Courseiva

350-501 · domain

troubleshooting

Practise Cisco SPCOR / CCNP Service Provider Core 350-501 troubleshooting practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

971 questions249 easy433 medium289 hard

Focused practice

Practice troubleshooting questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about troubleshooting

troubleshooting questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common troubleshooting exam traps

  • Answering from memory before reading the full scenario.
  • Missing a constraint such as cost, availability, security, scope or command context.
  • Choosing a broad answer when the question asks for the most specific fix.
  • Ignoring why the wrong options are tempting.

Question index

All troubleshooting questions (971)

Click any question to see the full explanation, or start a practice session above.

1

A service provider wants to provide Internet access to an MPLS L3VPN customer without leaking the Internet route into the VRF. Which feature allows the PE to forward traffic from the VRF to the global routing table?

Easy
2

A service provider is deploying Segment Routing (SR) with TI-LFA for fast convergence. Which mechanism does TI-LFA use to repair a link failure in a node segment path?

Hard
3

What is the primary function of the NED (Network Element Driver) in NSO?

Easy
4

A network engineer is troubleshooting QoS on a Cisco ASR 1000 router. The router has a service-policy applied on the ingress interface GigabitEthernet0/0/0. The policy uses a class-map to match traffic based on NBAR protocol discovery for 'cisco-jabber'. The goal is to mark the traffic with DSCP AF41. However, when the engineer checks the policy statistics, the class 'jabber' shows zero matches, even though the users are actively using Cisco Jabber. The NBAR protocol discovery is enabled globally and on the interface. The engineer verifies that the NBAR protocol pack is up-to-date. What is the most likely reason for the class-map not matching?

Medium
5

A network engineer is troubleshooting MPLS LSP connectivity. The MPLS LDP session is up on both endpoints, but some MPLS labels are missing in the LFIB. Which configuration change would most likely resolve the issue?

Hard
6

A service provider is planning to offer L2VPN services using MPLS. Which TWO statements are true regarding Ethernet over MPLS (EoMPLS) and Virtual Private LAN Service (VPLS)?

Easy
7

Which TWO of the following are characteristics of Segment Routing (SR-MPLS) compared to traditional LDP-based MPLS? (Select two.)

Medium
8

Which LISP feature allows a device to register its location to a mapping system so that another device can find it?

Easy
9

Refer to the exhibit. A service provider is applying this QoS policy on a PE-CE interface. The business customer complains that voice traffic (marked with DSCP EF) experiences drops during congestion. What is the likely cause?

Hard
10

A service provider is implementing hierarchical QoS on an edge router. The goal is to shape the aggregate traffic to 100 Mbps and then apply different queuing policies for voice and data within that shaped pipe. Which configuration approach is correct?

Medium
11

An engineer is configuring MPLS LDP on a Cisco router. Which TWO statements about LDP operation are correct? (Choose two.)

Easy
12

A service provider is preparing for maintenance on a BGP-speaking router. To minimize packet loss, they want to signal to neighbors that the session is being shut down gracefully. Which BGP feature should be used?

Medium
13

A service provider is migrating from LDP-based MPLS to Segment Routing (SR-MPLS) with IS-IS. After enabling SR on all routers, the adjacency segment IDs (ADJ-SIDs) are not being advertised. Which configuration is missing?

Hard
14

Which MPLS EXP bits value is typically mapped from DSCP EF at the ingress PE to maintain voice QoS in an MPLS network?

Medium
15

A service provider is implementing MPLS-TE with FRR (Fast Reroute) using one-to-one backup tunnels. After activation, they notice that the number of labels in the forwarding table has increased significantly. What is the most likely reason for this increase?

Hard
16

A service provider wants to prevent BGP hijacking of its customer prefixes. The SP implements RPKI with BGP Origin Validation. When a route is received with an origin AS that does not match any ROA, what is the validation state?

Medium
17

Which DSCP value is recommended for Expedited Forwarding (EF) per-hop behavior, commonly used for voice traffic?

Easy
18

Which TWO features are used to improve BGP convergence in an MPLS VPN environment?

Medium
19

Which THREE of the following are benefits of using Segment Routing over LDP in an MPLS network? (Choose three.)

Hard
20

In SRv6, which endpoint behavior is used for decapsulation and forwarding to a Layer 3 VPN IPv4 destination, removing the outer IPv6 header?

Hard
21

An SP network engineer is reviewing a QoS configuration on a PE router. The policy-map uses a class for voice with the 'priority' command, and a class for video with 'bandwidth remaining percent 30'. What is the purpose of the 'bandwidth remaining percent' command?

Medium
22

Refer to the exhibit. A PE router is showing a VRF route. What does the [200/0] indicate?

Medium
23

Drag and drop the steps to configure a Layer 3 interface on a Cisco switch (SVI) into the correct order.

Medium
24

Based on the exhibit, what is preventing the BGP session from establishing?

Medium
25

Based on the exhibit, which statement is true about the QoS policy?

Medium
26

Refer to the exhibit. An engineer applies two service policies to the same subinterface in the outbound direction. Which statement describes the expected behavior?

Medium
27

An engineer is configuring EVPN IRB (Integrated Routing and Bridging) to provide IP connectivity between tenants across a service provider network. Which THREE components are essential for EVPN IRB operation? (Choose three.)

Medium
28

Which IS-IS TLV is used to carry IPv6 reachability information?

Easy
29

In an OSPF network, an engineer wants to reduce the size of the routing table and prevent external routes from being advertised into an area. Which area type should be configured?

Easy
30

In an SP MPLS core, a PE router maps incoming DSCP values to MPLS EXP bits. Which statement about EXP marking is accurate when using the DiffServ Tunneling Model?

Hard
31

An engineer is configuring BGP prefix filtering on a provider edge router to prevent BGP hijacking. They want to allow only customer prefixes that are registered in the RIR database. What is the most effective method to automate this filtering?

Hard
32

A service provider wants to offer Layer 2 VPN services using MPLS. Which technology should be used to transport Ethernet frames across the MPLS core?

Easy
33

A service provider is deploying multicast over MPLS L3VPN. Which mechanism is used to provide multicast in the core between PE routers?

Hard
34

A service provider is redesigning its MPLS core to support both L3VPN and L2VPN services. They want to minimize the number of labels in the forwarding table while maintaining per-VRF label allocation. Which label allocation mode should be used for the L3VPN service?

Medium
35

Which tool can verify connectivity along an MPLS Label Switched Path (LSP) and detect label loops?

Easy
36

In SR-MPLS traffic engineering, which three components are essential for configuring an SR Policy on a headend router? (Choose three.)

Hard
37

A service provider wants to protect its routers from CPU overload caused by excessive traffic to the control plane. Which mechanism should be configured on IOS XR routers to classify and rate-limit management traffic?

Easy
38

In an MPLS network, a PE router receives a VPNv4 route from a route reflector. The route is not being installed in the VRF table. Which condition could cause this?

Medium
39

Refer to the exhibit. The router cannot form a full OSPF adjacency with 10.0.0.2. Which is the most likely cause?

Medium
40

An SP is designing a QoS policy for a customer with voice, video, and data traffic. Which queuing mechanism provides a strict priority queue for voice while ensuring other queues do not starve?

Medium
41

Which OSPF neighbor state indicates that a router has received a hello packet from a neighbor but the neighbor's Router ID is not yet seen in its own hello packet?

Easy
42

When using NETCONF to edit a running configuration on a Cisco IOS XR router, which sequence of operations is correct?

Medium
43

A service provider wants to deploy DDoS mitigation using BGP FlowSpec. Which two actions can FlowSpec rules specify? (Choose two.)

Medium
44

Which THREE of the following are characteristics of Segment Routing (SR-MPLS) compared to traditional MPLS with LDP?

Hard
45

A company is connecting two sites using MPLS L3VPN. The PE routers are running both LDP and Segment Routing (SR-MPLS) in the core. The CE router at Site A cannot reach the CE at Site B. On the PEs, the VRF routes are present. Which command would you use to verify the MPLS forwarding path for the VPN traffic?

Medium
46

In CSPF (Constrained Shortest Path First) for MPLS-TE, which of the following is NOT a typical constraint considered during path computation?

Hard
47

An engineer configures model-driven telemetry on a Cisco XR router to send data to a collector. After configuring, the collector receives no data. The engineer verifies that the collector IP and port are reachable. What is the next step to troubleshoot?

Medium
48

An SP uses NSO for automation. Which TWO protocols can NSO use as southbound interfaces to communicate with network devices? (Choose two.)

Medium
49

A network engineer is configuring an MPLS L3VPN on a PE router. The VRF is configured with route-target import/export. The PE and CE are running eBGP. The CE advertises routes to the PE, and the PE installs them in the VRF routing table. However, the remote PE does not receive these routes via BGP VPNv4. The local PE's BGP table shows the VPNv4 prefixes with the correct next hop and label. The remote PE's BGP table shows no such prefixes. The IGP between the PEs is working, and MPLS LSPs are up. What is the most likely cause and correct action?

Medium
50

In BGP, what is the purpose of the ORIGINATOR_ID attribute in a route reflector environment?

Medium
51

A network engineer is troubleshooting a BGP route selection issue on a router that receives the same prefix from two different peers. Which THREE BGP attributes are considered in the route selection process before the 'prefer the route with the lowest metric' step?

Medium
52

An MPLS L3VPN service provider wants to prevent label spoofing attacks where a customer could inject MPLS labels to bypass ACLs. Which configuration practice should be implemented on PE-CE links?

Hard
53

An SRv6 SID is composed of three parts: Locator, Function, and Arguments. Which part identifies the SRv6-capable node in the network?

Medium
54

A service provider has a network with PE1, P1, P2, and PE2 connected in a chain: PE1-P1-P2-PE2. The IGP is IS-IS with wide metrics, and MPLS LDP is enabled on all interfaces. The goal is to provide L3VPN services between PE1 and PE2. The engineer has configured MP-iBGP between PE1 and PE2, and the VPNv4 routes are exchanged. However, when a CE router behind PE1 tries to reach the CE behind PE2, the traffic fails. The engineer checks the MPLS forwarding table on PE1 and sees that the label for the BGP next-hop (PE2's loopback) is 'Untagged'. The BGP next-hop is reachable via ICMP. What is the most likely cause of this issue?

Hard
55

Which TWO statements accurately describe the differences between GPON and XGS-PON? (Choose two.)

Medium
56

Which MEF service type provides a point-to-point Ethernet connection between two user-network interfaces (UNIs)?

Medium
57

Which two are benefits of using EVPN-VPWS over traditional VPWS? (Choose two.)

Hard
58

Refer to the exhibit. A network engineer applies this policy on the PE-CE link. What is the expected behavior for VoIP traffic matching the access list?

Hard
59

Which IS-IS TLV is used to carry Traffic Engineering (TE) information such as link bandwidth and TE metric in modern SP networks?

Easy
60

Which technology provides Layer 2 multipoint connectivity over an MPLS network, where customer sites appear to be on the same Ethernet broadcast domain?

Medium
61

An engineer is configuring IS-IS fast convergence. Which mechanism provides sub-second failure detection independently of the routing protocol?

Medium
62

A service provider is deploying an MPLS L3VPN solution for a customer with two sites. The PE routers are running OSPF as the IGP and LDP for label distribution. The provider wants to ensure that customer traffic is load-balanced across two equal-cost paths between the PEs. The network team notices that all traffic is taking only one path despite the IGP showing equal-cost routes. The team has verified that the MPLS forwarding table on the P router shows only one label entry for the BGP next-hop. The team suspects a load-balancing issue. Which action best resolves the problem?

Hard
63

Refer to the exhibit. A network engineer is troubleshooting MPLS forwarding for prefix 10.10.10.0/24. The router shows two entries. What does the 'Pop tag' in the outgoing tag indicate?

Medium
64

An SP is deploying MPLS in the core/backbone to support L3VPN services. What is the purpose of MP-BGP in an MPLS VPN architecture?

Medium
65

Which TWO statements about MPLS label switching are correct? (Choose two.)

Medium
66

A service provider is deploying BGP PIC (Prefix Independent Convergence) to improve convergence after a link failure. Which mechanism does BGP PIC leverage to achieve fast failover?

Hard
67

An ISP is deploying BGP confederations to reduce iBGP mesh requirements. Which of the following statements about BGP confederations are true? (Choose two.)

Hard
68

Which tool is used to validate YANG data models against device capabilities and to generate Python bindings for automation scripts?

Easy
69

A service provider wants to use NETCONF to manage devices. Which two statements are true about NETCONF operations? (Choose two.)

Medium
70

A service provider is migrating from LDP to SR-MPLS. Which mechanism allows a router to allocate labels for prefixes using both LDP and SR simultaneously during the migration?

Hard
71

In an MPLS network using LDP, which statement correctly describes the label distribution behavior for a given FEC?

Medium
72

An SP is implementing Carrier-Grade NAT (CGNAT) to conserve IPv4 addresses. Which feature must be enabled to support applications that embed IP addresses in the payload, such as SIP or FTP?

Easy
73

In SR-MPLS TE, a headend router is configured with an SR Policy that includes an explicit candidate path with segment list [16001, 16003]. What do these numbers represent?

Medium
74

A provider is implementing EVPN for data center interconnect. They require multi-homing with all-active load balancing and fast convergence using BGP. Which EVPN feature enables this?

Medium
75

A service provider is implementing 6PE to carry IPv6 traffic over an existing MPLS IPv4 core. Which BGP extension is required on the provider edge (PE) routers to exchange IPv6 prefixes with an IPv4 next-hop?

Medium
76

An engineer is deploying MPLS in the core and wants to ensure that all core routers use the same label for a specific prefix, regardless of which router originated it. Which MPLS label allocation mode should be used?

Easy
77

In BGP route selection, which attribute is considered before LOCAL_PREF?

Medium
78

A customer requires MPLS Layer 2 VPN connectivity between two sites using Pseudowire. Which control protocol is used to signal the pseudowire label?

Medium
79

An engineer is configuring management plane hardening on an IOS XR router. The requirement is to authenticate users against a central server and provide granular command authorization. Which protocol and feature should be used?

Medium
80

An SP deploys EVPN to provide L2VPN services with multi-homing. The customer CE is dual-homed to two different PE routers. Which EVPN mechanism ensures that only one PE forwards traffic to the CE for a given Ethernet segment, preventing loops?

Hard
81

A service provider recently deployed MPLS L3VPN for a customer with four sites (Site1, Site2, Site3, Site4) connected to PE1, PE2, PE3, and PE4 respectively. All sites are in VRF CUST-A with route targets 100:1 import and 100:1 export on all PEs. The customer reports that Site4 cannot ping the loopback interface (10.1.1.1/32) of Site1, but Site2 and Site3 can reach it. The provider verifies that BGP sessions between all PEs and the route reflector are up and that VPNv4 routes are advertised. The VRF on PE4 shows the route 10.1.1.1/32 with next-hop 192.0.2.1 (PE1's loopback) but when Site4 initiates a ping, it fails. What should the provider check next?

Easy
82

Which technology should be used to provide per-flow load balancing across multiple equal-cost paths in an MPLS network while preserving packet order?

Easy
83

A service provider is deploying MPLS L3VPN and notices that BGP next-hop resolution for VPNv4 routes fails on the PE routers. The PE routers are running OSPF as the IGP and have loopback interfaces used for LDP and BGP peering. Which configuration change should the engineer implement to ensure that the BGP next-hop is reachable?

Medium
84

An SP is implementing BGP FlowSpec to mitigate DDoS. The FlowSpec rule should match traffic with destination port 80 and DSCP value 0. Which FlowSpec component is used to specify the destination port?

Hard
85

Refer to the exhibit. CE1 is not receiving the VPNv4 route for the 192.168.1.0/24 subnet. What is the most likely cause?

Medium
86

A large SP network uses Segment Routing (SR) with MPLS data plane. They want to enforce a strict path for certain traffic flows across the core while using shortest-path for others. Which technique should be used?

Hard
87

An SP is implementing RPKI to validate BGP origin AS. After configuring RPKI-to-Router (RTR) and setting BGP origin validation, a route is marked as 'invalid'. What action does BGP default take for invalid routes?

Medium
88

Which THREE actions can help mitigate the impact of BGP prefix flapping in a service provider network?

Hard
89

Refer to the exhibit. The output shows an MPLS forwarding entry with FRR protection. What is the purpose of the backup path shown?

Hard
90

A service provider wants to stream interface counters from a Cisco router to a collector using model-driven telemetry. The collector is behind NAT and cannot be reached from the router. Which telemetry model should be used?

Easy
91

Which two protocols are commonly used for label exchange in an MPLS network? (Choose two.)

Easy
92

An SP is designing an OSPF network with a totally stubby area to reduce the LSA database. Which LSA types are blocked by default in a totally stubby area?

Medium
93

An engineer configures a class-map to match traffic with DSCP AF41. What is the numerical DSCP value for AF41?

Medium
94

A network engineer needs to ensure that a specific customer's traffic is not adversely affected by other customers' traffic in a shared MPLS core. Which technology should be used?

Easy
95

In an MPLS-TE tunnel configuration, which RSVP message carries the Explicit Route Object (ERO) that specifies the explicit path the tunnel must follow?

Medium
96

A service provider is troubleshooting a BGP route advertisement issue. Routes from a customer are not being advertised to the upstream provider. The PE router is configured with 'neighbor 10.0.0.1 route-map RMAP out'. The route-map RMAP permits the customer prefix. However, the BGP table on the PE shows the prefix as valid but not advertised. What is a likely cause?

Medium
97

A service provider is implementing Segment Routing (SR) with MPLS. Which three statements are true regarding SR-MPLS? (Choose three.)

Hard
98

Which TWO statements about BGP route reflectors are true?

Medium
99

Which of the following best describes the function of CSPF in MPLS-TE?

Medium
100

Which DSCP value is used for voice traffic (EF) in the DiffServ model?

Easy
101

A service provider is implementing 6VPE to provide IPv6 L3VPN services over an MPLS core. Which BGP address family must be configured on the PE routers to exchange IPv6 VPN routes?

Hard
102

A service provider is designing a greenfield MPLS core and wants to minimize control-plane complexity while still supporting traffic engineering. They plan to use Segment Routing with MPLS. Which statement about Segment Routing in this context is accurate?

Easy
103

Which TWO statements about BGP FlowSpec (RFC 8955) are correct?

Medium
104

Which protocol is used by a BNG to authenticate and authorize subscribers?

Easy
105

A network engineer is troubleshooting an OSPF adjacency issue between two routers connected via a serial link. The routers are configured with point-to-point network type. The adjacency stays in EXSTART state. What is the most likely cause?

Hard
106

Match each IS-IS term to its definition.

Medium
107

A service provider is deploying EVPN-VPWS for point-to-point services. They have set up an EVPN instance with Ethernet Segment Identifier (ESI) and EVI. After configuration, the pseudowire is not coming up. Which misconfiguration is most likely?

Medium
108

An SP network uses RSVP-TE for MPLS traffic engineering with FRR link protection. Which THREE statements are correct about RSVP-TE operation and FRR? (Choose three.)

Hard
109

A service provider is deploying a Broadband Network Gateway (BNG) for subscriber management. Which protocol is used by the BNG to authenticate subscribers via a RADIUS server?

Medium
110

A service provider has deployed QoS on its MPLS backbone to offer different classes of service. The provider notices that EF (Expedited Forwarding) traffic sometimes experiences high jitter during congestion. Following recommended practices, which action is MOST likely to reduce jitter for EF traffic?

Medium
111

Which THREE technologies or protocols are used to implement automated service provisioning in a Cisco service provider network?

Medium
112

Refer to the exhibit. An engineer configures IP SLA for UDP jitter. The operation completes successfully, but the customer reports voice quality issues. What should the engineer check next?

Easy
113

Which statement about the commit/rollback configuration model in IOS XR is true?

Medium
114

In an IS-IS network, a router has a NET of 49.0001.1921.6800.1001.00. What does the '00' at the end represent?

Easy
115

An ISP is deploying EVPN-VXLAN for its data center interconnect. Which statement about control-plane learning is correct?

Hard
116

Which EVPN component ensures that only one of the multi-homed PEs forwards traffic to the CE for a given Ethernet segment?

Hard
117

An SP uses BGP FlowSpec to mitigate DDoS attacks. They also want to rate-limit the traffic per FlowSpec rule. Which configuration is required to enable policing within a FlowSpec action?

Hard
118

A service provider is deploying LISP (Locator/ID Separation Protocol) to provide mobility and multihoming for customer endpoints. Which LISP component is responsible for maintaining the mapping between Endpoint Identifiers (EIDs) and Routing Locators (RLOCs) and for responding to Map-Request messages from ITRs?

