge router connecting to the provider network

Route Reflector to scale BGP in a service provider backbone

Autonomous System Boundary Router connecting to other ASes

Why these pairings

The correct matches are: PE connects to customer edge, P is MPLS core, ASBR connects to other ASes. Common confusions: mistaking P for CE or confusing Route Reflector with ASBR.

45
MCQmedium

A service provider's network is experiencing suboptimal routing for BGP prefixes received from a customer. The customer is multihomed to two different PE routers in the same AS. Which BGP feature can ensure that traffic ingresses via the correct PE?

A.MED
B.Local Preference
C.AS-path prepend
D.Weight
AnswerA

MED is used to influence inbound traffic by advertising different metrics to different peers.

Why this answer

MED (Multi-Exit Discriminator) is the correct BGP attribute for influencing inbound traffic from a multihomed customer. When the customer advertises the same prefix to two PE routers in the same AS, setting a lower MED value on one PE will cause the customer's upstream AS to prefer that path for returning traffic. This allows the service provider to control which PE receives the ingress traffic without altering any outbound routing policies.

Exam trap

Cisco often tests the distinction between attributes that influence inbound vs. outbound traffic, and the trap here is confusing Local Preference (outbound) with MED (inbound) when both are used for path selection within an AS.

How to eliminate wrong answers

Option B (Local Preference) is wrong because Local Preference is used to influence outbound traffic from the local AS, not inbound traffic from a customer. Option C (AS-path prepend) is wrong because it influences path selection by making a route appear longer, but it is typically applied on egress updates to affect inbound traffic from external ASes, not within the same AS for multihomed customers. Option D (Weight) is wrong because Weight is a Cisco-proprietary attribute that is local to the router and influences outbound path selection, not inbound traffic from a customer.

46
Multi-Selectmedium

Which three BGP attributes are considered before the MED in the BGP best path selection process?

Select 3 answers
A.Weight
B.Next-hop metric
C.AS_PATH length
D.Local preference
E.Multi-Exit Discriminator (MED)
AnswersA, C, D

Weight is first in order.

Why this answer

Weight, local preference, and AS_PATH length are considered before MED. ORIGIN is also before MED but AS_PATH is longer.

47
MCQhard

A service provider wants to influence inbound traffic from a customer AS. The customer AS is multi-homed to two provider ASes. Which BGP community is most effective to make the customer prefer a specific entry point?

A.Set community 'no-export' on routes from the undesired entry point.
B.Set community 'prepend 3' on routes from the desired entry point.
C.Set community 'local-preference 200' on routes from the desired entry point.
D.Set community 'no-advertise' on routes from the undesired entry point.
AnswerA

Set community 'no-export' on routes from the undesired entry point. This prevents those routes from being advertised to the customer AS, so the customer only sees routes from the desired entry point, making them prefer that entry point. Correct.

Why this answer

Setting the BGP 'no-export' community on routes from the undesired entry point prevents those routes from being advertised to the customer AS. Since the customer only learns routes from the desired entry point, they will prefer that entry point for inbound traffic. This is a standard technique for influencing inbound traffic without requiring customer-side configuration.

Exam trap

Candidates often confuse the purpose of BGP communities. 'no-export' prevents advertisement to external peers, while 'no-advertise' prevents any advertisement. Additionally, local preference is an attribute set on the receiving end, not a community.

How to eliminate wrong answers

Option A is wrong because the 'no-export' community prevents routes from being advertised to any eBGP peers outside the local AS, but it does not influence the customer's path selection; it only controls route propagation. Option B is wrong because 'prepend 3' is not a BGP community; AS path prepending is a separate technique where the local AS is repeated in the AS_PATH attribute, and it would actually make the desired entry point less preferred by increasing the AS path length. Option D is wrong because the 'no-advertise' community prevents the route from being advertised to any BGP peer, which would block the route entirely rather than influencing the customer's preference for a specific entry point.

48
MCQhard

In a BGP confederation, which AS number is used in the AS_PATH to prevent loops within the confederation?

A.The same AS number as the confederation ID
B.Private AS numbers (64512-65535)
C.Public AS numbers
D.No AS number is prepended
AnswerB

Private AS numbers are used within the confederation.