Medium
119

You are a network architect for a large service provider. The network consists of multiple core routers (P routers) and edge routers (PE routers) supporting both L3VPN and L2VPN services. The network currently uses LDP for label distribution and has a flat IGP (OSPF) design. Recently, there have been scalability issues: the IGP convergence time has increased significantly, and the OSPF link-state database (LSDB) has grown large, causing high CPU utilization on core routers. Additionally, the LDP sessions are taking longer to establish after a router reboot. You are tasked with redesigning the network to improve scalability and convergence. The budget allows for significant changes but cannot replace all hardware. Which approach best addresses the scalability issues while minimizing disruption?

Hard
120

In IS-IS, what is the purpose of the System ID portion of the NET address?

Easy
121

A network engineer is troubleshooting an MPLS L3VPN where the CE router is receiving the correct VPN prefixes from the PE, but traffic from the CE to those prefixes is being dropped. The PE has a default route pointing to the CE. What is the most likely cause?

Hard
122

Which OSPF area type does not allow external routes (Type 5 LSAs) but does allow inter-area routes and can have a default route injected?

Medium
123

A team uses Ansible to automate configuration of Cisco devices. They want to ensure that configurations are applied only if the device is reachable and the current configuration differs from the intended. Which Ansible module or feature is best suited for this?

Medium
124

Refer to the exhibit. The router is configured as a PE router in an MPLS VPN network. Which option correctly identifies a configuration error that would prevent proper operation?

Medium
125

An SP engineer is using YANG to model a service. Which statement correctly describes the use of a 'leafref' type?

Medium
126

A service provider is designing an MPLS L3VPN network to provide Layer 3 VPN services to multiple customers. Which two statements correctly describe the roles of the Provider Edge (PE) and Customer Edge (CE) routers in this architecture?

Medium
127

In SR-TE, a headend router is configured with an SR Policy that includes an explicit candidate path with segment list [16001, 16003, 16005]. What does this segment list represent?

Hard
128

What is the primary purpose of the SRGB (Segment Routing Global Block) when configuring SR-MPLS on a network?

Medium
129

An SP is implementing IPv6 transition using MAP-T. Which encapsulation method does MAP-T use?

Hard
130

Which TWO statements correctly describe the use of OSPF in a service provider network?

Medium
131

In an MPLS L3VPN network, which security measure should be taken on PE-CE links to prevent MPLS label spoofing?

Hard
132

Which THREE factors must be considered when deploying MPLS Layer 3 VPN services to ensure optimal scalability and convergence?

Medium
133

Which DSCP value corresponds to Best Effort (DF) per-hop behavior?

Easy
134

Which access technology is based on ITU-T G.984 and provides downstream speeds up to 2.488 Gbps?

Easy
135

Which THREE DSCP values are part of the Assured Forwarding (AF) class 4? (Select three.)

Easy
136

An engineer is designing an iBGP route reflector topology to improve scalability. Which two statements about BGP route reflectors are correct?

Medium
137

Which THREE are mechanisms used in EVPN to support multi-homing and load balancing? (Choose three.)

Hard
138

A service provider operates a large MPLS network with Segment Routing (SR) and BGP-LS enabled on all routers. They have deployed a centralized Path Computation Element (PCE) to compute SR-TE policies for optimal traffic engineering. The PCE is configured to receive the network topology via BGP-LS from a route reflector (RR). Recently, the PCE has been unable to compute paths for certain destinations, and logs show that the topology database is missing some links and nodes. The engineer verifies that all routers have BGP-LS configured and are peering with the RR. The RR's BGP table shows the BGP-LS NLRI received from all routers. However, the PCE sees only a subset of the topology. Which action should the engineer take to resolve the issue?

Hard
139

Which three BGP communities are standardized and commonly used for inter-AS traffic engineering? (Choose three.)

Medium
140

Which BGP attribute is locally significant and used to influence outbound traffic from an AS?

Easy
141

Refer to the exhibit. An engineer checks the policy and notices that the policing is not working as expected—traffic is not being dropped even when exceeding 1 Mbps. What could be the issue?

Easy
142

What is the main difference between traffic shaping and traffic policing?

Easy
143

An engineer is troubleshooting MPLS label switching in a service provider core. They notice that packets are being forwarded correctly between provider edge routers, but when they check the MPLS forwarding table on a P router, they see only implicit-null labels for some destinations. What is the most likely reason for this?

Medium
144

An SP is deploying a Quality of Service (QoS) architecture in its core network to support multiple services: voice, video, and data. The core routers use MPLS and implement QoS based on the MPLS EXP bits. The architecture must ensure that voice packets are never dropped, even during congestion, while allowing video to have higher priority than data. The current design marks voice with EXP 4, video with EXP 3, and data with EXP 0. During a traffic burst, voice traffic is being dropped, which should not happen. The core routers have the following queue configuration: (1) a priority queue (PQ) for EXP 4+5, (2) a bandwidth queue for EXP 2-3, (3) a default queue for EXP 0-1. What is most likely the cause of voice drops?

Easy
145

A network engineer applies the above configuration on a PE router. The PE receives route 172.16.1.0/24 from eBGP peer 10.1.1.1. Which communities will be attached to this route?

Hard
146

Refer to the exhibit. An engineer configured Segment Routing on a router. However, the router does not advertise a Prefix-SID for the loopback0 interface. What is the most likely reason?

Medium
147

An SP engineer is configuring QoS on a PE router for MPLS traffic. The core network uses MPLS EXP bits for QoS. Which TWO methods can be used to set MPLS EXP bits based on IP DSCP? (Select two.)

Medium
148

An automation engineer uses RESTCONF to configure a Cisco ASR 9000 router. When sending a PATCH request to update an interface description, the API returns 404 Not Found. What is the most probable issue?

Medium
149

Which THREE are requirements for deploying MPLS Traffic Engineering with RSVP-TE?

Hard
150

A service provider is deploying MPLS Layer 3 VPNs and wants to ensure that customer traffic is not dropped when a PE-CE link fails. The CE router is using static routing. Which design should be implemented to provide fast convergence?

Medium
151

An engineer is troubleshooting an MPLS-TE tunnel that is not coming up. The configuration includes an explicit path with strict hops. Which TWO conditions could prevent the tunnel from being established? (Choose two.)

Medium
152

You are responsible for network assurance for a Tier-1 ISP that has deployed model-driven telemetry using gNMI with ON_CHANGE subscriptions on all core routers. Recently, the NMS team reported that some BGP route flaps are not being captured in the telemetry data, even though the routers' syslogs show the flaps occurred. The telemetry subscription is for the path '/bgp/neighbors/neighbor/state/messages/received'. The NMS is using a gNMI collector that supports both ON_CHANGE and SAMPLE subscriptions. You suspect the issue is with the subscription configuration. Upon reviewing the router configuration, you see that the telemetry subscription uses the SAMPLE mode instead of ON_CHANGE. What is the most appropriate action to ensure all BGP route flap events are captured?

Hard
153

An SP engineer is configuring hierarchical QoS on a PE router for a subscriber with a 10 Mbps shaped rate. The child policy must guarantee 2 Mbps for voice, 4 Mbps for video, and the rest for data. However, the parent policy shape rate is 10 Mbps. Which configuration ensures proper operation?

Hard
154

A service provider is deploying QoS on a Cisco ASR 9000 router to support a triple-play service (voice, video, data) over an Ethernet access network. The network engineer must ensure that voice traffic (EF) is prioritized, video traffic (AF41) is treated with low loss, and data traffic (default) gets best-effort service. Additionally, the engineer must implement a hierarchical QoS policy to shape the aggregate subscriber traffic to 100 Mbps on a GigabitEthernet interface, with the following per-class bandwidth allocations: voice 10 Mbps, video 40 Mbps, and data 50 Mbps. During testing, voice packets are being dropped under congestion, and video traffic is experiencing jitter. The current QoS configuration is as follows: policy-map CHILD class VOICE priority level 1 police rate 10 mbps class VIDEO bandwidth remaining ratio 40 class DATA bandwidth remaining ratio 50 ! policy-map PARENT class class-default shape average 100 mbps service-policy CHILD ! Which action should the engineer take to resolve the issues while maintaining the design objectives?

Medium
155

Which TWO are characteristics of SR-MPLS when compared to LDP-based MPLS? (Choose two.)

Medium
156

In an IOS XR system, CPU and memory resources are allocated per line card. What is the primary reason for this design?

Medium
157

Which component in EVPN is used to uniquely identify an Ethernet segment across multiple PE devices in a multi-homing scenario?

Easy
158

An SP is deploying a Network Services Orchestrator (NSO) for service automation. Which THREE components are integral to NSO architecture? (Select three.)

Hard
159

A service provider's network uses MPLS TE with Fast Reroute (FRR) for link protection. After a fiber cut on a core link, the traffic is rerouted via a backup tunnel, but the backup tunnel's path suffers from high latency. The customer complains about poor voice quality. What can be done to avoid this scenario in future deployments?

Medium
160

Based on the exhibit, which prefix is missing a label binding and likely causing traffic to be dropped?

Medium
161

Which TWO conditions cause a router to drop packets when a police action is configured?

Easy
162

Which three are characteristics of SR-TE policies? (Choose three.)

Medium
163

Refer to the exhibit. An engineer monitors the queue depths on a core interface. Which class is experiencing the most congestion?

Easy
164

A service provider is deploying network slicing for 5G services. Which slice type is characterized by low latency and high reliability for applications like autonomous driving?

Hard
165

A network operator wants to distribute traffic filtering rules to multiple routers dynamically during a DDoS attack. Which technology should be used?

Medium
166

Which BGP attribute influences inbound traffic to an AS by affecting the path selection of eBGP peers?

Easy
167

An engineer configures an MPLS-TE tunnel with a bandwidth of 100 Mbps and an explicit path that avoids a specific link. Which RSVP message carries the Explicit Route Object (ERO) to signal the path?

Medium
168

Which three BGP attributes are considered in the route selection process before comparing MED? (Choose three.)

Medium
169

Refer to the exhibit. A PE router configuration for VRF CUST1 is shown. What is the most likely result when a CE sends a route with RT 100:100?

Easy
170

Which access technology in a service provider network uses a passive optical splitter to distribute signals to multiple customers, with typical downstream speeds up to 2.5 Gbps?

Easy
171

Which Cisco automation tool is designed for service modeling with YANG and provides lifecycle management of network services?

Easy
172

A network engineer notices that BGP-LU prefixes learned from an eBGP neighbor are not being installed in the MPLS forwarding table (LFIB). The BGP table shows the prefixes with the correct label. The IGP route to the neighbor is reachable. What additional configuration is needed?

Hard
173

A service provider is implementing MPLS L3VPN for a customer. The customer requires that routes from two different VPNs be imported into a single VRF. Which feature should be used?

Easy
174

Which THREE protocols are used for label distribution in an MPLS network?

Easy
175

In MPLS, which operation occurs when a router receives a labeled packet and replaces the top label with a new label before forwarding?

Easy
176

In SRv6, which behavior is used for L3VPN decapsulation (removing the outer IPv6 header and SRH, and forwarding the inner IPv4 packet based on the VPN routing table)?

Hard
177

Which NETCONF RPC is used to retrieve the complete running configuration from a network device?

Medium
178

An SP engineer is configuring BGP Graceful Shutdown (GSHUT) for maintenance on a router. What does the GSHUT community do to the BGP best path selection process?

Hard
179

A service provider offers Carrier Ethernet services using MPLS-TP in the access and aggregation layers. The network uses MPLS-TP tunnels with static LSPs and protection via 1:1 linear protection with APS. One customer reports intermittent connectivity issues on their E-LINE service. The operations team observes that the protection switchover is occurring frequently due to apparent signal failures on the working path. However, the physical layer shows no errors. The protection switching is configured with revertive mode. The working LSP has an RDI (Remote Defect Indication) configured. Upon further investigation, the team finds that the working LSP's OAM continuity check messages (CCMs) are being lost occasionally, triggering a protection switch. What is the most likely misconfiguration?

Medium
180

A network architect is designing an MPLS network that must provide fast convergence in case of a link failure. The network uses Segment Routing. Which mechanism provides sub-50ms protection by using a precomputed backup path?

Easy
181

A service provider deploys MPLS L3VPN to connect multiple customer sites. Which VPN address family must be enabled on the PE routers to exchange customer IPv4 routes between PEs?

Easy
182

Which Cisco platform is designed for high-capacity core/backbone routing with support for MPLS, Segment Routing, and large-scale BGP?

Easy
183

Which THREE are valid methods for label distribution in an MPLS network?

Hard
184

Which TWO queuing mechanisms best meet the requirements for voice traffic (low latency and jitter) in a service provider network?

Medium
185

A service provider wants to implement Segment Routing in its MPLS core to simplify traffic engineering. What is the primary advantage of Segment Routing over traditional RSVP-TE?

Medium
186

A service provider is hardening management plane access on IOS XR routers. Which TWO measures should be implemented to secure management access? (Choose two)

Medium
187

In a carrier's network, MPLS-TE tunnels are used to steer traffic away from congested links. The operator configures a tunnel with a bandwidth of 200 Mbps and a dynamic path. The CSPF computation shows a path with sufficient bandwidth, but the tunnel fails to come up. The RSVP neighbor is established. What is the most likely cause?

Hard
188

A service provider router receives a route with a higher specific prefix length than the same prefix in the routing table. Which route will be preferred?

Easy
189

Which TWO BGP path attributes are considered before AS-path length in the default best-path selection process?

Hard
190

In SR-TE, a headend router is configured with an SR Policy using an explicit candidate path that includes a segment list [100, 200, 300]. If all routers have the same SRGB starting at 10000, what is the actual outgoing label stack for the first segment?

Hard
191

In Segment Routing (SR-MPLS), which IGP TLV is used by IS-IS to advertise the Node SID for a prefix?

Medium
192

A service provider is using NSO for service orchestration. Which protocol does NSO use to communicate with network devices for configuration?

Hard
193

An engineer is using NETCONF to retrieve the operational QoS statistics from a router. The response contains XML data but does not include the queueing statistics. What is the most likely reason?

Medium
194

Refer to the exhibit. An engineer has configured an SR-TE policy. What is required for this policy to be used for traffic steering?

Hard
195

In BGP route selection, which attribute is considered before the MED when comparing routes from different ASes?

Medium
196

Refer to the exhibit. The policy above is applied on a PE router. The customer complains that voice quality is poor. Based on the exhibit, what is the most likely cause?

Medium
197

A service provider uses an MPLS-TE tunnel to carry voice and data traffic. The tunnel is experiencing packet loss during congestion. The engineer wants to ensure that voice traffic receives guaranteed bandwidth and low latency while data traffic uses remaining bandwidth. Which QoS configuration should be applied on the tunnel interface?

Hard
198

An SP is implementing DiffServ at the edge router. Which TWO DSCP values are used for AF41 and AF31, respectively? (Choose two.)

Medium
199

An SP is deploying Deep Packet Inspection (DPI) to classify traffic for QoS and security. Which DPI technique is used to identify applications regardless of port numbers?

Medium
200

A service provider is deploying EVPN-VXLAN in its data center to provide Layer 2 and Layer 3 overlay services. The underlay uses an eBGP-based CLOS fabric with spine and leaf switches. The leaf switches act as VTEPs and run EVPN for MAC/VXLAN advertisement. One of the tenants, a financial customer, requires that their traffic between two leaf-connected servers is always forwarded through a firewall for inspection, even when the servers are on the same leaf. The firewall is connected to a service leaf. The architect proposes using EVPN integrated routing and bridging (IRB) with asymmetric IRB. However, traffic between two VMs on the same leaf is bypassing the firewall. Which architectural change ensures that all inter-VM traffic within the same leaf goes through the firewall?

Medium
201

Match each service provider architecture term to its description.

Medium
202

In IOS XR architecture, what is the role of the Secure Domain Router (SDR)?

Easy
203

Which TWO are benefits of using Segment Routing (SR) over traditional LDP-based MPLS?

Medium
204

An SP's core router experiences excessive packet drops on a congested link. The QoS policy uses CBWFQ with 4 queues. The drops occur only in the queue for a premium business class. Which is the most likely cause?

Medium
205

A service provider's network is experiencing suboptimal routing for BGP prefixes received from a customer. The customer is multihomed to two different PE routers in the same AS. Which BGP feature can ensure that traffic ingresses via the correct PE?

Medium
206

Which three BGP attributes are considered before the MED in the BGP best path selection process?

Medium
207

A service provider wants to influence inbound traffic from a customer AS. The customer AS is multi-homed to two provider ASes. Which BGP community is most effective to make the customer prefer a specific entry point?

Hard
208

In EVPN, what is the function of the Ethernet Segment Identifier (ESI)?

Medium
209

In a BGP confederation, which AS number is used in the AS_PATH to prevent loops within the confederation?

Hard
210

A service provider is designing an OSPF network for both IPv4 and IPv6. Which two features are supported by OSPFv3 but not by OSPFv2? (Choose two.)

Medium
211

An engineer is deploying MPLS-TE with FRR using the 1:1 detour method. Which statement about link protection in this scenario is true?

Hard
212

Which BGP mechanism can reduce the number of iBGP sessions in a large SP network while preventing routing loops?

Medium
213

An SP is deploying network slicing for 5G services. They need to ensure ultra-reliable low-latency communication (uRLLC) slice has dedicated bandwidth and low latency. Which mechanism is best suited to guarantee performance for this slice?

Hard
214

A network engineer is troubleshooting MPLS L3VPN issues on a PE router. The CE router is receiving routes from the PE, but the CE cannot ping the remote CE. The PE shows the remote prefix in its routing table and in the VRF. What is the most likely cause?

Medium
215

A service provider uses BGP communities to influence routing policies. An administrator wants to prevent a specific prefix from being advertised to any external AS. Which BGP community should be applied?

Hard
216

In OSPFv3, what change was introduced compared to OSPFv2 for supporting IPv6?

Medium
217

A large SP is using model-driven telemetry to collect interface statistics from 5000 routers to a centralized collector. The collector is deployed on two servers with load balancing. Recently, the operations team noticed that some router telemetry streams are missing data for intervals of up to 5 minutes during peak hours. The engineer suspects packet loss between the routers and collector. The routers are sourced from different vendors but all support gRPC dial-out telemetry. The engineer wants to identify which routers are affected. The current configuration uses a single telemetry collector IP with port 5000. What step should the engineer take to isolate the problematic routers?

Hard
218

In IS-IS, which type of router is responsible for routing between different areas and also maintains a Level 1 Link State Database?

Easy
219

A service provider needs to offer L3VPN services with customer isolation. Which technology is used to maintain separate routing tables for different customers on a single PE router?

Medium
220

Which MEF Carrier Ethernet service type is used for a rooted-multipoint topology, where a single root site communicates with multiple leaf sites but leaf sites cannot communicate directly?

Medium
221

A service provider is implementing Multicast VPN (MVPN) in an MPLS backbone. They use Rosen GRE (draft-rosen) for multicast transport. What is the primary limitation of Rosen GRE compared to mLDP-based MVPN?

Medium
222

A service provider is configuring BGP community propagation in an MPLS VPN network. Which two actions are necessary to ensure that communities are passed from CE to remote PE?

Easy
223

Refer to the exhibit. An engineer pushes this XML configuration via NETCONF, but the device rejects it with an error stating 'invalid policy-map structure'. What is the problem?

Hard
224

Which congestion avoidance technique drops packets probabilistically before the queue becomes full?

Easy
225

A service provider is migrating from OSPF to IS-IS in the core. During the migration, both protocols are running. Some prefixes are learned via both OSPF and IS-IS. The network uses BGP for external routes and MPLS for VPNs. The engineer notices that BGP routes are pointing to a next-hop that is reachable via OSPF but not via IS-IS, causing traffic to be dropped. What is the best course of action to ensure that during the migration, BGP uses only one IGP protocol?

Easy
226

In MPLS, which operation is performed when a packet arrives at a transit router and the top label matches the router's own label assigned for the FEC?

Easy
227

An SP wants to secure management access to IOS XR routers. Which two measures should be implemented? (Choose two.)

Easy
228

You are a network engineer at a service provider that offers L3VPN services. A customer complains that their VPN traffic is intermittently dropping. The network uses OSPF as the IGP, LDP for label distribution, and MP-BGP for VPNv4 route exchange. The PE routers are connected to two core routers (P1 and P2) in a redundant design. Upon investigation, you find that the BGP next-hop for some VPN prefixes is set to the loopback interface of the remote PE, but the route to that loopback is sometimes unreachable due to a flapping link between P1 and P2. The IGP converges, but the BGP prefixes take longer to recover. What is the most likely cause of the intermittent drops?

Medium
229

An engineer wants to configure SR-TE without using RSVP. Which mechanism does SR-TE use to specify the explicit path?