Why this answer

Confederation uses private AS numbers (from 64512 to 65535) for sub-ASs, and these are prepended to the AS_PATH but not shown to external peers.

49
Multi-Selectmedium

A service provider is designing an OSPF network for both IPv4 and IPv6. Which two features are supported by OSPFv3 but not by OSPFv2? (Choose two.)

Select 2 answers
A.Virtual links
B.Authentication using MD5
C.Route redistribution
D.Support for IPv6
E.Multiple instances per link
AnswersD, E

OSPFv3 is designed for IPv6.

Why this answer

OSPFv3 runs over IPv6, supports multiple instances per link, and uses link-local addresses. OSPFv2 does not have these.

50
MCQmedium

Which BGP mechanism can reduce the number of iBGP sessions in a large SP network while preventing routing loops?

A.BGP PIC
B.BGP confederation
C.BGP route reflector
D.BGP BFD
AnswerC

Route reflectors reduce iBGP sessions and use loop prevention mechanisms.

Why this answer

Route reflectors allow iBGP speakers to advertise routes learned from other iBGP peers, reducing full mesh requirements, and use cluster-id and originator-id to prevent loops.

51
MCQmedium

In OSPFv3, what change was introduced compared to OSPFv2 for supporting IPv6?

A.OSPFv3 uses the same LSA types as OSPFv2
B.OSPFv3 supports only point-to-point network types
C.OSPFv3 runs over IPv6 and uses link-local addresses for adjacencies
D.OSPFv3 eliminates the need for a router ID
AnswerC

Correct; OSPFv3 uses IPv6 link-local addresses for neighbor communication.

Why this answer

OSPFv3 runs per-link instead of per-subnet, uses link-local addresses for neighbor discovery, and separates the protocol from addressing by using LSAs with IPv6 prefix information.

52
MCQeasy

In IS-IS, which type of router is responsible for routing between different areas and also maintains a Level 1 Link State Database?

A.L1/L2 router
B.Level 2 router
C.Level 1 router
D.Area Border Router (ABR)
AnswerA

L1/L2 routers participate in both levels.

Why this answer

L1/L2 routers perform both intra-area and inter-area routing, maintaining both L1 and L2 LSDBs.

53
MCQeasy

A service provider is migrating from OSPF to IS-IS in the core. During the migration, both protocols are running. Some prefixes are learned via both OSPF and IS-IS. The network uses BGP for external routes and MPLS for VPNs. The engineer notices that BGP routes are pointing to a next-hop that is reachable via OSPF but not via IS-IS, causing traffic to be dropped. What is the best course of action to ensure that during the migration, BGP uses only one IGP protocol?

A.Use BGP next-hop tracking to prefer IS-IS routes
B.Configure a route-map to selectively distribute routes
C.Increase the administrative distance of IS-IS to be higher than OSPF
D.Implement MPLS TE tunnels for BGP next-hops
AnswerC

Higher admin distance makes IS-IS less preferred, ensuring OSPF routes are used for next-hop resolution.

Why this answer

Increasing the administrative distance of IS-IS to be higher than OSPF (e.g., from 115 to 120) makes OSPF routes preferred over IS-IS routes in the routing table. Since BGP uses the IGP route to resolve its next-hop, this ensures BGP always selects the OSPF path, preventing traffic drops when the next-hop is only reachable via OSPF. This is a simple, protocol-agnostic way to control IGP preference during a migration without altering route redistribution or tunneling.

Exam trap

Cisco often tests the misconception that BGP next-hop tracking (Option A) or route-maps (Option B) can influence IGP preference, when in fact administrative distance is the direct and simplest mechanism to control route selection between two IGPs.

How to eliminate wrong answers

Option A is wrong because BGP next-hop tracking (NHT) monitors reachability changes but does not influence which IGP protocol is preferred; it only triggers BGP to re-evaluate next-hops, not to prefer one IGP over another. Option B is wrong because a route-map for selective distribution controls which prefixes are advertised between protocols, not the administrative distance or next-hop resolution behavior of BGP; it would not force BGP to use only OSPF for next-hop resolution. Option D is wrong because MPLS TE tunnels can steer traffic but add complexity and do not address the fundamental issue of BGP next-hop resolution preferring one IGP over another; they are an over-engineered solution for a simple administrative distance fix.