Medium
230

A service provider is designing a new MPLS core network and needs to choose a routing protocol that supports traffic engineering and fast convergence. Which protocol should be used?

Easy
231

A service provider is implementing BGP PIC (Prefix Independent Convergence) for its core network. Which mechanism does BGP PIC primarily rely on to achieve fast convergence?

Medium
232

A network engineer is designing a Layer 2 VPN using EVPN with MPLS data plane. The customer requires all-hub multipoint connectivity with optimal multicast replication. Which EVPN route type is used to advertise multicast group membership?

Hard
233

Which RSVP-TE message is used to reserve resources along the path and includes the Explicit Route Object (ERO)?

Medium
234

Which component in MQC is used to classify traffic based on match criteria?

Easy
235

A service provider operates a Layer 2 MPLS VPN using VPLS. Recently, two new CE routers were added to the VPLS domain, but they cannot ping each other. The existing CEs can communicate. The network uses BGP autodiscovery and signaling. The new CEs are connected to different PEs. The 'show vfi status' command on the new PEs indicates the VFI is up but the pseudowire to the remote PE is down. The BGP session between the PEs is established and the L2VPN address family routes are exchanged. What is the most probable cause?

Hard
236

An SP implements Carrier-Grade NAT (CGNAT) to conserve IPv4 addresses. For legal compliance, what additional function must be enabled to log subscriber IP-port mappings?

Medium
237

A service provider is deploying a new MPLS core network and needs a router platform that supports high-scale MPLS forwarding and offers a modular operating system. Which Cisco platform is best suited for this role?

Medium
238

In IOS XR, what is the primary purpose of the commit/rollback configuration model?

Medium
239

Based on the exhibit, which OSPF network type is configured on this interface?

Easy
240

What is the main benefit of using Q-in-Q (802.1ad) in metro Ethernet networks?

Easy
241

An SP engineer is implementing LLQ on a PE router to prioritize voice. Which additional configuration is recommended to prevent voice traffic from starving other queues?

Medium
242

A service provider uses BGP to exchange routes with customers. To prevent the customer from announcing prefixes they do not own (BGP hijacking), which tool should the provider apply on the customer-facing BGP session?

Easy
243

In OSPFv3, which of the following is true about the protocol's operation?

Medium
244

A customer's MPLS L3VPN has two CE routers connected to two different PEs, but the PEs are not receiving the customer's routes from each other. The PE-CE routing protocol is OSPF. The PEs have the VRF configured with OSPF process, and the routes from CE are in the VRF routing table. The MP-BGP session between PEs is up and the VPNv4 address family is working. On the source PE, the routes show as not advertised to BGP. What is the likely issue?

Medium
245

A service provider is implementing Segment Routing over IPv6 (SRv6) in their core. They want to provide path isolation for different services using SRv6 SIDs. Which SID structure is used to encode both the locator and the function?

Hard
246

Which three mechanisms are used within the DiffServ model to provide QoS in an SP network? (Choose three.)

Hard
247

Which network architecture model separates the control plane and data plane in a way that allows for centralized control and distributed forwarding?

Easy
248

In an MPLS-based service provider core network, the aggregation layer typically connects to the core backbone. Which technology is primarily used at the aggregation layer to scale Ethernet services for many customers while preserving VLAN separation?

Medium
249

Which OSPF area type can import external routes as Type 7 LSAs?

Easy
250

Which THREE of the following are required components for implementing MPLS Layer 3 VPN (L3VPN) in a service provider network? (Choose three.)

Medium
251

A service provider wants to mitigate DDoS attacks by blackholing traffic destined to a victim IP address. They plan to use Remotely Triggered Black Hole (RTBH) filtering. What BGP community is commonly used to trigger the blackhole route?

Easy
252

Which LDP mode uses downstream unsolicited label distribution and liberal label retention?

Easy
253

Which TWO are correct about network slicing? (Choose two.)

Hard
254

Which TWO statements about IOS XR architecture are correct? (Choose two.)

Medium
255

Refer to the exhibit. Which statement about this BGP configuration is true?

Hard
256

A service provider is running OSPF in their core network. After a link failure, routing convergence is taking longer than expected. The engineer suspects the issue is related to the SPF calculation. Which OSPF feature can reduce the SPF calculation time?

Medium
257

A service provider wants to enable fast convergence for OSPF networks. Which feature should be enabled to detect link failures in sub-second time?

Medium
258

Refer to the exhibit. Which prerequisite for MPLS L3VPN is missing on PE1?

Easy
259

Which SRv6 endpoint behavior is used for L3VPN decapsulation and IP forwarding to the destination in a VRF?

Medium
260

A service provider is designing a Layer 2 MPLS VPN to connect multiple customer sites. Which technology should be used to provide end-to-end Ethernet service with MAC address transparency and support for multiple customer VLANs?

Easy
261

A service provider is deploying segment routing in its MPLS core. Which label allocation method is used by segment routing to distribute prefix SIDs?

Medium
262

An ISP is implementing 6PE for IPv6 transport over MPLS. Which two conditions are required for 6PE to work? (Choose two.)

Hard
263

An SP engineer configures a QoS policy on an IOS XR router to re-mark DSCP from AF11 to AF22 for traffic matching a specific ACL. The policy compiles successfully but traffic is not re-marked. What is a likely reason?

Easy
264

A network administrator is designing an MPLS TE tunnel for a service provider backbone. The goal is to provide bandwidth protection for voice traffic. Which MPLS TE feature should be configured?

Easy
265

In an MPLS network using LDP, which LDP mode allocates a label for every prefix in the routing table and advertises it to all LDP neighbors, regardless of whether the neighbor requests it?

Medium
266

An engineer is configuring an MPLS Traffic Engineering tunnel using RSVP-TE. The tunnel is intended to carry voice traffic with strict delay requirements. Which RSVP-TE object should be used to enforce a maximum delay path?

Easy
267

A service provider is implementing RPKI to validate BGP routes. Which THREE components are necessary for a complete RPKI deployment on routers? (Choose three)

Hard
268

In Segment Routing over IPv6 (SRv6), what is the function of the 'Locator' part of an SRv6 SID?

Easy
269

Which TWO statements correctly describe RSVP-TE reservation styles? (Choose two.)

Medium
270

A service provider operates a large MPLS network with hundreds of PE routers. They have deployed QoS policies to ensure real-time traffic (voice and video) receives priority. The policy uses LLQ with a strict priority queue for voice (DSCP EF) and another for video (DSCP AF41). Each priority queue has a policer to prevent starvation of other classes. Recently, a customer reports that their video calls are experiencing jitter and packet loss. The engineer examines the PE router connected to this customer. The interface is GigabitEthernet0/0/1 with the policy applied in the output direction. Show commands indicate that the video priority queue is frequently dropping packets, while the voice queue has no drops. The police for the video queue is set to 10 Mbps. The customer's contract guarantees 20 Mbps for video traffic. However, the actual video traffic is averaging 15 Mbps with bursts to 18 Mbps. The engineer notes that the video class also has a bandwidth command of 10 Mbps under the priority statement. What is the most likely cause of the video packet loss?

Hard
271

An SP is using Cisco ASR 9000 routers with IOS XR. They need to apply a configuration change and ensure that if the change causes issues, it can be easily reverted. Which IOS XR feature supports this?

Medium
272

A service provider is designing a new MPLS core network and wants to simplify traffic engineering without deploying a centralized controller. Which technology should be used to enable source-routed paths with explicit path control?

Easy
273

Match each Ethernet OAM protocol to its function.

Medium
274

Which Cisco platform is best suited for the core/backbone role of a large service provider network, offering high scalability and MPLS forwarding capacity?

Medium
275

Which component of SRv6 SID format is used to identify the specific function (e.g., End, End.X) on the node?

Medium
276

An SR-TE policy is configured with a candidate path containing multiple segment lists. Which selection criteria is used to choose the active segment list among the candidate paths?

Medium
277

A Cisco XR router is configured to stream telemetry via gRPC with TLS. The collector can connect but receives empty data. The telemetry configuration is as follows: sensor-group with 'openconfig-interfaces' paths. What is the likely cause?

Hard
278

An SP engineer is configuring IS-IS on a router and specifies a NET address of 49.0001.1921.6800.1001.00. What does the '00' at the end represent?

Medium
279

Which Cisco SP router platform runs IOS XR and is designed for the aggregation layer with high-density 10GE/100GE interfaces?

Easy
280

Which protocol is typically used to distribute MPLS labels between directly connected LSRs?

Easy
281

Which TWO actions are required to implement QoS trust boundaries correctly in a service provider network?

Easy
282

In a CBWFQ policy with LLQ, which statement is true regarding the bandwidth command for non-priority classes?

Hard
283

Which THREE QoS mechanisms can be used for traffic policing?

Medium
284

An engineer is configuring MPLS-TE FRR for link protection. Which of the following options describes a 1:1 protection scheme where a dedicated detour LSP is created for each protected LSP?

Hard
285

In the context of YANG modeling for network automation, which statement about 'must' expressions is true?

Medium
286

Which component of an MPLS-TE FRR (Fast Reroute) configuration provides protection for the next-hop node by bypassing it?

Easy
287

Which IS-IS metric type is required for traffic engineering and segment routing?

Easy
288

Which TWO access technologies are considered fiber-based solutions for service provider access networks? (Select two.)

Easy
289

A multicast service provider is designing an IPv4 PIM Sparse Mode (PIM-SM) network with multiple RPs. The network must support Anycast RP using MSDP. Which THREE statements are correct regarding this design?

Hard
290

What is the primary difference between traffic policing and traffic shaping?

Easy
291

Which LDP label retention mode stores all received label bindings even if they are not currently used for forwarding?

Easy
292

What is the primary benefit of using model-driven telemetry over traditional SNMP polling for network assurance?

Easy
293

A network administrator is configuring a Cisco ASR 9000 router for MPLS L3VPN. The PE receives customer routes via eBGP from the CE. Which command is required to redistribute these routes into the VPNv4 BGP table on the PE?

Easy
294

An SP network is migrating from IS-IS narrow metrics to wide metrics. What is a key advantage of using wide metrics?

Medium
295

During multicast troubleshooting, the command 'show ip mroute' shows that the RPF neighbor for a particular (S,G) entry is incorrect. What is the most likely cause?

Hard
296

Which TWO statements accurately describe the behavior of the QoS policy shown in the exhibit?

Medium
297

An MPLS TE tunnel is configured with an explicit path. Which RSVP message is used by the headend to signal the path and carry the Explicit Route Object (ERO) listing the hops?

Medium
298

Which SR-MPLS SID is advertised by an IS-IS router to identify a specific link and is distributed only to adjacent neighbors?

Medium
299

A service provider wants to provide point-to-point Ethernet services with strict SLAs. Which technology should they use?

Hard
300

Refer to the exhibit. An engineer is troubleshooting an MPLS LDP session between two routers. The output shows that the LDP session is operational. However, MPLS labels are not being exchanged. What is the most likely cause?

Hard
301

A service provider is implementing Segment Routing in an IS-IS network. Which TLV is used to advertise the Segment Routing Global Block (SRGB)?

Hard
302

A network engineer is troubleshooting an OSPF issue in a service provider network. The network uses OSPFv2 with multiple areas. Routers in area 0 are able to ping each other, but routers in area 1 cannot reach routers in area 2. All routers are OSPF-enabled and have correct network type configurations. What is the most likely cause?

Easy
303

A service provider is implementing QoS on a PE router for customer traffic. Which tool should be used to classify traffic based on application layer information?

Easy
304

Refer to the exhibit. What is the significance of the entry with 'Pop Label'?

Hard
305

Refer to the exhibit. A PE router in an MPLS L3VPN network shows the above output. The VRF CUSTOMER contains two routes. Which statement about forwarding for these routes is true?

Hard
306

When configuring EVPN VPWS, which TWO parameters must match between the two endpoints of the pseudowire?

Hard
307

Refer to the exhibit. An operator configures an SR-TE policy on a headend router. Which statement is true about the traffic steered into this policy?

Hard
308

In a BGP/MPLS IP VPN, which technique ensures that customer traffic from different VPNs remains isolated on the same PE router?

Medium
309

An engineer is configuring BGP Graceful Shutdown (GSHUT) for maintenance on a router. Which BGP attribute is set to trigger the graceful shutdown behavior?

Easy
310

A large enterprise recently implemented centralized QoS policies using Cisco DNA Center. The policies are pushed via RESTCONF to the branch routers. After the deployment, the branch office reports that critical business applications (like ERP) are being delayed. The network team verifies that the QoS policy is applied correctly on the WAN interface (Serial0/0/0) with a shape of 10 Mbps. The policy-map has a class for 'critical-data' with bandwidth 5 Mbps and another class for 'transactional-data' with bandwidth 3 Mbps. The remaining traffic is in class-default with fair-queue. The branch router's CPU utilization is normal. The interface output shows that the queue for critical-data is rarely full, but packets are experiencing high latency. The engineer pings from the branch server to the central site and sees 200 ms RTT normally, but up to 500 ms during peak hours. What is the most likely cause of the high latency for critical-data?

Medium
311

A network engineer is troubleshooting an MPLS TE tunnel that is not coming up. The tunnel is configured with a strict explicit path, and the path includes an interface that is currently down. Which action should the engineer take to allow the tunnel to use an alternative path?

Easy
312

Match each Segment Routing component to its function.

Medium
313

Which two statements about MPLS label operations are true? (Choose two.)

Easy
314

A network architect is designing a Segment Routing (SR) network for a service provider with a requirement for fast convergence upon node failure. The network uses IS-IS as the IGP with segment routing extensions. Which design choice BEST ensures that the network can achieve sub-50ms convergence without relying on any signaling protocol beyond the IGP?

Hard
315

In RSVP-TE, which filter spec style allows multiple senders to share the same reserved resources on a link, as long as their flows do not exceed the reservation?

Hard
316

An SP is deploying NAT64 to allow IPv6-only clients to access IPv4 servers. Which address translation mechanism is used by NAT64 to map IPv6 addresses to IPv4 addresses?

Hard
317

A service provider is using LISP to provide host mobility. Which LISP component is responsible for storing the mapping of EID to RLOC?

Hard
318

Which THREE of the following are benefits of using EVPN over traditional VPLS for L2VPN services? (Select three.)

Hard
319

A service provider wants to offer a point-to-point Ethernet service between two customer sites with a defined bandwidth and performance guarantee, according to MEF standards. Which Carrier Ethernet service type is appropriate?

Easy
320

Which congestion avoidance mechanism is used to prevent tail drop by selectively dropping packets from lower-priority flows before the queue becomes full?

Medium
321

In an IS-IS segment routing network, after the global 'segment-routing mpls' configuration, which IS-IS configuration is mandatory for label allocation?

Medium
322

Which two statements about MPLS Layer 3 VPN route target (RT) communities are correct?

Easy
323

When deploying EVPN with SR-MPLS or SRv6, which THREE statements about EVPN multi-homing and related concepts are correct? (Choose three.)

Hard
324

An engineer is designing an EVPN IRB (Integrated Routing and Bridging) solution. Which two statements about EVPN IRB are correct? (Choose two.)

Medium
325

Refer to the exhibit. CE1 is unable to ping the loopback of a remote CE. Which configuration change is required on PE1 to enable communication?

Hard
326

In the DiffServ model, which per-hop behavior (PHB) is associated with the AF31 DSCP value?

Medium
327

Refer to the exhibit. The show command output displays the LDP neighbor state. What does the 'Downstream' label mode indicate about label distribution?

Easy
328

A service provider is designing an OSPF network for MPLS-TE. Which two OSPF LSA types are used to advertise Traffic Engineering information? (Choose two.)

Medium
329

An engineer is configuring IS-IS in a service provider network. The network uses wide metrics for traffic engineering. Which TLV is mandatory for IS-IS to carry traffic engineering (TE) information in accordance with RFC 5305?

Medium
330

In EVPN, what is the purpose of Ethernet Segment Identifier (ESI)?

Medium
331

A service provider wants to enforce a hard rate limit of 10 Mbps on a subscriber's traffic, dropping any excess packets. Which QoS mechanism should be used?

Medium
332

In IS-IS, which type of LSP is used to advertise prefix information for IPv4 and IPv6 in a modern SP network that supports traffic engineering?

Easy
333

Which TWO statements about model-driven telemetry compared to SNMP are correct? (Choose two.)

Medium
334

What is the purpose of the 'mpls ldp autoconfig' command on an interface?

Easy
335

An engineer configures an SR-TE policy with a segment list containing adjacency SIDs. The required path includes a strict loose hop through a specific router. Which segment type should be used for the strict hop?

Hard
336

In IS-IS, a router is configured as L1 only. Which statement is true regarding its routing table?

Easy
337

Which THREE of the following are required for successful operation of OSPFv3 in an IPv6 service provider network?

Easy
338

A service provider uses RESTCONF to automate interface configuration. They need to add a new IPv4 address to an existing interface. Which HTTP method and URI should be used?

Medium
339

An SP is implementing traffic shaping on an MPLS PE-CE link. Which TWO statements are true about shaping compared to policing? (Select two.)

Medium
340

Which TWO of the following are valid BGP extended community attributes? (Choose two.)

Hard
341

Which TWO statements about SR-MPLS compared to LDP are correct? (Choose two.)

Medium
342

In an MPLS L3VPN network with route reflectors, what is the default behavior regarding the BGP next-hop attribute for reflected VPNv4 routes?

Hard
343

What is the role of Network Services Orchestrator (NSO) in service provider automation?

Medium
344

In a carrier network using VRF-lite for customer isolation, which issue arises if route-target values are not correctly configured?

Medium
345

Which TWO statements correctly describe the DiffServ model? (Choose two.)

Medium
346

A service provider is deploying IPv6 transition mechanisms. Which three technologies use encapsulation over an IPv4 network? (Choose three.)

Hard
347

An SP network operator needs to ensure that voice traffic always gets priority access to the output link. Which queuing mechanism is designed to provide a strict priority queue while preventing starvation of other queues?

Medium
348

A service provider is deploying a BNG for subscriber management. Which protocol is used to authenticate subscribers and assign IP addresses via the BNG?

Medium
349

A service provider wants to prevent BGP hijacking by validating the origin AS of received routes. They deploy RPKI with Route Origin Authorizations (ROAs). When a router receives a prefix with an origin AS that matches the ROA, what is the BGP Origin Validation state?

Medium
350

Which TWO statements about Cisco NSO (Network Services Orchestrator) are true? (Choose two.)

Hard
351

Which MPLS label is used to identify the egress PE in a Layer 3 MPLS VPN?

Easy
352

In a multicast environment, a PE router is not receiving multicast traffic from a source behind a CE. The PIM neighbors are established. The RP is reachable. What is the most likely issue?

Medium
353

Which IS-IS level is used for routing within an area?

Easy
354

A service provider wants to provide Layer 3 VPN services to customers using MPLS. Which technology is used to distribute VPNv4 routes between PE routers?

Easy
355

Which four statements correctly describe the SRv6 micro-SID (uSID) concept? (Choose four.)

Hard
356

An SP network is running OSPFv3 for IPv6 and needs to support traffic engineering extensions for RSVP-TE. Which three statements about OSPFv3 TE extensions are true?

Medium
357

In OSPF Traffic Engineering (TE) extensions for RSVP-TE, which LSA type is used to carry TE information?

Medium
358

Which three are benefits of using MPLS Layer 3 VPNs over traditional VPNs? (Choose three.)

Hard
359

In MPLS, what is the term for the operation where the top label is removed and replaced with a new label?

Easy
360

Based on the exhibit, which label operation will occur when a packet destined to 10.2.2.1 enters PE1 with label 17?

Easy
361

An SP router is configured with a hierarchical QoS policy (parent policy shaper, child policy with CBWFQ). When applying this policy to an interface, the router reports 'Policy map not found' error. What is the most likely cause?

Hard
362

In OSPF, which type of area does not allow external routes and only accepts a default route?

Easy
363

An SP network is implementing BGP PIC (Prefix Independent Convergence) for fast failover. What is the primary mechanism used by BGP PIC to achieve sub-second convergence?

Medium
364

Which Cisco router platform is designed for the aggregation layer and supports both mobile backhaul and business services with high density 10GE/100GE interfaces?

Easy
365

A service provider is deploying Segment Routing in the MPLS core using IS-IS. Which extension is required in IS-IS to advertise the prefix-SID?

Easy
366

A large service provider operates a national MPLS backbone with over 200 P routers and 500 PE routers. They use IS-IS as the IGP with segment routing and have deployed TI-LFA for link and node protection. Recently, a core router (P1) suffered a complete failure, and during the failure, traffic for some prefixes was dropped for over 200ms. After the failure, the network recovered within seconds. The engineer suspects that TI-LFA did not provide the expected sub-50ms protection for some destinations. Further analysis reveals that the affected prefixes have their BGP next-hop on a router that is multiple hops away, and the P1 failure impacted both the primary path and the backup path computed by TI-LFA. The engineer reviews the TI-LFA configuration and finds that 'fast-reroute per-prefix ti-lfa' is enabled under router isis. The engineer also notes that P1 was not a protecting node for those prefixes. Which action should the engineer take to improve convergence time for these prefixes?