54
MCQmedium

A service provider is implementing BGP PIC (Prefix Independent Convergence) for its core network. Which mechanism does BGP PIC primarily rely on to achieve fast convergence?

A.BFD
B.Route reflectors
C.Precomputed backup paths (BGP PIC edge)
D.Communities
AnswerC

BGP PIC precomputes and installs backup paths in FIB.

Why this answer

BGP PIC uses precomputed backup paths (e.g., via BGP PIC edge or BGP add-path) to switch traffic upon failure without waiting for BGP convergence.

55
MCQeasy

Based on the exhibit, which OSPF network type is configured on this interface?

A.Non-Broadcast
B.Point-to-Point
C.Broadcast
D.Point-to-Multipoint
AnswerB

Correct as displayed.

Why this answer

The OSPF network type is determined by the interface configuration. The 'ip ospf network point-to-point' command explicitly sets the interface to point-to-point mode, which eliminates the need for DR/BDR election and uses multicast hello packets (224.0.0.5) to neighbors. This is the correct answer because the exhibit shows this exact configuration.

Exam trap

Cisco often tests the distinction between default OSPF network types (e.g., Broadcast on Ethernet, Non-Broadcast on Frame Relay) and the explicit 'ip ospf network' command, tricking candidates into assuming the default type applies even when the configuration overrides it.

How to eliminate wrong answers

Option A is wrong because Non-Broadcast (NBMA) mode requires manual neighbor configuration and uses unicast hellos, but the exhibit shows no neighbor statements and the interface is configured as point-to-point. Option C is wrong because Broadcast mode requires DR/BDR election and uses multicast hellos (224.0.0.5 and 224.0.0.6), but the point-to-point command overrides this default behavior. Option D is wrong because Point-to-Multipoint mode treats all neighbors as endpoints without DR/BDR, but it requires the 'ip ospf network point-to-multipoint' command, which is not present in the exhibit.

56
MCQmedium

In OSPFv3, which of the following is true about the protocol's operation?

A.It requires IPv4 to function
B.It uses the same LSA types as OSPFv2
C.It does not support authentication
D.It runs per-link rather than per-subnet
AnswerD

OSPFv3 adjacencies are formed over links, not IP subnets.

Why this answer

OSPFv3 runs per-link, not per-subnet; it uses link-local addresses for adjacencies and floods LSA types specific to IPv6.

57
MCQeasy

Which OSPF area type can import external routes as Type 7 LSAs?

A.Stub area
B.Standard area
C.NSSA
D.Totally stubby
AnswerC

NSSA allows external routes as Type 7 LSAs.

Why this answer

NSSA (Not-So-Stubby Area) allows the import of external routes as Type 7 LSAs, which are translated to Type 5 at the ABR.

58
MCQmedium

A service provider is running OSPF in their core network. After a link failure, routing convergence is taking longer than expected. The engineer suspects the issue is related to the SPF calculation. Which OSPF feature can reduce the SPF calculation time?

A.OSPF database overload protection
B.Bidirectional Forwarding Detection (BFD)
C.Incremental SPF (iSPF)
D.LSA pacing timers (pacing-interval)
AnswerC

Reduces SPF computation by recalculating only changed parts.

Why this answer

Incremental SPF (iSPF) reduces SPF calculation time by recalculating only the affected portion of the Shortest Path Tree (SPT) after a topology change, rather than recomputing the entire tree. This is especially beneficial in large OSPF networks where full SPF runs are CPU-intensive and slow convergence.

Exam trap

Cisco often tests the distinction between fast failure detection (BFD) and fast SPF calculation (iSPF), leading candidates to mistakenly choose BFD when the question specifically asks about reducing SPF calculation time.

How to eliminate wrong answers

Option A is wrong because OSPF database overload protection is a mechanism to limit the number of LSAs in the database to prevent memory exhaustion, not to speed up SPF calculation. Option B is wrong because Bidirectional Forwarding Detection (BFD) provides fast link failure detection but does not reduce the SPF calculation time itself; it only triggers the SPF process sooner. Option D is wrong because LSA pacing timers control the rate at which LSAs are generated and flooded, which can reduce network churn but do not directly reduce the time required for SPF computation.