Hard
367

In a service provider network, the access layer connects end customers. Which technology is commonly used for fibre-based access in GPON deployments?

Easy
368

An automation engineer is writing a Python script using Cisco's pyATS library to validate QoS configurations across a fleet of routers. The script runs without errors but reports that all routers are compliant even though some are not. What is the most likely issue?

Hard
369

An SP engineer is configuring QoS on a router and needs to drop traffic that exceeds a certain rate while allowing bursts up to a specified amount. Which QoS feature should be used?

Easy
370

A service provider is implementing MPLS TE to optimize bandwidth utilization. The engineer notices that tunnels are not using the explicitly configured path. What is the most likely reason?

Medium
371

An enterprise uses IPsec VPN to connect branch offices. They apply QoS policies on the tunnel interface but notice that original DSCP markings are not preserved after encryption. Which feature should be enabled to maintain end-to-end QoS?

Hard
372

A service provider is implementing QoS policies on an access aggregation router. They want to shape traffic to a downstream DSLAM to 10 Mbps, but they do not want to exceed the shaping rate even if the line rate is higher. Which QoS tool should be used on the interface facing the DSLAM?

Medium
373

Which TWO are characteristics of the access layer in a service provider network? (Choose two.)

Easy
374

A service provider is deploying MPLS in its core network. The core routers are all configured with LDP. Which label operation does an ingress PE perform on the first packet of a new flow?

Easy
375

An engineer configures an RSVP-TE tunnel with a bandwidth of 100 Mbps and an explicit path that excludes a specific interface. The tunnel fails to come up. Which term describes the path computation method used by RSVP-TE to find a feasible path given these constraints?

Hard
376

Which RESTCONF HTTP method is used to create a new data resource?

Medium
377

An SP engineer is designing a BGP-based MPLS L3VPN service. The PE routers are fully meshed via iBGP for VPNv4 routes, and an RR is deployed to reduce sessions. The engineer notices that all PE routers are receiving duplicate routes from different PEs, causing suboptimal path selection. Which BGP feature should be enabled to ensure proper load balancing across multiple equal-cost paths?

Hard
378

In IS-IS, which TWO are types of Link State PDUs (LSPs)?

Easy
379

In a carrier-supporting carrier (CSC) architecture, the customer carrier runs MPLS in its network. Which technology is used to exchange VPN routes between the provider carrier and the customer carrier?

Hard
380

A service provider is designing its core network to carry both IPv4 and IPv6 traffic. Which BGP approach best minimizes routing table size on core routers while maintaining full reachability?

Easy
381

An engineer is troubleshooting an MPLS network where some routers are not exchanging labels via LDP. Which two steps are most appropriate for diagnosing the issue? (Choose two.)

Medium
382

An SP is designing MQC policies. Which THREE statements about MQC are true? (Choose three.)

Hard
383

Refer to the exhibit. What is the role of this router for prefix 10.0.1.0/24?

Hard
384

Which THREE components are required to deploy MPLS Layer 3 VPN?

Hard
385

Which THREE of the following are key components of an MPLS L3VPN architecture? (Choose three.)

Medium
386

An engineer is troubleshooting MPLS LSP connectivity. The ingress PE router has the label binding for the FEC 10.1.1.0/24, but no LSP is established. Which command should be checked on the P routers to verify the LSP path?

Hard
387

In an MPLS core, which forwarding mechanism do P routers use to forward packets for L3VPN?

Medium
388

An SP network is using IS-IS and wants to achieve fast convergence using BFD. Which two statements about BFD in IS-IS are correct?

Easy
389

Which MPLS security best practice helps prevent label spoofing attacks where an attacker injects MPLS packets with a forged label stack to bypass ACLs?

Medium
390

An engineer is configuring VPLS on a Cisco ASR 9000. After verifying the pseudowire status, they notice that the 'pw status' shows 'down' for one of the PWs. Which two conditions could cause this? (Choose two.)

Medium
391

An SP is implementing RPKI to validate BGP route origins. They have set up an RPKI cache and configured routers with the RPKI-to-Router (RTR) protocol. During validation, a route is received with an AS that does not match any ROA. What is the validation state?

Hard
392

Refer to the exhibit. A network engineer configures a BGP route-map to set communities on routes advertised to a neighbor. After applying the configuration, the engineer checks the BGP table on the neighbor router and does not see the communities. What is the most likely reason?

Medium
393

Which BGP attribute is used to influence inbound traffic to an AS by indicating the preferred path into the AS?

Medium
394

Refer to the exhibit. A network engineer is configuring a segment routing traffic engineering policy. The output shows two candidate paths. Why is path1 selected as the active path even though path2 has a bandwidth constraint?

Medium
395

A service provider offers L3VPN services to multiple enterprise customers. One customer reports that they cannot reach some remote sites intermittently. The network uses MPLS L3VPN with MP-BGP for VPN route exchange. The PE routers are configured with route-target import and export. The customer's CE router is dual-homed to two different PEs in the same point of presence. The engineer checks the BGP table on both PEs and sees the customer routes with the correct route-target. However, pings from the CE to a remote site fail about 50% of the time, and the flapping pattern suggests load balancing issues. The engineer discovers that the remote site's network prefix is being advertised from both PEs with the same route-target but with different next-hops. The CE has equal-cost paths via both PEs. What is the most likely cause of the intermittent connectivity?

Medium
396

A network automation engineer needs to retrieve QoS policy statistics from a Cisco IOS XE device using RESTCONF. Which YANG module should be targeted?

Hard
397

Which THREE of the following are standard per-hop behaviors (PHBs) in the DiffServ model? (Select three.)

Easy
398

In IS-IS, what is the result of configuring wide metrics on all interfaces?

Medium
399

Which THREE functions are provided by EVPN multi-homing? (Choose three.)

Hard
400

An SP is migrating its core network to Segment Routing (SR-MPLS). The network uses IS-IS as the IGP with SR extensions. Which three statements about SR-MPLS architecture are correct?

Hard
401

A network operator is deploying segment routing in an MPLS network. They want to use a centralized controller to compute paths based on traffic demand and network constraints. Which architecture is being used?

Hard
402

In the context of MPLS QoS, at which point are EXP bits typically set based on the DSCP value of the IP packet?

Easy
403

A service provider is designing a multicast solution for a Layer 3 VPN. They want to use MVPN with BGP signaling (draft-rosen). The PE routers are configured with VRF and multicast routing enabled. Which BGP address family must be enabled between PE routers to carry multicast routing information?

Hard
404

An SP network engineer configures IS-IS with wide metrics. Which statement is true about IS-IS wide metrics compared to narrow metrics?

Medium
405

An engineer is troubleshooting a BGP peering issue between two routers. The peering is established, but routes are not being exchanged. On router R1, 'show bgp neighbors 192.0.2.2' shows the neighbor state as 'Established' but the 'Prefixes received' counter is zero. What is most likely the cause?

Medium
406

An OSPF network uses point-to-point links. The engineer notices that LSAs are being flooded every 30 minutes even when no topology changes occur. What is the most likely reason?

Medium
407

In Inter-AS MPLS Option B, which routers exchange labeled VPNv4 prefixes directly?

Medium
408

An operator is deploying EVPN-VPWS over an MPLS network. Which component uniquely identifies a multihomed Ethernet segment in EVPN?

Hard
409

An SP is deploying SR-TE policies using PCEP. What is the role of the SR-PCE in this architecture?

Medium
410

An engineer is designing an MPLS network and needs to ensure that VPN traffic between two PE routers is label-switched. The PE routers are connected via a P router and have a full mesh of iBGP sessions. Which label distribution method is required for the VPN labels?

Easy
411

Refer to the exhibit. An engineer configured a telemetry subscription to push interface state data to a collector. The subscription shows 'State: Invalid'. What is the most likely cause?

Medium
412

When deploying IS-IS in a large service provider core, what is the recommended network type on Ethernet interfaces to improve scalability?

Easy
413

A service provider is implementing EVPN for its VPLS replacement. They have configured BGP EVPN on all PEs and have set up an EVPN instance for a customer requiring broadcast, unknown unicast, and multicast (BUM) traffic. The customer reports that broadcast traffic from one site is not being received at another site. The engineer checks the EVPN configuration and finds that the EVI is configured correctly, the route-target matches, and the BGP sessions are established. The engineer also checks the MAC address table on the receiving PE and sees that the source MAC of the broadcast frame is learned on the local interface, but not from the remote VTEP. The engineer suspects an issue with the IMET (Inclusive Multicast Ethernet Tag) route. Which action should the engineer take to verify the IMET route?

Medium
414

Which THREE of the following are correct statements about EVPN-VXLAN in a data center fabric? (Select three.)

Hard
415

In EVPN with SRv6, which SID behavior is used for integrated routing and bridging (IRB) to forward packets between the IP fabric and the Ethernet segment?

Hard
416

What is the primary difference between traffic shaping and policing in a QoS implementation?

Medium
417

In SR-MPLS, what is the purpose of the SRGB (Segment Routing Global Block)?

Medium
418

A service provider is troubleshooting an MPLS L3VPN where customers behind CE-A cannot reach CE-B. The PE routers are Cisco ASR 9000 series. On PE-A, the show cef vrf CUSTOMER prefix 10.1.1.0/24 command displays 'punt' as the forwarding path. What is the most likely cause?

Medium
419

A service provider is deploying segment routing in their MPLS core. They want to use an IGP as the control plane for label distribution without running LDP or RSVP-TE. Which IGP is best suited for this purpose?

Medium
420

Which THREE are correct statements about IOS XR process separation? (Choose three.)

Hard
421

Which two statements about LDP liberal label retention are true? (Choose two.)

Medium
422

An SP engineer is configuring model-driven telemetry (MDT) to monitor interface utilization on Cisco routers. The telemetry receiver uses gRPC and is experiencing high CPU load due to excessive subscription data. Which MDT subscription parameter should be adjusted to reduce the data rate without losing critical threshold events?

Hard
423

Given the output, which configuration mismatch would prevent a remote PE in the same VPN from installing this route into its VRF?

Medium
424

Which TWO tasks are required when implementing segment routing in an MPLS network?

Medium
425

An engineer is configuring MPLS LDP on a Cisco router. The router uses downstream unsolicited mode with liberal label retention. Which behavior describes the label distribution and retention on this router?

Medium
426

An SP engineer configures IS-IS fast convergence mechanisms. Which three techniques help achieve sub-second convergence in IS-IS?

Hard
427

Which Cisco SP router platform uses IOS XR and is commonly deployed at the aggregation layer, supporting both L2 and L3 services?

Medium
428

Which technology allows a service provider to offer different classes of service over a single MPLS network?

Easy
429

Which TWO statements correctly describe differences between PIM dense mode and PIM sparse mode? (Choose two.)

Easy
430

A service provider is implementing BGP route reflectors to scale iBGP. Which THREE mechanisms are used to prevent routing loops in a route reflector topology? (Choose three.)

Medium
431

A customer has a 100 Mbps access link and wants to limit traffic to 95 Mbps with burst allowance up to 100 Mbps. Which QoS action should be applied on the egress interface?

Medium
432

What does the output indicate about the TI-LFA protection on R1?

Hard
433

Which MPLS label operation is performed by the penultimate hop router in PHP (Penultimate Hop Popping)?

Easy
434

You are a network automation engineer for a large service provider. Your team is tasked with automating the provisioning of new MPLS L3VPN services across a multi-vendor environment (Cisco and Juniper). The automation framework uses Ansible with Jinja2 templates and NETCONF as the transport protocol. During a pilot deployment, the automation successfully configures the Cisco devices but fails on Juniper devices with a 'syntax error' when applying the generated XML configuration. The Jinja2 templates are designed to generate Cisco-style configuration. You need to modify the automation to support both vendors. Which approach is most effective?

Medium
435

Match each MPLS protection mechanism to its description.

Medium
436

An SP router is configured with CBWFQ. For a data class requiring 30% bandwidth guarantee, which command is correct in the policy-map?

Medium
437

Which three components are part of NSO (Network Services Orchestrator) architecture? (Choose three.)

Hard
438

Which three are required components for deploying Segment Routing in an MPLS network? (Choose three.)

Medium
439

Refer to the exhibit. Which statement is true about this configuration?

Easy
440

An SP engineer is hardening management plane access on IOS XR routers. They want to enforce role-based access control using task groups. Which AAA protocol is required to support attribute-based authorization on IOS XR?

Medium
441

An SP uses traffic policing and shaping to manage bandwidth. Which statement best describes the difference between the two mechanisms?

Medium
442

An engineer is configuring NTP authentication on IOS XR routers to ensure secure time synchronization. What is required for NTP authentication to work?

Medium
443

A network engineer is configuring management plane security on IOS XR. Which TWO of the following are recommended practices? (Choose two.)

Easy
444

A service provider is deploying segment routing (SR) with MPLS data plane. The network uses OSPF as the IGP. Which configuration is required to enable SR-MPLS and ensure that routers advertise prefix-SIDs for their loopback interfaces?

Hard
445

A network engineer is troubleshooting QoS in a service provider environment. Customer traffic is marked with DSCP AF31 (011010) at the CE. On the PE router, the policy maps trust DSCP and sets the CoS to 4. However, core routers remark the DSCP to 0. What is the most likely cause?

Medium
446

A service provider wants to offer a point-to-point Layer 2 Ethernet service between two customer sites with strict SLAs. The solution must use MPLS pseudowires. Which MEF service type aligns with this requirement?

Hard
447

Which TWO methods can RESTCONF use to create a new data resource? (Choose two.)

Medium
448

Refer to the exhibit. An engineer notices that R1 has an LDP neighbor but 'show mpls forwarding-table' on R1 shows no label bindings for prefixes learned from R2. What is the most likely cause?

Medium
449

Which TWO statements about YANG data models are true? (Choose two.)

Easy
450

A service provider is deploying a new MPLS core with Segment Routing and requires fast convergence upon link failure. They plan to use TI-LFA (Topology Independent Loop-Free Alternate). What is a prerequisite for TI-LFA to provide protection against any single link failure?

Hard
451

Which TWO are benefits of using Segment Routing over LDP in a service provider core?

Medium
452

In an MPLS network, which field in the MPLS label header is used to carry QoS information between LSRs?

Medium
453

Which Cisco automation tool uses service models in YANG and communicates via NETCONF to orchestrate device configurations and lifecycle management?

Easy
454

An SP is designing a GPON access network. Which technology allows multiple ONUs to share the same fiber using different wavelengths for upstream and downstream?

Hard
455

An SP is deploying IS-IS fast convergence. Which mechanism triggers an immediate SPF computation when a neighbor fails?

Medium
456

Based on the exhibit, why is the route 10.10.10.0/24 from remote PE not installed in the VRF Customer-A on PE1?

Hard
457

An engineer is designing an MPLS L3VPN solution and must ensure that the provider edge (PE) routers can handle routing updates for multiple customers without interfering with each other. Which mechanism should be used on the PE routers?

Medium
458

A network operator wants to prefer a specific BGP route from a peer for a prefix. After applying a route-map to set local preference to 200, the route is still not preferred over a route from another peer with local preference 150. What could be the issue?

Medium
459

Which two statements correctly describe the use of DSCP values in the DiffServ model? (Choose two.)

Medium
460

The CE router behind the VRF interface is unable to reach the remote CE. Which configuration error is most likely the cause?

Medium
461

In a Cisco IOS XR router, which statement best describes process separation?

Hard
462

A router is receiving a BGP prefix with community 100:100. The operator wants to modify the local preference to 200 for this prefix. Which configuration will achieve this?

Easy
463

In BGP/MPLS IP VPN (L3VPN), which component provides customer isolation by maintaining separate routing tables per customer?

Medium
464

A service provider is deploying Segment Routing over IPv6 (SRv6) and needs to ensure that the forwarding plane can support SRv6 encapsulated packets. Which hardware capability is most critical for SRv6 at the line rate?

Hard
465

An SP network uses MPLS to provide IPv6 connectivity over an IPv4 backbone using 6PE. Which BGP extension is required on the provider edge routers to exchange IPv6 prefixes with an IPv4 next-hop?

Hard
466

During QoS troubleshooting, you capture traffic and see that DSCP markings are not being applied as configured. Which two common misconfigurations could cause this? (Choose two.)

Easy
467

A service provider is deploying IGMPv3 snooping on an MVPN network to optimize multicast forwarding. After configuration, multicast traffic is not reaching receivers. The source is sending to group 239.1.1.1. The PE router has received the IGMP report from the receiver, and the MDT is established. What is the most likely reason?

Easy
468

Which two are characteristics of the Anycast SID in Segment Routing? (Choose two.)

Hard
469

In BGP confederation, which attribute is used to prevent loops between sub-ASes?

Medium
470

An SP uses NSO for service orchestration. A new service requires YANG data validation to ensure that the 'bandwidth' leaf does not exceed 10000 kbps when the 'service-type' is 'premium'. Which YANG statement is appropriate?

Hard
471

While troubleshooting a customer complaint about slow data transfers, you notice that traffic from a specific site is being dropped. The QoS policy on the PE router includes a police command for the customer's traffic. The observed drop rate is exactly half of the configured police rate. What is the most probable reason?

Hard
472

An ISP is designing a new core network using MPLS-TE. They require very fast failure detection for link and node failures to minimize traffic loss. Which two technologies should they combine? (Choose two.)

Medium
473

In BGP, which attribute is used to prevent routing loops when route reflectors are deployed?

Medium
474

Which THREE are common causes of QoS misconfiguration on PE routers? (Choose three.)

Medium
475

In SRv6, which Segment Identifier (SID) format is used to encode a function that performs IPv6 decapsulation and forwarding?

Easy
476

An engineer is troubleshooting an MPLS VPN issue where CE1 cannot ping CE2 across the provider network. The PE routers are configured with MP-BGP and LDP. On PE1, 'show ip bgp vpnv4 vrf CUST' shows the route to CE2's loopback as valid, but 'show mpls forwarding-table' does not list a label for that prefix. What is the most likely cause?

Hard
477

A service provider is implementing EVPN to support multi-homing for a customer site. Which EVPN attribute ensures that only one of the PEs forwards traffic for a given Ethernet segment?

Medium
478

A service provider operates an MPLS-TE network using RSVP-TE with a full mesh of tunnels between core routers. The network uses OSPF as IGP with traffic engineering extensions. Recently, a new headend router PE-New was added and configured with several TE tunnels to remote destinations. However, some tunnels repeatedly go down after a few minutes and show in the 'down' state with the error 'Tunnel path option 0: no path to destination (TEDB lookup failed)'. The TE tunnels that remain up are those to destinations that are directly connected to the same OSPF area. The network has multiple OSPF areas (area 0, 1, 2) with inter-area routes redistributed. The operator suspects the issue is related to the TEDB (Traffic Engineering Database) not having complete information. Which action is MOST likely to resolve the issue?

Easy
479

Drag and drop the steps to configure EIGRP on a Cisco router into the correct order.

Medium
480

An SP is using MQC to configure QoS on a core router. Which TWO statements about MQC are correct? (Select two.)

Medium
481

A network operator is configuring RSVP-TE tunnels for traffic engineering in an MPLS core. They want to enforce that the tunnel path strictly follows a predefined set of hops. Which explicit path option should be used?

Medium
482

An SP is deploying EVPN to provide both L2 and L3 VPN services. Which advantage does EVPN offer over traditional VPLS for multi-homing?

Hard
483

An MPLS-TE tunnel is configured with Fast Reroute using link protection. The primary path traverses links A-B and B-C. If link B-C fails, which action does the head-end router take?

Hard
484

A service provider is deploying a new automation framework using Ansible to configure MPLS VPNs. They need to ensure that the Ansible playbook can handle configuration rollback in case of failure. Which Ansible feature should be used?

Medium
485

An SP is deploying SR-TE policies using a central controller. The controller needs to compute paths based on bandwidth and latency constraints. Which protocol is used between the controller and the routers to signal the SR-TE policies?

Hard
486

In OSPFv3 (for IPv6), which of the following statements is true regarding OSPFv3 packet format and authentication?

Hard
487

Which protocol is used by NSO to communicate with network devices for configuration management?

Easy
488

An SP is deploying BGP security features. Which three mechanisms can be used to prevent BGP route hijacking? (Choose three.)

Hard
489

Drag and drop the steps to configure MPLS LDP on a Cisco router into the correct order.

Medium
490

A service provider is experiencing high CPU usage on a router running BGP. Which action should be taken first to mitigate the issue without disrupting traffic?

Easy
491

A service provider is designing a core network with IS-IS as the IGP. To support MPLS traffic engineering, which IS-IS extensions are required?

Medium
492

Drag and drop the steps for the BGP route selection process (best path selection) in order.

Medium
493

Which TWO statements about EVPN Route Type 2 (MAC/IP advertisement) are correct?

Medium
494

To prevent MPLS label spoofing in a Layer 3 VPN, which configuration should be applied on the PE-CE link?

Medium
495

Which THREE characteristics apply to the BGP-LS (BGP Link State) protocol?

Hard
496

A service provider is deploying MPLS L3VPN to connect multiple customer sites. The PE router receives a route from a CE router via MP-BGP. Which attribute must the PE router add to the route before advertising it to the route reflector?

Medium
497

An engineer is implementing MPLS-TE Fast Reroute for link protection. Which protection method provides a backup tunnel that bypasses a specific link, protecting all LSPs traversing that link?

Medium
498

Which two mechanisms are used for congestion avoidance in a QoS policy? (Choose two.)

Medium
499

Which TWO MPLS VPN features are used to provide Layer 3 VPN services in a service provider network?

Easy
500

In EVPN with Integrated Routing and Bridging (IRB), which type of interface is used to connect the bridge domain to the IP-VRF for inter-subnet forwarding?

Hard
501

Which label distribution mode does LDP use by default in Cisco IOS?

Easy
502

In the context of EVPN, which BGP address family is used to advertise MAC/VPN routes between PE routers?

Hard
503

Refer to the exhibit. The router is configured as a route reflector for VPNv4. What is the requirement for the route reflector to propagate VPNv4 routes received from a client to other clients?

Hard
504

A large SP plans to deploy SR-TE tunnels across the backbone using an SDN controller for path computation. To ensure fast convergence and scalability, which automation approach should be used for tunnel creation?

Hard
505

An SP uses SR-PCE for traffic engineering. Which protocol does the SR-PCE use to communicate path computation requests and responses with path computation clients (PCCs)?

Hard
506

An SP network engineer is designing a new segment routing traffic engineering deployment within a single IGP area. The network consists of 50 core routers running IS-IS and MPLS. The engineer needs to steer traffic from Router A to Router D over a path that avoids high latency links. Which technology should be used to define and instantiate the explicit path?

Easy
507

A network administrator configures a class map to match VoIP traffic using 'match ip dscp ef' on a Cisco router. However, the QoS policy is not applying the expected marking to VoIP packets. What is a possible reason?

Medium
508

Which protocol is used to exchange label binding information in a classic MPLS network without Segment Routing?

Medium
509

Refer to the exhibit. An engineer makes a RESTCONF request to retrieve operational data for all interfaces, but the response shows only one interface. What is the most likely cause?

Hard
510

A service provider router running IOS XR is configured with Control Plane Policing (CoPP) to protect the route processor. Which type of traffic is most commonly rate-limited using CoPP in the control plane?

Easy
511

Which statement about the use of MTU in an MPLS network is correct?

Easy
512

In IOS XR, each routing protocol runs as a separate process. What is the primary benefit of this architecture?

Medium
513

In MPLS networks, the EXP bits are used for QoS. How are the 3-bit EXP values typically derived from DSCP markings at the ingress PE router?

Medium
514

A service provider is implementing control plane protection (CoPP) on an IOS XR router. Which protocol should be classified and rate-limited to prevent excessive control plane load due to routing updates?

Medium
515

Which THREE are valid SRv6 endpoint behaviors for VPN services? (Choose three.)

Hard
516

In BGP route selection, if two routes have the same weight, local preference, and are both locally originated, which attribute is considered next?

Medium
517

An ISP is implementing BGP PIC (Prefix Independent Convergence) for edge routers. Which BGP feature must be enabled to support PIC for core-facing failures?

Hard
518

A service provider is designing a BGP-based network. Which TWO are characteristics of BGP within a service provider core?

Medium
519

What is the default range of the Segment Routing Global Block (SRGB) on Cisco IOS XR?

Easy
520

An engineer is configuring an MPLS L3VPN and needs to ensure that the PE router installs VPNv4 routes from a remote PE into the VRF of a customer. The remote PE sends a VPNv4 route with route-target 100:1. Which configuration on the local PE causes the route to be imported into the VRF?

Hard
521

A large service provider is migrating its L2VPN services (VPWS and VPLS) to EVPN-based solutions to improve scalability and support multi-homing. During the rollout for a customer using VLAN-based EVPN for a data center interconnect, the operations team notices frequent MAC address flapping and broadcast storms on one of the attachment circuits connected to a PE router. The PE is configured for EVPN-MPLS with ESI multihoming using all-active mode. The customer has two PEs (PE1 and PE2) connected to the same CE via two separate Ethernet links. The MAC table on PE1 shows the same MAC address alternating between the local AC interface and the remote EVPN peers. What is the most likely cause and the correct action to resolve this issue?

Hard
522

A network engineer is troubleshooting slow BGP convergence after a link failure in an MPLS core. Which feature can be enabled on the PE routers to fast-failover traffic upon BGP next-hop unreachability?

Medium
523

An SP is deploying IS-IS fast convergence using Partial Route Computation (PRC). Under which condition does PRC occur?

Hard
524

In MPLS, which forwarding table is used to determine the outgoing label and interface for a labeled packet?

Easy
525

In the context of SR-PCE, which protocol does the PCE use to communicate with the path computation client (PCC) to set up SR-TE policies?

Medium
526

A service provider is configuring BGP route reflectors to scale iBGP. Which two mechanisms are used to prevent routing loops in a route reflector environment? (Choose two.)

Medium
527

In MPLS, which label operation is performed by a Penultimate Hop Popping (PHP) router?

Medium
528

Which BGP attribute is used to prefer a specific entry point into an AS when multiple ASBRs are advertising the same prefix to a neighboring AS?

Medium
529

Which encapsulation technology is commonly used in service provider networks to separate subscriber traffic in an Ethernet aggregation network?

Easy
530

A network engineer is using Cisco NSO to create a managed L3VPN service. After deploying the service, the engineer notices that the configuration on the devices is not being updated. What is the most likely cause?

Easy
531

In SP automation, which protocol is used by NSO to communicate with network devices for configuration management?

Medium
532

To secure NTP in a service provider network, which feature should be enabled on IOS XR routers to prevent time synchronization with unauthorized NTP servers?

Easy
533

A service provider is designing an OSPF network with multiple areas. Which TWO area types allow external routes (Type 5 LSAs) to be injected into the area? (Choose two.)

Medium
534

Which two statements about MPLS label distribution are correct? (Choose two)

Medium
535

An SP uses NSO with a YANG service model to provision L3VPNs. Which database in NSO stores the configuration and state for all managed devices?

Hard
536

Which label distribution protocol is replaced by segment routing in SR-MPLS deployments?

Easy
537

A service provider is designing a QoS policy for a business VPN service that carries voice, video, and data. The policy must ensure that voice (EF) is never dropped even during congestion, while video (AF41) and data (AF21) share the remaining bandwidth in a ratio 2:1. Which queuing strategy should be used?

Medium
538

An SP engineer is designing a QoS policy for a customer with three traffic classes: voice (priority), premium data (bandwidth guarantee), and best effort. The total bandwidth is 10 Mbps, with voice limited to 1 Mbps, premium data to 4 Mbps, and best effort to the remaining. Which policy-map configuration correctly uses LLQ and CBWFQ?

Hard
539

Which TWO statements about MPLS label operations are correct? (Choose two.)

Medium
540

In the MQC (Modular QoS CLI) framework, which component is used to match traffic based on DSCP values?

Easy
541

Which THREE steps are required when configuring MPLS L3VPN on a PE router? (Choose three.)

Medium
542

Which architecture feature of IOS XR ensures that a failure in one routing protocol process does not affect other processes on the same router?

Medium
543

An engineer is designing an MPLS L3VPN for a customer with multiple sites. The customer requires overlapping IP addresses between sites. Which method allows the provider to support overlapping customer addresses?

Medium
544

An engineer is configuring SR-MPLS in an IS-IS network. Which IS-IS TLV is used to advertise the Segment Routing Global Block (SRGB) and Node-SID assignments?

Medium
545

Which THREE YANG data nodes are part of the Cisco-IOS-XR-qos-ma-cfg module for defining a QoS policy-map? (Choose three.)

Hard
546

When implementing RPKI for BGP origin validation, which three states can a route be marked as? (Choose three.)

Hard
547

In SR-MPLS, which mechanism replaces LDP for label distribution?

Easy
548

Which THREE of the following are key characteristics of Cisco IOS XR operating system?

Hard
549

A service provider is automating QoS policy deployment using Cisco NSO and YANG. During validation, the engineer discovers that the pushed policy is not taking effect. Which three possible causes should be investigated? (Choose three.)

Hard
550

An SP is deploying BGP FlowSpec (RFC 8955) to distribute traffic filtering rules. Which component is responsible for disseminating FlowSpec rules to routers in the network?

Medium
551

In Cisco IOS XR architecture, using Secure Domain Routers (SDRs) allows partitioning a physical router into multiple logical routers. Which statement about admin plane and SDRs is correct?

Hard
552

A service provider wants to ensure that customer traffic is not impacted during a planned maintenance on a core LSR in an MPLS network. Which MPLS feature should be used?

Easy
553

A network engineer needs to automate configuration of multiple Cisco routers and wants to use a protocol that supports both datastore operations and selective retrieval of configuration. Which protocol should be used?

Easy
554

Which two are requirements for deploying Segment Routing in a service provider network? (Choose two.)

Medium
555

Which Cisco router platform is designed for the aggregation layer and runs IOS XR, supporting both L2 and L3 services at high density?

Easy
556

In MPLS-TE, what is the purpose of the Explicit Route Object (ERO) in the RSVP PATH message?

Easy
557

An engineer is troubleshooting BGP convergence. The router has multiple paths for a prefix, but it selects a path with a lower local preference over a path with a higher local preference. The higher local preference path is from an EBGP peer. What could cause this?

Hard
558

A network engineer is designing an MPLS core using Segment Routing. They want to minimize label stack depth while still providing fast convergence using TI-LFA. Which prefix-SID assignment strategy should be used?

Easy
559

In a VXLAN EVPN deployment, a host sends a broadcast ARP request. Which component in the fabric is responsible for replying on behalf of the target host to reduce flooding?

Hard
560

Which label operation is performed on a router when an MPLS packet arrives with a top label that matches a local label assigned to a directly connected prefix?

Easy
561

An SP is deploying Inter-AS MPLS VPN option B. Which design characteristic is unique to Option B compared to Option A?

Medium
562

A network engineer is designing a new MPLS core. Which three of the following are recommended best practices for MPLS LDP configuration? (Choose three.)

Easy
563

Which TWO QoS mechanisms are used to provide congestion avoidance? (Choose two.)

Medium
564

In SRv6 micro-SID (uSID) compression, which part of the SID is used to carry a compressed instruction set, enabling efficient forwarding with a shorter SID list?

Hard
565

In a Carrier Supporting Carrier (CSC) architecture, which condition is necessary for the customer carrier's BGP routes to be carried over the provider carrier's MPLS backbone?

Hard
566

In an MPLS L3VPN network, a customer has overlapping IP addresses between two VPNs. The provider edge routers are configured with VRF instances. Which method ensures that traffic from one VPN does not leak into the other when using MPLS labels?

Hard
567

Which BGP extended community is used to signal the OSPF domain ID between PE routers in an MPLS L3VPN when OSPF is the PE-CE protocol?

Medium
568

Refer to the exhibit. An engineer is troubleshooting packet loss in the MPLS core. For prefix 10.3.3.0/24, the outgoing label is 'Untagged'. What does this indicate?

Medium
569

An SP is deploying 6VPE (IPv6 L3VPN). Which BGP extensions are used to carry IPv6 VPN prefixes?

Hard
570

A service provider is deploying EVPN-MPLS for L2VPN services. The customer requires that MAC addresses learned from one PE are not advertised to other PEs unless they are active. Which EVPN route type is used for MAC address withdrawal?

Medium
571

A network operator is deploying Segment Routing with TI-LFA across an OSPF network. After configuring OSPF with 'segment-routing mpls' and 'fast-reroute per-prefix', they notice that backup paths are not being installed for some prefixes. 'Show ip ospf segment-routing protected' shows 'No FRR backup' for those prefixes. What is a possible reason?

Hard
572

A service provider is deploying MPLS L3VPN and wants to ensure that routes from a specific customer VRF are only advertised to a specific remote PE. Which mechanism should be used?

Medium
573

Which BGP attribute is used to influence inbound traffic to an AS by advertising a preferred path to a neighbor AS?

Medium
574

A service provider is migrating from a legacy MPLS network using LDP to Segment Routing (SR-MPLS). They have enabled SR on all routers and are using IS-IS. The migration plan is to keep LDP running alongside SR during the transition. After enabling SR, some traffic is being forwarded using the SR path, but the network operator notices that some CEs in an L2VPN are experiencing packet loss during failover scenarios. Troubleshooting shows that the primary pseudowire is using SR labels, but the backup pseudowire is still using LDP labels. The backup path is not working correctly. What is the most likely cause?

Easy
575

A service provider is experiencing intermittent multicast issues in their core network. They use PIM-SM with a static RP at 10.1.1.1. The multicast traffic originates from a source connected to PE1 and is received by customers connected to PE2. Recently, after a firewall upgrade between the PE routers and the core, some multicast streams stopped working, while others continue. The network team notices that 'show ip mroute' on PE2 shows the (*, G) entry but not the (S, G) entry for the affected groups. The RP is reachable via OSPF. The firewall logs show no dropped packets for known multicast addresses. Which action should the engineer take to restore full multicast forwarding?

Hard
576

A service provider is implementing QoS for voice traffic using the DiffServ model. Which DSCP value should be assigned to voice packets to ensure the highest priority treatment?

Easy
577

A service provider deploys BGP route reflectors in the core. Which mechanism prevents routing loops within the route reflector cluster?

Hard
578

A service provider operates a large MPLS VPN network using OSPF as the IGP and LDP for label distribution. The PE routers (PE1, PE2, PE3) are connected to a core of P routers. Recently, a new link was added between P2 and P3. After the link came up, the engineering team noticed that several VPN routes that were previously reachable via PE2 are now being blackholed when traffic is sent from PE1 to those prefixes. The teams verify that the VPNv4 routes are present in the BGP table on PE1 with valid next-hops, but traffic fails. The traceroute from PE1 to the CE behind PE2 stops at P2. The show mpls forwarding-table on P2 shows the correct label for the VPN prefix, but the outgoing interface is null. Which action should the engineer take to resolve the issue without causing additional disruption?

Hard
579

An SP is designing a QoS policy for a customer VPN that carries voice, video conferencing, and bulk data. The voice traffic requires low latency, video conferencing requires assured bandwidth, and bulk data should use any remaining bandwidth. Which queuing strategy should be applied on the PE-CE link?

Medium
580

A network engineer is automating BGP configuration using the Cisco IOS-XE YANG model. They want to enable the 'always-compare-med' feature under BGP. Which XPath expression correctly targets this leaf?

Hard
581

A service provider wants to provide IPv6 connectivity over an existing MPLS IPv4 core using BGP extensions. Which technology should be used?

Hard
582

An MPLS network is experiencing micro-loops during convergence after a link failure. The network uses LDP and IS-IS as IGP. Which of the following solutions can prevent micro-loops during IGP convergence without requiring additional protocols?

Hard
583

Which OSPF network type elects a Designated Router (DR) and Backup Designated Router (BDR) to reduce the number of adjacencies on a multi-access segment?

Easy
584

A service provider is deploying MPLS L2VPN using Virtual Private Wire Service (VPWS). After configuration, the two CEs cannot ping each other. The PE routers show the xconnect interface is up, but no MAC addresses are learned. What is the most likely cause?

Medium
585

A service provider is troubleshooting an L2VPN where a CE is unable to ping the remote CE. The PE-CE interfaces are up, and the pseudowire status shows 'up'. Which two actions should be taken to further isolate the issue? (Choose two.)

Medium
586

Which TWO are characteristics of Segment Routing (SR-MPLS)? (Choose two.)

Easy
587

A service provider is migrating from LDP to Segment Routing in its MPLS core. The team has enabled IS-IS as the IGP and configured segment routing under the IS-IS process on all core routers. However, after the migration, some LSPs are not being signaled correctly and traffic is blackholing. Which action should be taken to ensure seamless interworking between LDP and SR during the migration?

Medium
588

In Segment Routing, what is the role of the 'Prefix-SID'?

Medium
589

An engineer configures MPLS TE tunnels. After configuration, the tunnel remains down. The 'show mpls traffic-eng tunnels' output shows 'Tunnel is down - path computation failed'. What is the most likely cause?

Hard
590

During a network migration from EIGRP to OSPF, you notice that some routes are being redistributed incorrectly, causing routing loops. The OSPF domain uses area 0 and area 1. The EIGRP domain uses AS 100. Which configuration change would best prevent loops during the migration?

Hard
591

Which BGP address family must be used to exchange VPNv4 routes between PE routers in an MPLS L3VPN?

Medium
592

A service provider is deploying IS-IS with wide metrics to support traffic engineering. Which two statements about IS-IS wide metrics are correct?

Easy
593

Which TWO BGP attributes are considered during the best path selection process and can be used to influence outbound traffic from an AS? (Choose two.)

Medium
594

A service provider is deploying uRPF on customer-facing interfaces to prevent IP spoofing. The network has asymmetric routing due to multiple upstream connections. Which uRPF mode should be used?

Medium
595

A service provider is implementing network slicing for 5G services. Which of the following is NOT a typical characteristic of a network slice?

Hard
596

An SP network experiences congestion on a core link. The QoS policy uses CBWFQ with classes for voice (LLQ), video (bandwidth 30%), and data (bandwidth 50%). During congestion, voice traffic spikes to 25% of the link. What happens to video and data traffic?

Hard
597

A customer reports that CE routers attached to PE1 and PE2 in the same VRF cannot ping each other. Based on the exhibit, what is the most likely cause?

Medium
598

A service provider is designing a Layer 3 MPLS VPN for a customer with two sites. The customer requires fast convergence in case of a PE-CE link failure. Which routing protocol should be used between PE and CE to achieve the fastest convergence?

Easy
599

Which TWO statements about MPLS label operations in a service provider core are correct? (Choose two.)

Hard
600

Which Cisco router platform is designed for high-density 100GE and uses IOS XR, making it suitable for the core/backbone of a service provider network?

Medium
601

A service provider is deploying L3VPN using BGP/MPLS. Which mechanism ensures customer isolation in the provider network?

Medium
602

During a DDoS attack, an SP uses Cisco Peakflow for detection and wants to drop attack traffic at the edge routers. They decide to use S/RTBH. Which action must be performed on the edge routers to trigger the black hole?

Hard
603

When configuring an MPLS-TE tunnel with affinity/constraint-based routing, what is the effect of assigning a link attribute of 'red' and setting the tunnel's affinity to include 'red' with the 'include-all' keyword?

Medium
604

An SP engineers want to restrict management access to their IOS XR routers. Which combination provides the most secure management plane hardening?

Easy
605

Which TWO conditions must be met for a BGP route to be considered valid and used for forwarding?

Medium
606

A service provider uses MP-BGP with IPv6 address family. They notice that routes redistributed from OSPFv3 are not being advertised to iBGP peers. The OSPF routes are internal. What is a likely reason?

Hard
607

An engineer is troubleshooting MPLS forwarding. On a router, the 'show mpls forwarding-table' command displays that for a specific FEC, the outgoing label is 'Untagged'. What does this indicate?

Easy
608

Which THREE are EVPN multi-homing functions? (Choose three.)

Hard
609

An engineer is configuring MPLS LDP on a Cisco router. The router is using downstream unsolicited mode and liberal label retention. Which statement correctly describes the label advertisement behavior?

Medium
610

In IOS XR, which process is responsible for managing the configuration database and commit operations?

Medium
611

Which MEF service type defines a point-to-point Ethernet connection, often used for business connectivity?

Medium
612

An ISP is implementing MAP-T to transition to IPv6. Which of the following best describes MAP-T?

Hard
613

Which IOS XR feature allows an administrator to grant specific commands to a user based on their role, using task groups?

Hard
614

Which RESTCONF HTTP method should be used to replace the entire configuration of a device interface?

Medium
615

An SP is migrating from an MPLS LDP-based network to Segment Routing. They want to ensure that existing LDP LSPs continue to work alongside SR LSPs during the migration. Which mechanism should be configured?