59
MCQmedium

A service provider wants to enable fast convergence for OSPF networks. Which feature should be enabled to detect link failures in sub-second time?

A.BFD
B.OSPF fast hello
C.OSPF SPF throttling
D.OSPF LSA throttling
AnswerA

BFD provides sub-second failure detection.

Why this answer

BFD (Bidirectional Forwarding Detection) provides fast failure detection for routing protocols like OSPF. OSPF can be configured to use BFD for sub-second convergence.

60
MCQeasy

A service provider is designing a Layer 2 MPLS VPN to connect multiple customer sites. Which technology should be used to provide end-to-end Ethernet service with MAC address transparency and support for multiple customer VLANs?

A.MPLS Traffic Engineering (MPLS TE)
B.VPLS (Virtual Private LAN Service)
C.VPWS (Virtual Private Wire Service)
D.RSVP-TE signaling
AnswerB

VPLS provides multipoint Ethernet services with MAC address transparency and supports multiple VLANs via QinQ or VLAN mapping.

Why this answer

VPLS (Virtual Private LAN Service) is the correct choice because it emulates an Ethernet bridge across an MPLS core, providing MAC address transparency and supporting multiple customer VLANs through a multipoint-to-multipoint topology. Unlike point-to-point services, VPLS learns MAC addresses and forwards frames based on them, enabling end-to-end Ethernet service across distributed sites.

Exam trap

Cisco often tests the distinction between point-to-point (VPWS) and multipoint (VPLS) services, and candidates mistakenly choose VPWS when the question explicitly requires connecting multiple sites with MAC transparency.

How to eliminate wrong answers

Option A is wrong because MPLS Traffic Engineering (MPLS TE) is a mechanism for optimizing traffic paths based on bandwidth and constraints, not for providing Layer 2 Ethernet services with MAC transparency. Option C is wrong because VPWS (Virtual Private Wire Service) offers only point-to-point Ethernet connections, lacking the multipoint capability and MAC learning required for connecting multiple sites with VLAN transparency. Option D is wrong because RSVP-TE is a signaling protocol used for MPLS label distribution and traffic engineering, not a Layer 2 VPN service technology.

61
MCQmedium

A service provider is deploying segment routing in its MPLS core. Which label allocation method is used by segment routing to distribute prefix SIDs?

A.LDP
B.BGP
C.RSVP-TE
D.IGP (IS-IS or OSPF)
AnswerD

Segment routing encodes prefix SIDs in IGP updates.

Why this answer

Segment routing uses the IGP (IS-IS or OSPF) to distribute prefix SIDs. The IGP extensions for segment routing (RFC 8665 for OSPF, RFC 8667 for IS-IS) carry the prefix SID sub-TLV within the prefix reachability information, allowing each router to allocate and advertise the SID associated with a prefix. This is the native label allocation method for segment routing, as it leverages the existing IGP database without requiring a separate label distribution protocol.

Exam trap

Cisco often tests the misconception that segment routing requires a separate label distribution protocol like LDP or RSVP-TE, but the trap here is that segment routing uses the IGP itself to distribute prefix SIDs, making it a control-plane-less label distribution method.

How to eliminate wrong answers

Option A is wrong because LDP (Label Distribution Protocol) is a separate label distribution protocol used in traditional MPLS, but segment routing eliminates the need for LDP by encoding labels directly in the IGP. Option B is wrong because BGP is used for distributing VPN labels or inter-domain prefix SIDs (e.g., BGP-LU), but not for allocating prefix SIDs within a single IGP domain. Option C is wrong because RSVP-TE is a signaling protocol for traffic engineering that establishes explicit LSPs with resource reservations, whereas segment routing uses source-routed paths without signaling.

62
Multi-Selecthard

An ISP is implementing 6PE for IPv6 transport over MPLS. Which two conditions are required for 6PE to work? (Choose two.)

Select 2 answers
A.IPv6 MPLS LSPs in the core
B.BGP multiprotocol extensions for IPv6
C.IPv6 next-hop in BGP updates
D.MPLS forwarding with labels for IPv6 prefixes
E.6PE requires 6VPE
AnswersB, D

BGP must carry IPv6 address family.