Hard
616

A service provider deploys uRPF on customer-facing interfaces to prevent IP spoofing. They have a multihomed customer with asymmetric routing. Which uRPF mode should be used to avoid dropping legitimate traffic?

Hard
617

A service provider is experiencing suboptimal routing due to BGP route reflection. To improve path selection while maintaining IBGP scalability, which feature should be implemented?

Medium
618

An SP network engineer is hardening management plane access on IOS XR routers. They require authentication, authorization, and accounting (AAA) with per-command authorization and role-based access control. Which combination should be used?

Medium
619

A service provider is implementing L2VPN using EoMPLS. The CE devices are connected to two different PE routers, and the PE routers are configured with xconnect under the attachment circuit. Which command is required on the PE routers to establish the pseudowire?

Easy
620

An engineer is configuring LDP in an MPLS network. Which THREE are valid label distribution modes for LDP?

Hard
621

A service provider is implementing network automation using YANG data models. They need to ensure that the automation solution supports both configuration and operational state data retrieval. Which NETCONF operation should be used to retrieve operational state data?

Medium
622

In NSO, which statement best describes the function of the CDB (Configuration Database)?

Hard
623

Drag and drop the steps to configure a PPPoE client on a Cisco router into the correct order.

Medium
624

In SRv6, which endpoint behavior is used for decapsulating the outer IPv6 header and performing an IPv4 lookup (e.g., for L3VPN)?

Hard
625

In SR-MPLS, which THREE statements correctly describe the properties of Adjacency SIDs? (Choose three.)

Hard
626

A service provider is deploying L3VPN. Which mechanism ensures that customer routes are isolated and not leaked between different customers?

Medium
627

Which THREE statements are true regarding NSO's NED? (Choose three.)

Hard
628

Which Cisco router platform is designed for the core/backbone of a service provider network, supporting high-density 100GE interfaces and massive scale for MPLS and Segment Routing?

Medium
629

Match each network automation tool to its primary use.

Medium
630

A service provider wants to provide IPv6 connectivity over an MPLS IPv4 core using 6PE. Which BGP extension is required on the provider edge routers?

Hard
631

Which THREE statements about implementing QoS in an MPLS VPN environment are correct? (Choose three.)

Hard
632

Refer to the exhibit. Which statement is true regarding the forwarding entry for 10.2.2.0/24?

Hard
633

Refer to the exhibit. Which of the following is true about the BGP table?

Medium
634

What is the purpose of the SEL (NSAP Selector) field in an IS-IS NET address?

Easy
635

In the context of IOS XR commit/rollback configuration model, which command is used to apply a set of configuration changes as a single atomic operation?

Medium
636

In IS-IS, which TLV is used to carry traffic engineering information for MPLS-TE?

Hard
637

A service provider is designing an OSPF network with multiple areas. Which two area types prevent Type 5 LSAs from being flooded? (Choose two.)

Medium
638

In IOS XR, each routing protocol runs as a separate process. What is the primary benefit of this architecture?

Medium
639

In an MPLS L3VPN network, a route reflector (RR) is used to distribute VPNv4 routes between PE routers. After a new PE router (PE4) is added, some VPN routes are not being received by other PEs. Which TWO actions should be investigated to resolve the issue? (Choose two.)

Hard
640

Refer to the exhibit. A PE router has this BGP configuration. The CE router is advertising a default route via eBGP. However, the PE is not installing the route in the VRF table. What is the most likely cause?

Medium
641

Which TWO of the following are characteristics of the IOS XR operating system architecture? (Select two.)

Medium
642

Which TWO are valid benefits of automating QoS policy management in a large SP network? (Choose two.)

Easy
643

Which technology allows an IPv6-only customer edge router to connect to an MPLS provider edge router using IPv4 transport, encapsulating IPv6 packets in MPLS with a labeled IPv4 next-hop?

Easy
644

A large ISP is designing a multicast architecture to support IPTV, requiring high availability and minimal traffic convergence. Which RP placement design is most appropriate?

Hard
645

A service provider is transitioning from LDP-based MPLS to Segment Routing (SR-MPLS). Which TWO statements correctly describe differences or interoperability considerations? (Choose two.)

Medium
646

Drag and drop the steps to configure a VLAN on a Cisco switch into the correct order.

Medium
647

An SP is implementing CGNAT to conserve IPv4 addresses. For legal compliance, they must log all NAT translations with timestamps and source/destination information. Which CGNAT feature should be enabled?

Hard
648

A service provider is implementing EVPN with MPLS data plane. Which encapsulation type is used in MPLS EVPN to carry Ethernet frames across the MPLS network?

Hard
649

An SP is deploying IPv6 using 6VPE. Which THREE components are required? (Choose three.)

Hard
650

An OSPF network is configured with RSVP-TE. Which OSPF extension is used to advertise TE link attributes such as bandwidth and administrative group?

Medium
651

Which NETCONF operation is used to retrieve the entire running configuration from a network device?

Easy
652

A service provider is designing a new MPLS core network using Segment Routing with MPLS data plane. They require traffic engineering capabilities to optimize bandwidth utilization. Which technology should be used to compute optimal paths based on IGP link attributes and bandwidth constraints?

Hard
653

Which TWO of the following are characteristics of MPLS-TE (Traffic Engineering)?

Medium
654

An SP is deploying DDoS mitigation using BGP FlowSpec. Which THREE types of actions can be encoded in a FlowSpec rule? (Choose three.)

Medium
655

An SP engineer is configuring a policy-map to implement hierarchical QoS. Which two statements are correct when using MQC for hierarchical QoS? (Choose two.)

Medium
656

Which TWO statements correctly describe Segment Routing characteristics? (Select two.)

Medium
657

Match each BGP attribute to its category or purpose.

Medium
658

An SP engineer is configuring NTP authentication on IOS XR routers in the management plane. Which TWO statements about NTP authentication are correct? (Choose two.)

Hard
659

An engineer is configuring QoS for voice traffic on a Cisco router. Which marking should be applied to voice packets to ensure proper end-to-end prioritization?

Easy
660

An engineer is troubleshooting a QoS policy on a Cisco router. The policy is intended to mark voice traffic with DSCP EF and video traffic with DSCP AF41. After applying the policy, voice traffic is correctly marked, but video traffic is marked as DSCP 0. What is the most likely cause?

Medium
661

When automating service provisioning with NSO, which three components are part of the NSO architecture? (Choose three.)

Hard
662

Which TWO are functions of the MPLS data plane?

Easy
663

A service provider is deploying a new MPLS core network. The network has four routers: P1, P2, PE1, and PE2. OSPF is used as the IGP. The engineer configures MPLS LDP on all interfaces. After enabling LDP, the engineer notices that the LDP session between P1 and P2 is established, but no labels are exchanged for the loopback0 interfaces of PE1 and PE2. The loopback0 addresses are advertised in OSPF. The engineer verifies that the OSPF routes are present in the routing table of all routers. What is the most likely reason for the missing labels?

Medium
664

An engineer is configuring RSVP-TE fast reroute for link protection. Which protection method uses a pre-configured bypass tunnel that protects multiple LSPs on the same link?

Medium
665

Which THREE are benefits of implementing MPLS-TE in a service provider core?

Medium
666

A service provider needs to offer L3VPN services to multiple customers, each with overlapping IP addresses. The provider plans to use MPLS VPNs with VRFs. Which statement is TRUE regarding the configuration of VRFs on the PE routers?

Easy
667

A service provider is troubleshooting an MPLS L3VPN issue where a CE router is receiving the VPN route from the PE but cannot ping the remote CE's loopback. The PE shows that the VPN label is assigned but cannot route the packets. Which command would help determine if the remote PE is correctly resolving the BGP next-hop via IGP?

Hard
668

A service provider is deploying MPLS-TE with RSVP-TE in their core network. They notice that some LSPs are not being established due to resource contention. Which action would best address this issue without redesigning the entire traffic engineering deployment?

Medium
669

An engineer is deploying Segment Routing in an MPLS network. To ensure that routers can forward packets based on SR-MPLS labels without requiring LDP, which requirement must be met?

Hard
670

Which TWO statements about MPLS label operations are correct? (Choose two.)

Medium
671

A network engineer at a service provider is using Cisco NSO to automate the provisioning of VLANs on thousands of access devices. The engineer creates a service using a custom YANG model and deploys it to a set of devices. However, the deployment fails with a 'failed to reach devices' error for some devices, while others succeed. The engineer checks device connectivity and confirms all devices are reachable via SSH and NETCONF. The engineer also verifies that the NSO device list is accurate and includes all target devices. What is the most likely cause of the failure?

Medium
672

An MPLS core network uses LDP to distribute labels. An engineer wants to verify that the LDP session between two routers is up and exchanging labels. Which command should be used?

Easy
673

A service provider uses BGP route reflectors to scale iBGP. A route reflected from a route reflector arrives at a client with the originator-id set. What is the purpose of the originator-id attribute?

Medium
674

An SP engineer is configuring hierarchical QoS on a PE router. The parent policy shapes the traffic to 10 Mbps, and the child policy applies LLQ for voice and CBWFQ for data. What is the primary purpose of using policing within the LLQ child policy?

Medium
675

A service provider is implementing QoS on an MPLS network to support voice, video, and data traffic. Which queuing mechanism provides the lowest latency for real-time traffic?

Easy
676

A client reports intermittent connectivity issues when accessing a server across a provider MPLS network. The issue occurs only during peak hours. Which component should be checked first?

Easy
677

An SP engineer is configuring hierarchical QoS on a PE router to enforce a per-subscriber bandwidth contract of 10 Mbps and prioritize voice within that contract. Which MQC configuration sequence is correct?

Medium
678

A service provider is implementing BGP security using RPKI. Which three components are required for RPKI-based BGP origin validation? (Choose three.)

Hard
679

An SP customer reports intermittent voice quality issues. The engineer wants to measure jitter and packet loss between two remote sites using Cisco IP SLA. Which IP SLA operation type should be configured?

Easy
680

Match each MPLS VPN technology to its description.

Medium
681

An engineer is troubleshooting MPLS traffic engineering tunnels and needs to verify path calculation and RSVP errors. Which command should be used?

Hard
682

Which THREE are valid methods to provide fast convergence in an MPLS/Segment Routing network? (Select three.)

Hard
683

Which THREE of the following are valid IS-IS TLV types used to support traffic engineering and segment routing? (Choose three.)

Hard
684

An ISP operates an MPLS Layer 3 VPN backbone. A customer, Corporation X, has four sites (A, B, C, D) each connected to a different PE router (PE-A, PE-B, PE-C, PE-D). They use OSPF as the CE-PE routing protocol. Sites A, B, and C can exchange routes without issue. However, Site D suddenly loses connectivity to Site B, though it can still reach Sites A and C. Show commands on PE-D reveal that the VRF for Corporation X imports RT:100:200, and the route for Site B (prefix 10.10.20.0/24) is present in the BGP VPNv4 table with RT:100:200 and next-hop 10.0.2.2. The OSPF neighbor between PE-D and the CE at Site D is up, and no route filters are configured. ‘ping 10.10.20.0’ from PE-D fails. What is the most likely cause of the issue?

Hard
685

Which MPLS VPN technology allows a service provider to offer overlapping IP addresses to different customers while using a single routing table per VPN?

Medium
686

A network engineer is troubleshooting a NETCONF session that fails to establish between a controller and a router. The router supports NETCONF over SSH on port 830. The controller can reach the router but the session fails. What is the most likely cause?

Hard
687

A service provider has recently deployed MPLS L3VPN to provide IP connectivity to multiple enterprise customers. One customer reports that they cannot reach a remote site that is connected to a different PE router. The engineer checks the BGP VPNv4 table on the customer's PE and sees the route for the remote site, but the next-hop is unreachable. The interface between the PE and P routers is up/up, and IGP reachability to the PE's loopback is fine. What is the most likely cause? Consider that the network uses LDP for label distribution and OSPF as the IGP.

Hard
688

A service provider is deploying L3VPN with inter-AS option B (ASBR-to-ASBR). Which TWO statements are true about this design?

Hard
689

Which TWO of the following are services that can be offered using MPLS Layer 3 VPN (L3VPN) technology? (Select two.)

Easy
690

An SP network engineer needs to implement hierarchical QoS on a PE router to shape customer traffic to a contracted rate of 10 Mbps while providing priority for voice traffic and bandwidth guarantee for critical data. Which MQC configuration correctly achieves this?

Hard
691

A service provider is migrating their MPLS core network to Segment Routing (SR-MPLS). All existing core routers run IOS-XR and are configured with an SRGB of 16000-23999 and OSPF as the IGP. A new router (R5) is added as a PE. The engineer configures R5 with the same SRGB and enables segment-routing under OSPF. However, when configuring an SR-TE policy from R5 to the remote loopback 10.0.0.1 on R1, the policy remains down. Show commands reveal that R5 is not learning the prefix-SID for 10.0.0.1. On R1, the prefix-SID is configured with index 100. The engineer verifies that OSPF adjacencies are up and that R5 can ping 10.0.0.1. What is the most likely cause of the issue?

Medium
692

In an MPLS L3VPN, how can a service provider prevent a CE device from learning the MPLS label stack and potentially spoofing labels?

Medium
693

An ISP is designing an MPLS core network and needs to choose an IGP that supports fast convergence. Which IGP meets this requirement and is most commonly used in MPLS core networks?

Easy
694

In an MPLS network using RSVP-TE for traffic engineering, which two mechanisms can be used for fast reroute (FRR) protection? (Choose two.)

Medium
695

Which access technology uses a passive optical splitter to deliver broadband services to multiple subscribers over a single fiber?

Easy
696

An engineer configures the 'set-overload-bit' command on an IS-IS router. What is the immediate effect on the network?

Medium
697

Which TWO of the following are advantages of segment routing over traditional LDP-based MPLS? (Choose two.)

Medium
698

In MPLS forwarding, what label operation does a transit LSR perform on the top label of a labeled packet?

Easy
699

Which MPLS-based service provides point-to-point Ethernet connectivity over a service provider network, emulating a wire?

Easy
700

A service provider wants to prevent IP spoofing at the customer edge by verifying that the source IP address of incoming packets is reachable via the interface they arrive on. Which uRPF mode should be used?

Easy
701

A customer is experiencing intermittent packet loss in an MPLS L3VPN network. The PE routers show no errors on interfaces. Which tool can help isolate the issue by showing the complete path a packet takes through the MPLS network?

Medium
702

A network operator deploys a QoS policy on a route reflector to classify traffic based on BGP community values. However, the policy is not matching the intended traffic. Which is the most likely cause?

Easy
703

An SP network uses NSO for service orchestration. Which component in NSO provides the abstraction layer to communicate with different device types using protocols like NETCONF or CLI?

Medium
704

A service provider is deploying Segment Routing Traffic Engineering (SR-TE) with a Path Computation Element (PCE). The PCE fails to compute a path for an SR-TE policy configured with constraint 'avoid nodes in affinity red'. The core network has red affinity assigned to several nodes. Which is the most likely cause?

Hard
705

A service provider has a network with multiple PE routers providing MPLS L3VPN services. Customers are complaining that some remote sites are unreachable after a recent software upgrade on PE1. Upon investigation, you notice that PE1 is receiving BGP VPNv4 routes from the route reflector, but some routes are not being installed in the VRF routing table. PE1 is configured with BGP additional-path capability and has a route policy that selects only the best path. The VRF on PE1 has import and export route targets configured correctly. The missing routes have a higher local preference but are not selected due to a tie-break in BGP path selection. Which action should be taken to ensure that all valid routes are installed in the VRF?

Hard
706

A service provider is deploying OSPFv3 for IPv6 in its core. The network uses multiple areas. Which LSA type is used by OSPFv3 to advertise prefix information for inter-area routes?

Medium
707

An SP has configured MPLS TE tunnels for traffic engineering. To verify the status of the TE tunnels, which command provides the most relevant information?

Easy
708

A service provider is deploying a BNG for subscriber management. Which protocol is typically used to authenticate subscribers and assign IP addresses in a PPPoE-based broadband network?

Easy
709

A service provider is deploying a point-to-point Layer 2 VPN across an MPLS network using Ethernet over MPLS (EoMPLS) with Martini encapsulation. The customer requires transparent transport of VLAN tags (Q-in-Q) between two sites. The provider configures the attachment circuits on the PE routers as VLAN subinterfaces with dot1q encapsulation. After configuration, the customer reports that only untagged frames pass through the pseudowire; double-tagged frames are dropped at the egress PE. Which action resolves the issue?

Easy
710

A service provider uses BGP FlowSpec (RFC 8955) to mitigate DDoS attacks. Which component in the network is responsible for originating the FlowSpec rules and distributing them to routers?

Hard
711

A service provider wants to gracefully shut down a BGP session to a customer for maintenance without causing traffic loss. Which BGP feature should be used to signal the peer to reroute traffic before the session is brought down?

Hard
712

Which QoS mechanism marks packets at the edge of the network to classify traffic into different service classes?

Easy
713

A service provider is migrating from OSPF to IS-IS in the core network. They need to support Traffic Engineering and Segment Routing. Which IS-IS TLV must be supported to carry TE information?

Medium
714

Which TWO are key features of IOS XR architecture? (Choose two.)

Medium
715

In Segment Routing over IPv6 (SRv6), what is the function of the SRH (Segment Routing Header)?

Hard
716

Which Cisco platform is designed for the core/backbone of large service provider networks and offers high scalability with IOS XR?

Hard
717

In IOS XR architecture, what is the purpose of Secure Domain Router (SDR)?

Easy
718

Refer to the exhibit. Which statement is correct about the LDP bindings for prefix 10.0.0.0/24?

Hard
719

An engineer notices that MPLS VPN traffic is taking a suboptimal path because the MPLS label binding for the BGP next-hop loopback is missing. What is the most likely cause?

Easy
720

Which MEF service type provides a multipoint-to-multipoint Ethernet virtual connection?

Easy
721

What is the primary function of the aggregation layer in a service provider network?

Easy
722

An SP is designing a MPLS L3VPN service with BGP as the PE-CE routing protocol. They want to ensure that the CE router does not become a transit router between two sites. Which BGP feature should be configured on the PE to prevent the CE from advertising routes received from one site to another?

Hard
723

Based on the exhibit, which statement is true about the applied QoS policy?

Medium
724

In an SP network using NSO for service orchestration, which component abstracts device-specific CLI or SNMP interactions into a common model for NETCONF/RESTCONF southbound communication?

Hard
725

An SP is managing a large MPLS network and needs to verify the MPLS forwarding entries for a specific VRF. Which command provides the most complete information for the VRF?

Easy
726

In SR-MPLS, when a router receives a packet with an MPLS label corresponding to an Adjacency SID, what operation does it perform?

Medium
727

In EVPN multi-homing with all-active mode, which mechanism is used to elect a designated forwarder (DF) for broadcast, unknown unicast, and multicast (BUM) traffic on a given Ethernet segment?

Medium
728

Drag and drop the steps to configure a GRE tunnel on a Cisco router into the correct order.

Medium
729

Which component of the IOS XR architecture is responsible for managing the system configuration and providing a separation of control plane for multiple tenants?

Easy
730

Based on the exhibit, which prefix is NOT reachable via MPLS forwarding?

Medium
731

A network engineer needs to perform maintenance on a BGP router without causing traffic loss. They plan to use BGP Graceful Shutdown (GSHUT). What does GSHUT do?

Easy
732

A network engineer is designing a Segment Routing over IPv6 (SRv6) deployment. Which TWO statements are true about the SRv6 SID format and behaviors? (Choose two.)

Medium
733

In OSPFv3, which statement correctly describes how OSPFv3 differs from OSPFv2 regarding router IDs and adjacencies?

Medium
734

Which TWO are essential components for deploying EVPN in a service provider network?

Hard
735

A service provider is implementing security for BGP peering. Which two methods help prevent BGP route hijacking? (Choose two.)

Medium
736

In the DiffServ model, which DSCP value is used for Voice over IP (VoIP) traffic to ensure Expedited Forwarding (EF) per-hop behavior?

Easy
737

During a DDoS attack, an SP wants to drop traffic destined to the victim IP at the network edge without affecting other traffic. Which technique should be used to achieve this by propagating a black-hole route from a trigger router to all edge routers?

Medium
738

Which MPLS-based service provides point-to-point Ethernet connectivity over a service provider network, also known as a pseudowire?

Easy
739

A network architect is designing a model-driven telemetry solution for a large SP network. Which three factors are critical to consider when configuring telemetry subscriptions? (Choose three.)

Hard
740

In BGP route selection, when comparing two routes with the same LOCAL_PREF, which attribute is considered next?

Medium
741

A service provider's network core runs IS-IS as the IGP. After adding a new router, some routers have incomplete LSP databases. The new router's interfaces are up, and IS-IS adjacency is up with neighbors. What is the cause? The network has a mix of interface MTUs, with some links having MTU 1500 and others 4470.