Why this answer

6PE requires BGP to carry IPv6 prefixes with an IPv4 next-hop (MPLS label), and the core MPLS network must support IPv4 LSPs.

63
MCQeasy

A network administrator is designing an MPLS TE tunnel for a service provider backbone. The goal is to provide bandwidth protection for voice traffic. Which MPLS TE feature should be configured?

A.Autoroute announce
B.Path-option
C.Fast Reroute (FRR)
D.Bandwidth protection
AnswerC

FRR provides backup LSPs to protect against link or node failures.

Why this answer

MPLS TE Fast Reroute (FRR) provides sub-50 ms protection against link or node failures by pre-computing and pre-signaling a backup tunnel that bypasses the protected element. This meets the requirement for bandwidth protection of voice traffic, which is sensitive to packet loss and delay during network convergence.

Exam trap

Cisco often tests the distinction between features that provide path selection (Path-option) or traffic steering (Autoroute announce) versus features that provide actual failure protection (FRR), leading candidates to confuse 'bandwidth protection' as a separate feature rather than a benefit of FRR.

How to eliminate wrong answers

Option A is wrong because Autoroute announce is used to automatically inject the TE tunnel's destination into the IGP routing table, enabling traffic to be routed into the tunnel without explicit static routes; it does not provide any failure protection. Option B is wrong because Path-option defines the explicit or dynamic path for the primary TE tunnel but does not create a backup path or offer fast failover. Option D is wrong because 'Bandwidth protection' is not a standalone MPLS TE feature; it is a capability provided by FRR (specifically link or node protection) and is not a configurable command or feature name in Cisco IOS XR or classic IOS.

64
MCQmedium

An SP engineer is configuring IS-IS on a router and specifies a NET address of 49.0001.1921.6800.1001.00. What does the '00' at the end represent?

A.AFI
B.System ID
C.Area ID
D.SEL (NSAP Selector)
AnswerD

SEL identifies the network service user; 00 is for the routing protocol.

Why this answer

The last two octets of an IS-IS NET address represent the SEL (NSAP Selector), which is always 00 for a router.

65
MCQeasy

Which IS-IS metric type is required for traffic engineering and segment routing?

A.Narrow metrics
B.Wide metrics
C.Extended metrics
D.Default metrics
AnswerB

Wide metrics support larger values and are used for TE and segment routing.

Why this answer

IS-IS wide metrics (TLV 22 and 135) use 24-bit or 32-bit values, allowing higher link costs needed for TE. Narrow metrics are limited to 6 bits.

66
MCQeasy

A network administrator is configuring a Cisco ASR 9000 router for MPLS L3VPN. The PE receives customer routes via eBGP from the CE. Which command is required to redistribute these routes into the VPNv4 BGP table on the PE?

A.Configure 'address-family ipv4 unicast' under the VRF configuration and then 'address-family vpnv4 unicast' under the BGP process.
B.Configure 'address-family ipv4 vrf CUSTOMER' under the BGP process and activate the neighbor.
C.Enter 'vrf CUSTOMER' in the BGP process and then 'address-family ipv4 unicast' under the VRF.
D.Enter 'redistribute bgp 100' under the VRF's OSPF or static route configuration.
AnswerA

The VRF address-family ipv4 unicast imports routes into the VRF, and the VPNv4 address-family enables VPNv4 BGP to carry these routes.

Why this answer

In MPLS L3VPN, customer routes learned via eBGP from the CE must be placed into the VRF's IPv4 unicast table first, and then the 'address-family vpnv4 unicast' under BGP is required to redistribute those VRF routes into the VPNv4 BGP table, which carries the route with its route distinguisher (RD) and extended community. This two-step process ensures the PE can advertise the route as a VPNv4 prefix to other PEs via MP-BGP.

Exam trap

Cisco often tests the distinction between configuring BGP within a VRF (for CE-PE eBGP) and enabling the VPNv4 address family to propagate those routes across the MPLS core, leading candidates to mistakenly think that simply configuring 'address-family ipv4 vrf CUSTOMER' is sufficient for VPNv4 redistribution.

How to eliminate wrong answers

Option B is wrong because 'address-family ipv4 vrf CUSTOMER' under BGP is used to configure BGP peering within the VRF (e.g., for eBGP with the CE), but it does not automatically redistribute those routes into the VPNv4 address family; the VPNv4 address family must be explicitly configured and the VRF routes must be injected via network statements or redistribution. Option C is wrong because entering 'vrf CUSTOMER' in the BGP process and then 'address-family ipv4 unicast' under the VRF is not a valid BGP configuration; the VRF is defined globally, and BGP uses 'address-family ipv4 vrf CUSTOMER' to handle VRF-specific BGP sessions, not a nested 'address-family ipv4 unicast' under the VRF. Option D is wrong because 'redistribute bgp 100' under the VRF's OSPF or static route configuration would redistribute BGP routes into an IGP or static routes, not into the VPNv4 BGP table; the VPNv4 table is populated by MP-BGP, not by redistribution from an IGP.

67
MCQmedium

An SP network is migrating from IS-IS narrow metrics to wide metrics. What is a key advantage of using wide metrics?

A.Wide metrics are backward compatible with narrow metrics without any configuration.
B.Wide metrics support up to 2^24-1 link cost and TE metrics.
C.Wide metrics reduce SPF computation time.
D.Wide metrics enable BFD for faster convergence.
AnswerB

Wide metrics allow larger values and TE extensions.

Why this answer

Wide metrics support values up to 2^24-1 (16,777,215) and allow Traffic Engineering (TE) metrics, unlike narrow metrics which are limited to 6 bits (max 63).

68
MCQhard

During multicast troubleshooting, the command 'show ip mroute' shows that the RPF neighbor for a particular (S,G) entry is incorrect. What is the most likely cause?

A.The unicast routing table does not have a route back to the source.
B.The multicast routing protocol is not enabled globally.
C.TTL threshold is set too high on the incoming interface.
D.IGMP snooping is disabled on the switch.
AnswerA

RPF check uses unicast route towards source; missing or incorrect route leads to wrong RPF neighbor.

Why this answer

The RPF (Reverse Path Forwarding) neighbor for an (S,G) entry is determined by the unicast routing table: the router expects to reach the source S via the interface and next-hop that the unicast route provides. If the unicast routing table does not have a route back to the source, the router cannot determine the correct RPF interface and neighbor, leading to an incorrect RPF neighbor in the 'show ip mroute' output. This is the most common cause of RPF failures in multicast troubleshooting.

Exam trap

Cisco often tests the misconception that multicast issues are caused by multicast-specific misconfigurations (like PIM or IGMP), when in fact the root cause is a unicast routing problem, specifically the absence of a route back to the source in the unicast routing table.

How to eliminate wrong answers

Option B is wrong because if the multicast routing protocol (e.g., PIM) were not enabled globally, the router would not have any (S,G) entries at all, not an incorrect RPF neighbor. Option C is wrong because a TTL threshold set too high on the incoming interface would cause multicast packets to be dropped due to TTL expiry, not an incorrect RPF neighbor in the mroute table. Option D is wrong because IGMP snooping is a Layer 2 switch feature that controls multicast group membership at the access layer; it does not affect the RPF neighbor calculation on a Layer 3 router.

69
MCQhard

Refer to the exhibit. An engineer is troubleshooting an MPLS LDP session between two routers. The output shows that the LDP session is operational. However, MPLS labels are not being exchanged. What is the most likely cause?

A.The peer's addresses are not bound to the LDP Ident.
B.The TCP connection is not using port 646.
C.The LDP label advertisement mode is 'downstream on demand'.
D.The LDP session is not established.
AnswerC

In this mode, labels are only sent on request; if the peer expects unsolicited, labels may not be exchanged.

Why this answer

The exhibit shows that the LDP session is operational (state = Operational), but no labels are being exchanged. In 'downstream on demand' mode, a router does not advertise labels unless explicitly requested by an upstream neighbor via a Label Request message. Since the session is up but no labels are exchanged, this mismatch in label advertisement mode is the most likely cause.

Exam trap

The trap here is that candidates see the LDP session is 'Operational' and assume label exchange must be working, but Cisco tests the subtle distinction that session state and label advertisement are independent processes.