Easy
742

Which TWO are possible causes for a NETCONF session failing to establish with a Cisco IOS-XE device?

Hard
743

An SP is using NETCONF with YANG to automate VRF provisioning. The engineer notices that the NETCONF session is established but configuration changes are not applied. Which issue is most likely?

Hard
744

Which LDP label distribution mode is characterized by a router advertising labels for all prefixes in its routing table to all neighbors, regardless of whether they are needed?

Medium
745

A service provider is configuring VRF-lite between two CE routers connected to the same PE. The CE routers are in different VRFs. Which command allows the PE router to forward traffic between the VRFs?

Easy
746

During an MPLS network migration from LDP to Segment Routing, an engineer notices that some routers are not advertising Prefix-SIDs for certain loopbacks. The IGP is OSPF. What configuration is required on these routers to advertise Prefix-SIDs?

Medium
747

A service provider wants to provide a point-to-point Ethernet service between two customer sites with strict Service Level Agreements (SLAs). Which MEF service type should be used?

Medium
748

Which TWO of the following are characteristics of MPLS L3VPN architecture? (Choose two.)

Medium
749

An engineer is configuring QoS on a service provider edge router to prioritize real-time traffic. Which queuing mechanism provides the lowest latency and jitter for voice traffic?

Easy
750

Which two actions are performed by an MPLS label edge router (LER) when it receives an unlabeled IP packet destined for a prefix with an LSP? (Choose two.)

Medium
751

Which IS-IS metric type supports values up to 2^24-1 and is used for traffic engineering?

Easy
752

A service provider is troubleshooting BGP route selection for prefixes received from two different peers. The first peer prepends its AS path twice, making it longer than the second peer's path. However, the router still prefers the route with the longer AS path. Which additional attribute could cause this behavior?

Medium
753

An engineer wants to secure NTP on IOS XR routers. Which configuration is required to prevent unauthorized time synchronization?

Easy
754

Which SRv6 SID behavior is used to support EVPN-IRB (Integrated Routing and Bridging) for L2VPN with bridging?

Hard
755

A service provider is experiencing congestion on a core link connecting two P routers. The customer traffic is classified into three classes: voice (low latency), video (low loss), and data (best effort). The current configuration uses DSCP-based classification at the PE ingress, but many customers are remarking DSCP values to gain better service, bypassing the provider's QoS policy. The provider wants to enforce a strict trust boundary at the PE and re-mark all traffic according to a per-customer contract. Additionally, the provider must offer per-customer bandwidth guarantees, ensuring that one customer's traffic does not starve another customer's traffic on the congested core link. The solution must be scalable to hundreds of customers. What should the designer recommend?

Hard
756

Drag and drop the steps to configure a static route on a Cisco IOS router into the correct order.

Medium
757

A service provider is deploying MPLS Layer 3 VPN and needs to ensure that BGP next-hop resolution works correctly for VPNv4 prefixes learned from a route reflector. The PE routers are directly connected to the RR via iBGP, and there is an IGP running within the MPLS core. Which condition must be met for the PE to install the VPNv4 prefix into its routing table?

Medium
758

A service provider wants to automate service provisioning using NSO. Which protocol is typically used by NSO to configure network devices?

Medium
759

Which feature is used to validate that a BGP route origin is authorized by the prefix owner?

Easy
760

Which TWO are benefits of using EVPN over traditional VPLS for L2VPN services? (Choose two.)

Medium
761

In IS-IS, which type of router is responsible for exchanging routing information between different areas?

Easy
762

In SR-PCE architecture, which protocol is used for communication between the Path Computation Element (PCE) and the Path Computation Client (PCC) to request and report SR-TE paths?

Hard
763

A service provider is deploying BGP PIC (Prefix Independent Convergence) for edge routers. What is the primary benefit of BGP PIC?

Hard
764

Which BGP attribute is used to influence inbound traffic to a multi-homed AS by indicating the preferred entry point?

Easy
765

A service provider wants to protect its core routers from CPU exhaustion caused by excessive ICMP traffic. Which control plane protection mechanism on IOS XR would be most appropriate to rate-limit ICMP packets destined to the router?

Medium
766

A service provider wants to protect its core routers from control plane attacks. Which two mechanisms are effective in mitigating such attacks on IOS XR? (Choose two.)

Medium
767

A customer reports intermittent packet loss on a MPLS L3VPN connection. The PE router shows 'show mpls forwarding' entries for the CE prefix, but ping from the PE to the CE fails intermittently. Which action should be taken to isolate the issue?

Medium
768

In SRv6, what is the function of the 'End.DT4' behavior?

Hard
769

In an IS-IS network, a service provider wants to achieve fast convergence using Partial Route Computation (PRC). Which of the following events triggers a PRC instead of a full SPF?

Hard
770

Which THREE are MEF-defined Ethernet service types? (Choose three.)

Hard
771

Which RSVP message is used to tear down an MPLS-TE LSP by being sent from the ingress toward the egress?

Medium
772

A service provider wants to prevent IP spoofing attacks from customer edge devices connected to a PE router. The customer prefixes are known and asymmetric routing is not present. Which uRPF mode should be configured on the PE-CE interface?

Medium
773

An engineer configures an SRv6 SID with the behavior End.DT6. What is the primary function of this SID?

Medium
774

A network engineer is troubleshooting OSPFv3 on a service provider's IPv6 network. The router shows that OSPFv3 adjacency never reaches FULL, says 'Init'. The neighbor is directly connected over a point-to-point link. What is the most likely cause?

Hard
775

A service provider is migrating its MPLS core from LDP to Segment Routing with MPLS data plane (SR-MPLS). The network currently uses TE tunnels with RSVP-TE for traffic engineering. Which technology can the provider use to continue performing traffic engineering after the migration without requiring RSVP-TE?

Medium
776

Which TWO commands are most effective to verify that an SR-TE policy is active and forwarding traffic? (Choose two.)

Hard
777

Which MQC component is used to match traffic based on criteria such as DSCP or IP precedence?

Easy
778

An SP network uses NTP for synchronization. To secure NTP, which authentication mode should be used?

Easy
779

A service provider has implemented model-driven telemetry to monitor the health of its core network. The telemetry collector is a single server running a custom application that receives and processes gRPC streams from 200 routers. The collector is experiencing high CPU usage and is falling behind in processing data, causing some telemetry data to be dropped. The engineer decides to offload processing to multiple collectors. The routers support dial-out mode and can be configured with a list of collector IPs. The engineer wants to distribute the load evenly across collectors without manual configuration per router. Which should the engineer implement?

Medium
780

Refer to the exhibit. A service provider is receiving BGP prefixes from a customer (AS 64512). The provider wants to tag all routes from that customer that match prefix 10.1.0.0/16 or more specific with community 65000:100, while not modifying other routes. After applying the configuration, which statement is true?

Hard
781

A service provider needs to prioritize voice traffic over best-effort data in an MPLS VPN. The PE router uses a QoS policy applied to the ingress interface. Which action ensures that voice packets are marked with the correct DSCP value before entering the MPLS core?

Medium
782

In an MPLS VPN environment, which address family is used to exchange VPNv4 routes between PE routers?

Easy
783

A service provider is deploying MPLS in their core network and wants to ensure that all routers in the MPLS domain can dynamically exchange label bindings. Which protocol should be enabled on all routers to meet this requirement?

Easy
784

Which BGP attribute is used to indicate the preference of a route within an AS and is propagated to iBGP peers but not to eBGP peers by default?

Easy
785

Which three BGP attributes are considered during the route selection process before comparing AS_PATH length? (Choose three.)

Medium
786

Segment Routing with TI-LFA (Topology Independent Loop-Free Alternate) provides fast convergence. Which statement accurately describes TI-LFA?

Medium
787

An SP uses NSO to orchestrate MPLS L3VPN services. The service model is written in YANG, and the NED communicates with the PE routers. Which protocol does NSO use to push configuration to the network devices?

Medium
788

When implementing MPLS TE tunnels in a service provider core, what is the purpose of the 'affinity' attribute?

Medium
789

A network engineer notices that voice traffic is being dropped during congestion. The traffic is marked with DSCP EF. After reviewing the QoS policy, it is discovered that the voice traffic is not being placed into a priority queue. Which configuration change would ensure voice traffic receives priority treatment?

Easy
790

What is the function of the admin plane in IOS XR architecture?

Medium
791

A service provider is implementing MAP-T (Mapping of Address and Port using Translation) to transition customers from IPv4 to IPv6. Which two characteristics of MAP-T are true? (Choose two.)

Medium
792

An engineer is configuring BGP route reflectors to scale iBGP. Which TWO attributes are used to prevent routing loops in a route reflector cluster? (Choose two.)

Medium
793

In the DiffServ model, which field is used in the IP header to mark packets for QoS treatment?

Easy
794

An SP network uses OSPF with RSVP-TE for traffic engineering. Which OSPF extension is required to advertise TE link parameters such as maximum reservable bandwidth?

Medium
795

A network engineer is troubleshooting an LDP session failure between two directly connected routers. The routers are configured with the 'mpls ldp' command under the interface. The 'show mpls ldp neighbor' command shows no neighbors. Which two additional pieces of information should the engineer verify? (Choose two.)

Hard
796

An engineer is troubleshooting a BGP route reflector setup. Clients are not receiving all routes. The 'show bgp neighbors' output shows a state of 'Active'. What is the most likely cause?

Hard
797

A service provider is using Segment Routing with TI-LFA for fast convergence. During a link failure, the router performing the local repair must compute a backup path that avoids the failed link. Which type of Adjacency Segment Identifier (Adj-SID) is required for the backup path to be loop-free?

Medium
798

In the Modular QoS CLI (MQC), which component is used to define traffic classes based on match criteria?

Easy
799

A service provider is troubleshooting BGP route selection between two eBGP peers. The router receives a prefix from Peer A with local preference 150 and AS path length 3. From Peer B, the same prefix has local preference 100 and AS path length 2. Which route will be preferred?

Medium
800

A service provider is designing a network to support mobile backhaul for eMBB, uRLLC, and mMTC services. Which technology allows the physical network to be divided into virtual networks with dedicated resources for each service type?

Hard
801

A service provider uses OSPFv3 for IPv6 routing in the core. Which statement correctly describes OSPFv3 adjacency formation on a broadcast multiaccess network?

Hard
802

A service provider is implementing MPLS L3VPN and needs to ensure that BGP route advertisement uses a specific next-hop. Which technique ensures BGP advertises the PE-CE next-hop instead of the PE-PE loopback?

Easy
803

Refer to the exhibit. A telemetry subscription is configured on an IOS-XR router. The collector at 10.1.1.100 is not receiving data. Which configuration error is present?

Medium
804

Which THREE are benefits of using EVPN over traditional VPLS? (Choose three.)

Hard
805

A junior automation engineer is writing a Python script to configure OSPF on a Cisco IOS-XE router using RESTCONF. The script sends a PUT request to update the OSPF configuration but receives a 401 Unauthorized response. The engineer has configured a local user with privilege 15 on the router and enabled restconf. The engineer verified that the router's RESTCONF API is running on port 443. What is the most likely missing element in the script?

Easy
806

An SP engineer implements LLQ for VoIP traffic on a DS3 link. The policy-map calls for a priority queue of 500 kbps. The actual VoIP traffic averages 400 kbps with bursts to 600 kbps. What is the expected behavior during bursts?

Easy
807

An SP engineer is designing a QoS policy for a business customer with three traffic classes: Voice (critical latency), Transactional Data (low delay), and Bulk Data (no strict requirements). The link is 100 Mbps. Which TWO actions should be part of the policy? (Select two.)

Medium
808

In IS-IS, which metric type supports traffic engineering (TE) and is required for segment routing?

Medium
809

A service provider wants to use BGP Prefix Independent Convergence (PIC) for faster failover. Which BGP feature must be enabled to support PIC?

Hard
810

A service provider is building a new network slicing architecture to offer differentiated services to enterprise customers. The architecture uses SRv6 with network slices identified by slice IDs embedded in the SRv6 SID. The underlay is an IP network with ISIS. Each slice will have dedicated resources in the core, including guaranteed bandwidth and low latency. The plan is to use the SRv6 network programming concept to steer traffic into different slices. The provider wants to ensure that slice isolation is maintained end-to-end, including at the egress PE where traffic is handed off to the customer. However, during testing, they observe that traffic from one slice is incorrectly entering another slice's queue on an intermediate node, causing performance interference. The intermediate node is a transit router that does not terminate SRv6 but performs 'SID-based forwarding'. Which mechanism is most likely missing to ensure slice isolation on transit nodes?

Hard
811

In RSVP-TE, which message is sent by the headend router along the explicit route to reserve resources and establish an LSP?

Medium
812

A network engineer is configuring QoS on a Cisco ASR 9000 router to support multiple traffic classes. The policy must ensure that real-time traffic (EF) is not starved by high-volume bulk data (AF11). Which queuing strategy should be applied to the EF class to provide low latency and strict priority?

Easy
813

An SP is implementing DDoS mitigation using BGP FlowSpec. Which three types of actions can be specified in a FlowSpec rule? (Choose three.)

Medium
814

A network engineer is configuring MPLS LDP on a new router. After enabling LDP globally and on the interface, the LDP session does not establish. The IGP (OSPF) is fully operational. What should the engineer verify first?

Easy
815

A service provider has deployed segment routing with OSPF as the IGP in its core network. The network consists of 100 routers in a single area. The operations team reports that after a link failure between Router X and Router Y, traffic from Router A to Router B is taking a suboptimal path even though IGP convergence is complete and all routers have updated their LSDB. Router A and Router B are both segment routing capable. The team verifies that no SR-TE policies are configured and that all routers are using the default SPF algorithm. The expected shortest path from A to B should go through the newly restored link, but instead it still traverses an alternate path. Which action should resolve the issue?

Easy
816

Match each QoS mechanism to its primary function.

Medium
817

A network engineer needs to design a multicast solution for IPTV distribution across a service provider network. Which protocol is best suited for building a shared distribution tree where the RP is dynamically elected?

Hard
818

In EVPN multihoming with all-active mode, what is the purpose of the aliasing capability?

Hard
819

An engineer is using RESTCONF to configure an interface on a Cisco IOS-XE device. The request returns a 400 Bad Request error. What is the most likely cause?

Medium
820

Which two of the following are characteristics of MPLS Traffic Engineering that differentiate it from pure MPLS forwarding?

Medium
821

A service provider is migrating from LDP to Segment Routing in an IS-IS network. After enabling IS-IS with segment-routing on all routers, they observe that some prefixes still receive labels from LDP instead of from SR. Which configuration is most likely missing on these routers?

Hard
822

A service provider is deploying MPLS L3VPN over an OSPF backbone. The PE routers are configured with OSPF as the IGP. The CE router of customer A is connected to two PEs for redundancy. Which configuration is required on the PE routers to ensure that the CE router can load-balance traffic across both PEs without loops?

Medium
823

Which TWO of the following are characteristics of MPLS LDP?

Medium
824

In IS-IS, what is the purpose of the Partial Route Computation (PRC)?

Easy
825

In an EVPN-VPWS (Virtual Private Wire Service) deployment, which identifier is used to uniquely identify an Ethernet Segment for multi-homing?

Medium
826

A service provider is designing a QoS policy for a multi-service MPLS VPN network that carries voice, video, and data traffic. The network uses DiffServ and MPLS EXP markings. The design must ensure that voice traffic is given priority over video and data, while video traffic should have better treatment than data but not at the expense of voice. The provider plans to use a hierarchical QoS (HQoS) policy at the PE-CE interfaces. Which configuration approach best meets these requirements?

Hard
827

A service provider wants to use Segment Routing TE with Flex-Algo to engineer traffic around links with low bandwidth. Which configuration approach should be taken?

Hard
828

Which IS-IS router type maintains a full Layer 2 routing table of all areas and can act as a gateway between areas?

Easy
829

What is the purpose of the SRGB (Segment Routing Global Block) in SR-MPLS?

Easy
830

An SP uses NSO with a YANG service model to provision an L3VPN. The service model references a leafref to a VPN ID that must exist in a separate list. Which YANG statement ensures the leafref value is valid against the referenced list?

Hard
831

A service provider is implementing MPLS in their core network. They want to ensure that labeled packets for BGP prefixes are forwarded correctly without requiring an IGP label for every BGP prefix. Which technique should be used to achieve this?

Medium
832

A network engineer is configuring Segment Routing on an IOS-XR router. They want to use the preferred algorithm for automatically computing paths based on IGP metrics. Which algorithm should be configured under the SR segment list?

Easy
833

A service provider is migrating from LDP to Segment Routing (SR) in the core. They need to support MPLS forwarding without maintaining LDP sessions. Which SR data plane is appropriate?

Hard
834

In IOS XR, what is the commit/rollback configuration model?

Medium
835

An engineer notices that an MPLS LSP in the core is not establishing. Which troubleshooting step should be performed first?

Medium
836

A service provider is using Cisco Peakflow for DDoS detection. Peakflow identifies anomalies based on network traffic telemetry. Which data collection method does Peakflow primarily use?

Medium
837

When automating configuration changes across a large network using a tool like Cisco NSO, what is the best practice to minimize the risk of negative impact?

Hard
838

In IS-IS, what is the purpose of the NET (Network Entity Title) address field SEL (Selector) byte?

Easy
839

Which THREE are characteristics of EVPN? (Choose three.)

Medium
840

Drag and drop the steps to configure OSPF on a Cisco IOS router into the correct order.

Medium
841

A metro Ethernet provider needs to scale customer VLANs beyond the 4,096 limit by encapsulating customer VLAN tags with an outer service provider tag. Which IEEE standard is used?

Hard
842

In Segment Routing over MPLS (SR-MPLS), how are Prefix-SIDs advertised in IS-IS?

Medium
843

Drag and drop the steps to configure a standard ACL on a Cisco router into the correct order.

Medium
844

Which QoS mechanism is most effective for preventing congestion on a service provider edge link when traffic exceeds the link capacity?

Easy
845

An SP engineer is troubleshooting IS-IS routing. The network uses wide metrics, and some links have been configured with TE metrics. Which statement correctly describes the relationship between TE metrics and narrow metrics in IS-IS?

Medium
846

In the DiffServ model, which DSCP value is used for Expedited Forwarding (EF) to support voice traffic?

Easy
847

A service provider is troubleshooting BGP route advertisement for a VPNv4 prefix. The PE router receives the prefix from the route reflector but does not install it in the VRF routing table. The BGP table shows the prefix as valid but not best. What is the most likely cause?

Hard
848

Which two MPLS OAM tools can be used to troubleshoot label switching paths? (Choose two)

Easy
849

A network operator is migrating from traditional MPLS LDP to Segment Routing (SR) with IS-IS. The network consists of four routers (R1-R4) in a square topology. The engineer has enabled SR on all routers and configured prefix-SIDs for loopbacks. However, when checking the MPLS forwarding table on R1, the engineer sees that some prefixes have label values that are not the prefix-SIDs. For example, the prefix for R4's loopback shows label 16004 instead of the expected 16004 (which is correct). But for another prefix, the label is 16003 instead of 16003 (correct). The engineer does not see any labels for some external routes. What is the most likely reason that some labels are missing?

Easy
850

Match each multicast protocol to its role.

Medium
851

In BGP, an SP router receives multiple routes to the same prefix. The first route has a weight of 100, LOCAL_PREF of 200, AS_PATH length 3, and is learned via eBGP. The second route has weight 50, LOCAL_PREF 150, AS_PATH length 2, and is learned via iBGP. According to BGP route selection, which route will be preferred?

Hard
852

Refer to the exhibit. This JSON policy is used for Segment Routing Traffic Engineering. What is the purpose of the 'color' attribute?

Easy
853

A service provider plans to deploy automation using Cisco NSO. Which two benefits does NSO provide for service lifecycle management? (Choose two.)

Medium
854

Which TWO protocols are supported by a BNG (Broadband Network Gateway) for subscriber session establishment? (Choose two)

Easy
855

A service provider is automating the provisioning of MPLS L3VPNs across multiple devices using NETCONF. During a deployment, the automation script fails with an error indicating that the device does not support the required YANG model. Which action should the engineer take to verify device capabilities?

Medium
856

Which BGP community is used to prevent a route from being advertised to any eBGP peers?

Easy
857

An SP detects a volumetric DDoS attack targeting a customer network. The SP uses Cisco's S/RTBH technique to drop attack traffic. Which action is performed by the edge routers upon receiving a BGP route with a specific community?

Hard
858

Which TWO types of SIDs are defined in Segment Routing? (Select two.)

Easy
859

An SP engineer is designing an OSPF network with several remote sites that should not receive external routes but need to reach external destinations via a default route. Which OSPF area type best meets this requirement while also preventing Type 5 LSAs from entering?