How to eliminate wrong answers

Option A is wrong because the LDP Ident is used to identify the label space and is bound to the router ID; the peer's addresses not being bound would prevent session establishment, not just label exchange. Option B is wrong because LDP uses TCP port 646 by default; if the TCP connection were not using port 646, the session would not be established at all. Option D is wrong because the output explicitly states the LDP session is operational, meaning it is established.

70
MCQhard

A service provider is implementing Segment Routing in an IS-IS network. Which TLV is used to advertise the Segment Routing Global Block (SRGB)?

A.TLV 22
B.TLV 242
C.TLV 229
D.TLV 135
AnswerB

TLV 242 is the Router Capability TLV used for SRGB advertisement.

Why this answer

The IS-IS Router Capability TLV (242) carries sub-TLVs including the SR Capabilities sub-TLV that advertises the SRGB.

71
MCQhard

An SP is deploying NAT64 to allow IPv6-only clients to access IPv4 servers. Which address translation mechanism is used by NAT64 to map IPv6 addresses to IPv4 addresses?

A.Embedding IPv4 addresses in IPv6 addresses using a predefined prefix
B.IPv6-over-IPv4 tunneling
C.DNS64
D.Stateful translation of IPv6 to IPv4 using a pool of IPv4 addresses
AnswerA

Correct. NAT64 uses a prefix (64:ff9b::/96) to embed IPv4 addresses.

Why this answer

NAT64 uses a well-known prefix (64:ff9b::/96) to embed IPv4 addresses into IPv6 addresses. The IPv4 address is appended to the prefix, creating an IPv6 address that represents the IPv4 destination.

72
Multi-Selectmedium

A service provider is designing an OSPF network for MPLS-TE. Which two OSPF LSA types are used to advertise Traffic Engineering information? (Choose two.)

Select 2 answers
A.LSA Type 1 (Router)
B.LSA Type 10 (Area-local Opaque)
C.LSA Type 9 (Link-local Opaque)
D.LSA Type 4 (ASBR Summary)
E.LSA Type 11 (AS-scoped Opaque)
AnswersB, E

Type 10 carries TE information within an area.

Why this answer

OSPF uses opaque LSAs to carry TE information. Type 10 (area-local) and Type 11 (AS-scoped) opaque LSAs are used for TE. Type 9 is link-local.

73
MCQmedium

An engineer is configuring IS-IS in a service provider network. The network uses wide metrics for traffic engineering. Which TLV is mandatory for IS-IS to carry traffic engineering (TE) information in accordance with RFC 5305?

A.TLV 22 (Extended IS Reachability)
B.TLV 135 (Extended IP Reachability)
C.TLV 229 (Multi-Topology Reachable IPv4 Prefixes)
D.TLV 128 (IP Internal Reachability)
AnswerA

TLV 22 carries TE information including link attributes.

Why this answer

TLV 22 (Extended IS Reachability) is the mandatory TLV for IS-IS TE, defined in RFC 5305.

74
MCQeasy

In IS-IS, which type of LSP is used to advertise prefix information for IPv4 and IPv6 in a modern SP network that supports traffic engineering?

A.TLV 2 (IS Neighbors)
B.TLV 1 (Area Addresses)
C.TLV 135 (Extended IP Reachability)
D.TLV 22 (IS Extended Neighbors)
AnswerC

TLV 135 carries IPv4 prefixes with wide metrics.

Why this answer

TLV 135 for IPv4 (extended IP reachability) and TLV 236 for IPv6 (IPv6 reachability) are used in IS-IS for prefix advertisement.

75
MCQeasy

In IS-IS, a router is configured as L1 only. Which statement is true regarding its routing table?

A.It learns all L2 routes from the backbone.
B.It has a default route pointing to the nearest L1/L2 router.
C.It learns inter-area routes via L1 LSPs.
D.It only uses narrow metrics.
AnswerB

Correct. The L1/L2 router advertises a default route into L1 area.

Why this answer

An L1 router only knows routes within its own area. It uses the closest L1/L2 router as a default route to reach other areas. The L1/L2 router leaks a default route into the L1 area.

Page 1 of 3 · 218 questions totalNext →

Ready to test yourself?

Try a timed practice session using only Networking questions.