Medium
860

Refer to the exhibit. The VRF CUSTOMER is configured with route-target import 100:1. Why is this route not installed in the VRF table?

Easy
861

A service provider is deploying Segment Routing Traffic Engineering (SR-TE) to optimize traffic flows. Which mechanism is used to steer traffic into an SR-TE policy?

Hard
862

A network operator is implementing segment routing (SR-MPLS) using OSPF as the IGP. Which OSPF TLV is used to advertise the Node SID (Prefix SID) for a router's loopback address?

Hard
863

What is the purpose of NTP authentication in a service provider network?

Easy
864

A customer is experiencing packet loss during congestion on a link. The service provider wants to implement a QoS policy that drops less important traffic before more important traffic. Which queuing mechanism is best suited?

Medium
865

A customer is using a Cisco ASR 9000 router with hierarchical QoS (HQoS) on a subscriber interface. The parent policy sets a shape rate of 10 Mbps, but the observed traffic rate is only 8 Mbps. What is a common misconfiguration that would cause this?

Medium
866

In EVPN multi-homing, which two mechanisms are used to avoid duplicate packets and ensure efficient forwarding? (Choose two.)

Medium
867

An SP uses OSPF with Traffic Engineering extensions to support RSVP-TE. Which LSA type is used to carry TE information in OSPF?

Medium
868

A service provider is designing a new MPLS L3VPN service. The customer requires that their VPN traffic be isolated from other customers and that the provider edge routers maintain separate routing tables for each VPN. Which architectural component is essential for this separation?

Medium
869

During a multicast deployment, some receivers are not receiving the stream. The PIM neighbor table shows the upstream interface is correct. Which command would verify whether the multicast routing table has the correct outgoing interface list?

Medium
870

An SP engineer is designing an OSPF network and wants to reduce the number of LSAs in a stub area. Which TWO area types would block Type 5 LSAs but allow Type 3 LSAs? (Choose two.)

Medium
871

An engineer is implementing Unicast Reverse Path Forwarding (uRPF) on a provider edge (PE) router to mitigate IP spoofing. The customer-facing interface has a single static default route. Which uRPF mode should be used to provide anti-spoofing without causing false drops?

Hard
872

A service provider is deploying uRPF on peering edges with multiple upstream providers and asymmetric routing. Which two statements are true about uRPF operation in this scenario? (Choose two.)

Medium
873

Refer to the exhibit. A network automation engineer uses NETCONF to retrieve the QoS policy 'POLICE-CUSTOMER'. Based on the response, what is the effect of this policy?

Hard
874

An SP is planning to offer L3VPN services. Which TWO components are essential for BGP/MPLS IP VPN operation?

Medium
875

In an SR network, which configuration is required to activate TI-LFA for link protection?

Hard
876

In a Layer 3 MPLS VPN, a customer site that is part of VRF RED is unable to communicate with another site that is also in VRF RED. The 'show ip bgp vpnv4 vrf RED' command shows the routes, but the router does not install them in the routing table. Which configuration element is most likely missing?

Easy
877

In BGP route reflection, what is the purpose of the ORIGINATOR_ID attribute?

Medium
878

Refer to the exhibit. The router has three LDP neighbors established. A network administrator notices that MPLS labels for the prefix 10.4.4.0/24 are not being advertised from this router to its neighbors, although the prefix is present in the routing table. Which is the most likely cause?

Medium
879

Which label is used for an Adjacency SID in SR-MPLS?

Easy
880

An SP uses Cisco NSO for automation. Which protocol does NSO typically use to push configuration changes to network devices?

Hard
881

In an MPLS VPN, what label operation does the egress PE perform on the VPN packet before forwarding it to the CE?

Easy
882

Which MEF service type is used for multipoint-to-multipoint Ethernet connectivity, such as a corporate LAN extension across multiple sites?

Easy
883

A service provider has deployed a new MPLS L3VPN service for a customer with multiple sites. The customer reports intermittent voice quality issues during peak hours. The provider uses a DiffServ QoS model with MPLS EXP markings. The PE routers apply the following policy on the customer-facing interfaces: policy-map CUSTOMER-OUT class VOICE priority percent 10 set mpls experimental topmost 5 class VIDEO bandwidth remaining percent 30 set mpls experimental topmost 4 class DATA bandwidth remaining percent 70 set mpls experimental topmost 0 The core network has a simple policy that maps EXP 5 to PQ, EXP 4 to a low-latency queue, and EXP 0 to best effort. The provider monitors the network and finds that the PE-CE interfaces are not congested (average utilization is 40%), but the voice packets are experiencing jitter. The customer's voice traffic is about 5% of the link capacity. Which action is most likely to reduce the jitter?

Easy
884

In SR-TE PCE, which protocol does the PCE use to communicate with the PCC (Path Computation Client) to set up LSPs?

Hard
885

An operator notices that a new MPLS-TE tunnel is not being established. The tunnel configuration includes a dynamic path option and a bandwidth of 100 Mbps. The network uses RSVP-TE with CSPF. The link-state database shows sufficient reservable bandwidth on all links along the calculated path. What is the most likely cause of the tunnel establishment failure?

Hard
886

Which TWO are benefits of model-driven telemetry over SNMP polling?

Easy
887

A network operator uses gRPC Network Management Interface (gNMI) to collect telemetry data from routers. They notice that some updates are missing. Which gNMI mode should be used to ensure that all state changes are captured?

Hard
888

In a Layer 3 MPLS VPN, a CE router is dual-homed to two different PE routers. The PE routers advertise the same prefix to the route reflector with different route targets. What ensures that only the best path is installed in the VRF?

Medium
889

Which three statements accurately describe the benefits of Segment Routing over RSVP-TE for traffic engineering? (Choose three.)

Hard
890

Which THREE BGP path attributes are considered during the best path selection process after local preference? (Choose three.)

Hard
891

Which THREE components are required for model-driven telemetry with gRPC? (Choose three.)

Medium
892

In the context of network slicing for 5G, which type of slice is optimized for massive IoT with low data rates and high connection density?

Medium
893

Which MPLS TE mechanism provides link protection by pre-establishing a backup LSP that bypasses a specific link, activated when the link fails?

Medium
894

An SP wants to filter BGP prefixes received from a customer to prevent hijacking. Which two tools can be used together on the provider edge router to implement inbound prefix filtering?

Medium
895

A service provider is implementing IPv6 transition in its core. Which transition mechanism is recommended for carrying IPv6 over an existing MPLS/IPv4 backbone without dual-stacking all routers?

Hard
896

A service provider implements CGNAT to conserve IPv4 addresses. Which feature is required to ensure that application-level protocols such as SIP or FTP function correctly?

Medium
897

A BNG (Broadband Network Gateway) is used for subscriber management. Which protocol is typically used between the BNG and the subscriber's modem (CPE) for authentication and IP address assignment in a PPPoE environment?

Easy
898

Based on the exhibit, which statement about label allocation for prefix 10.1.1.0/24 is true?

Medium
899

An SP uses DPI to classify traffic. What is the primary purpose of DPI in a service provider network?

Easy
900

Which DSCP value is recommended for Expedited Forwarding (EF) per-hop behavior, commonly used for voice traffic?

Easy
901

In BGP confederation, how does the AS_PATH attribute handle the confederation sub-AS numbers to prevent loops?

Medium
902

In a Segment Routing network with TI-LFA enabled, which mechanism prevents micro-loops during a link failure?

Hard
903

During MPLS LDP operation, a router receives a label mapping for a prefix from its neighbor. What is the correct behavior when the receiving router has a route to that prefix?

Easy
904

Which protocol is used to discover MPLS peers for LDP session establishment?

Easy
905

An SP is designing a core network using Cisco CRS routers running IOS XR. They require process separation to ensure that a failure in the BGP process does not affect OSPF operations. Which IOS XR architectural feature provides this capability?

Hard
906

An engineer is configuring MPLS on a Cisco router. Which label operation is performed on the ingress LSR when a packet enters the MPLS domain?

Easy
907

Which access technology uses orthogonal frequency-division multiplexing (OFDM) and is commonly deployed for high-speed internet over copper telephone lines?

Medium
908

Which multicast RP model is recommended for large-scale networks to provide redundancy and load sharing?

Easy
909

An MPLS Traffic Engineering LSP fails to establish. The RSVP signaling shows 'PathErr: Admission Control Failure'. The link has sufficient bandwidth but the headend reports a lack of resources. What is the most likely cause?

Medium
910

A service provider offers IPTV services using multicast. The network uses Multicast VPN (MVPN) with Rosen GRE encapsulation (Profile 1) in an MPLS L3VPN environment. The Provider Edge (PE) routers participate in both the default MDT and data MDT for high-bandwidth streams. Recently, a new channel was added, and it uses a data MDT. The content server is attached to a PE that is acting as a multicast source. Other PEs are receivers. Upon adding the channel, some receivers report missing packets. The network engineer checks the PEs and notices that the data MDT group address is being advertised via BGP as an MDT SAFI route, but some PEs are not joining the data MDT. The source PE's multicast routing table shows that it believes data MDT is active. Which architecture issue is most likely preventing some PEs from joining the data MDT?

Hard
911

A service provider wants to offer a service where a customer site can communicate with multiple other sites in a full mesh over MPLS. Which L2VPN technology is most appropriate?

Medium
912

Which THREE are valid reasons for using the 'ipv6 unicast-routing' command on a Cisco router?

Easy
913

An ISP wants to create separate virtual networks over a shared physical infrastructure to serve mobile broadband (eMBB), IoT (mMTC), and mission-critical services (uRLLC). Which technology enables this segmentation with per-slice resource guarantees?

Hard
914

Refer to the exhibit. The router has an outgoing label of 'Pop' for prefix ***********. What does this imply?

Medium
915

A service provider wants to prioritize voice traffic over data traffic on a PE-CE link. Which QoS mechanism should be applied at the PE ingress to classify packets?

Easy
916

Which routing protocol is used between CE and PE routers in a typical MPLS L3VPN deployment?

Easy
917

A small service provider is deploying MPLS in its core network for the first time. They have a simple topology: three P routers in the core and two PE routers connecting customers. They have configured LDP on all interfaces and OSPF as the IGP. They also configured a basic L3VPN for a customer with a single CE attached to each PE. The customer reports that they can ping between CEs for a few minutes, but then the connectivity drops. After a few seconds, it returns. This pattern repeats every few minutes. The engineer checks the LDP neighbors and sees that all LDP sessions are up. The OSPF adjacencies are stable. The engineer also notices that the pings time out exactly when the LDP graceful restart timer is expiring on one of the P routers. What is the most likely cause?

Easy
918

A service provider is deploying multicast service for IPTV using PIM-SM with a single RP. During high traffic periods, the RP becomes overloaded. What is the most scalable solution to distribute the load across multiple RPs?

Hard
919

You are a network engineer at a service provider. Your network uses MPLS L3VPN with OSPF as the IGP and LDP for label distribution. A customer has two sites connected to different PEs (PE1 and PE2) in the same VPN. The customer's CE routers are running eBGP with the PEs. Recently, the customer reports that traffic between the two sites is intermittently dropping. Upon investigation, you find that the BGP session between PE1 and the CE at site A goes down briefly every few minutes. The logs on PE1 show BGP notifications with error code 'Hold Timer Expired'. The CE router at site A is a low-end device with limited CPU. What is the most likely cause and the best course of action?

Medium
920

Which TWO statements about QoS policy propagation via BGP (QPPB) are correct?

Medium
921

An ISP is implementing BGP communities to influence routing behavior for their customers. They want to ensure that a customer's routes are not advertised to a specific transit provider. Which BGP community should be used?

Medium
922

A network administrator needs to automate the deployment of a new QoS policy on dozens of provider edge routers. Which Cisco tool is best suited for this purpose?

Easy
923

Which RSVP reservation style is most commonly used in MPLS-TE to allow sharing of resources among multiple LSPs of the same session?

Medium
924

Which access technology uses wavelength division multiplexing to provide symmetric gigabit speeds in fiber-optic networks?

Easy
925

A service provider is deploying a QoS policy for a customer with voice, mission-critical data, and best-effort traffic. The voice requires strict priority and low latency. Which queuing mechanism should be used to ensure voice packets are always served before other queues, and what additional measure is necessary to prevent voice traffic from starving other traffic?

Medium
926

What is the purpose of Constrained Shortest Path First (CSPF) in MPLS-TE?

Medium
927

A service provider is migrating from LDP to Segment Routing. What is the correct order of operations to ensure uninterrupted MPLS forwarding?

Medium
928

Which three of the following are valid methods for protecting a pseudowire in an MPLS network?

Hard
929

An SP is deploying SR-PCE for centralized traffic engineering. Which THREE functions does the PCE perform? (Select three.)

Hard
930

A network engineer is troubleshooting a BGP convergence issue in a large service provider network. After a link failure in the core, BGP sessions between route reflectors take a long time to reconverge. The RRs are receiving updates from many clients. Which technology can be implemented to improve convergence time? The network currently uses standard BGP with default timers.

Medium
931

A large enterprise uses MPLS L3VPN to connect multiple sites. They want to implement inter-AS option B (ASBR-to-ASBR MP-eBGP) for scalability. Which statement about this model is correct?

Medium
932

During a DDoS attack, a service provider uses Cisco Peakflow to detect anomalous traffic and then triggers S/RTBH. What must be configured on the router to black hole attack traffic using a /32 null route?

Hard
933

Refer to the exhibit. A network engineer notices that the local label 19 for prefix 10.4.4.0/24 shows 'Untagged' in the outgoing label column. What is the most likely cause?

Medium
934

An engineer is troubleshooting an MPLS L3VPN where customers behind CE1 cannot reach a specific prefix behind CE2. The PE routers are using OSPF as the IGP and LDP for label distribution. On PE2, the prefix is present in the VRF routing table, but not in the VRF forwarding table. What is the most likely cause?

Medium
935

An engineer is troubleshooting a BGP route propagation issue. The customer is receiving a default route from upstream provider, but the route is not being installed in the routing table. The BGP table shows the route is valid but not best. What is the most likely cause?

Medium
936

An SP is designing a metro Ethernet network using Q-in-Q. A customer uses VLAN ID 100 on their network, and the SP assigns service VLAN 200. Which frame format is used on the SP network?

Hard
937

In OSPF TE extensions for RSVP-TE, which LSA type is used to carry TE information (such as link attributes) in OSPF?

Hard
938

A service provider is troubleshooting an MPLS L3VPN scenario where a customer in VRF Blue cannot reach a server in VRF Blue at a remote site. The PEs are running MPLS with LDP. The VRF on both PEs shows the remote prefix. The PE at the local site shows the label from the remote PE for the prefix in the BGP table. However, when pinging from the CE, the packets are dropped. A packet capture on the core shows MPLS packets with the correct VPN label, but the transport label is missing. Further investigation shows that the LDP session between the two PEs is up, but the LDP label binding for the remote PE's loopback is not present. What is the most likely cause and correct action?

Medium
939

A network engineer is implementing QoS on a Cisco ASR 1000 for a customer with multiple service classes. The customer requires that mission-critical data not be starved when voice traffic bursts. Which two actions should the engineer take? (Choose two.)

Medium
940

In a hierarchical QoS policy, the parent policy shapes to 20 Mbps. The child policy has a class for voice with priority and police rate 2 Mbps, and a class for data with bandwidth 10 Mbps. What is the maximum bandwidth voice traffic can consume under congestion?

Hard
941

In an OSPF network, an engineer wants to minimize the size of the routing table in a non-backbone area while still allowing the area to learn external routes from other ASs. Which OSPF area type should be configured?

Medium
942

An SP is deploying EVPN with VXLAN encapsulation in a data center interconnect. The design requires that the control plane for MAC/VTEP learning is based on BGP. Which BGP address family must be configured?

Hard
943

A network engineer is troubleshooting an OSPF adjacency failure between two directly connected routers, R1 and R2. Both routers are configured with the same OSPF process ID and area. The engineer verifies that the interfaces are up and IP connectivity exists. Which configuration mismatch is most likely causing the adjacency to fail?

Easy
944

A service provider is deploying a new metro Ethernet network and needs to support multiple customer VLANs over a single physical link without overlapping VLAN IDs. Which technology should be used at the access layer to achieve this?

Medium
945

In a hierarchical QoS policy applied to a subscriber aggregation interface, the parent policy shapes to 100 Mbps and the child policy allocates 50% bandwidth to voice and 50% to data. If voice traffic exceeds 50 Mbps, what happens to the excess?

Hard
946

Which access technology is commonly used in service provider networks to deliver high-speed internet over existing telephone lines?

Easy
947

Which RSVP-TE filter style is commonly used for MPLS-TE tunnels to allow multiple senders on the same session?

Medium
948

In MPLS-TE Fast Reroute (FRR), what is a 'detour'?

Easy
949

An SP uses model-driven telemetry to monitor queue depths on core interfaces. They observe periodic spikes in the queue depth for EF traffic, causing increased latency. Which automation technique could dynamically adjust the QoS policy to mitigate the spikes?

Medium
950

In an OSPF network, an area is configured as a Not-So-Stubby Area (NSSA). Which statement about LSA types in this area is correct?

Hard
951

An SP is troubleshooting an MPLS L2VPN VPLS network where MAC flapping is occurring between two PEs. Which mechanism in VPLS prevents loops and ensures that a broadcast frame from one PE is not reflected back to the originating PE?

Hard
952

Refer to the exhibit. An engineer configures MPLS LDP on a router. The router has two interfaces with IP addresses 10.0.0.1/30 and 10.0.0.5/30. The engineer notices that LDP sessions are not established. The OSPF neighbor adjacencies are up. What is the most likely cause?

Hard
953

Which YANG data modeling construct is used to restrict a leaf value to be a reference to another leaf in the data tree?

Medium
954

An engineer is configuring MPLS VPN and needs to ensure that customer traffic is automatically marked with a specific QoS policy based on the VPN. Which method should be used to propagate QoS markings across the MPLS network?

Easy
955

In EVPN-VPWS, which identifier is used to uniquely identify an Ethernet Segment for multi-homing?

Medium
956

When DSCP markings are mapped to MPLS EXP bits at the ingress PE router, how many EXP values are available for traffic differentiation in the MPLS core?

Easy
957

Which TWO are characteristics of Segment Routing?

Easy
958

An SP engineer notices that BGP routes from a CE are not being installed in the VRF routing table, although the BGP session is established. The VRF configuration includes route-target import 100:1. The CE is sending routes with RT 100:1. What is the most likely cause?

Medium
959

Based on the exhibit, what is the purpose of the 'mpls ldp neighbor ... password cisco' commands?

Hard
960

A large service provider operates an MPLS L3VPN network with multiple Route Reflectors (RRs) in the core. The network uses BGP as the control plane for both IPv4 unicast and VPNv4 routes. Recently, one of the RRs started flapping, causing route withdrawals to many clients. The network architect wants to improve stability. The RRs are fully meshed with each other and clients are configured as route-reflector clients. The RRs have both IPv4 and VPNv4 address families enabled. Which action should be taken to minimize the impact of an RR failure?

Easy
961

During a maintenance window, an automation script pushed a QoS policy that inadvertently changed the marking for all inbound traffic on a core interface. The change was rolled back, but performance reports show that some traffic is still being marked incorrectly. What is the most logical explanation?

Hard
962

A service provider uses a centralized automation system to manage QoS policies via NETCONF and YANG. When attempting to push a new policy-map, the device returns an error indicating that the policy-map type is not supported in the specified location. What is the most likely cause?

Medium
963

Which THREE of the following L3VPN services require the use of a dedicated control plane per VPN instance?

Hard
964

In SRv6, which SID behavior is used to achieve L3VPN IPv6 VPN forwarding, where the SID points to a VPN instance and performs decapsulation and IPv6 lookup?

Hard
965

Refer to the exhibit. Based on the exhibit, what is the most likely reason for no label bindings?

Medium
966

An SP uses Cisco ASR 9000 routers with IOS XR. Which statement correctly describes the commit/rollback configuration model in IOS XR?

Hard
967

An ISP is implementing 6PE to provide IPv6 connectivity over an MPLS network that only supports IPv4 in the core. In 6PE, how are IPv6 prefixes carried across the MPLS backbone?

Hard
968

An SP engineer is implementing DSCP classification at the edge. Which two AF classes are typically used for mission-critical data? (Choose two.)

Medium
969

Which OSPF area type is most suitable for a service provider's customer-facing network where external routes are blocked, but internal routes (including inter-area) are allowed, and the area should not accept Type 5 LSAs?

Hard
970

An engineer is hardening the management plane of an IOS XR router. Which combination is the most secure for remote administration?

Medium
971

In EVPN-VPWS, which component is used to identify a multi-homed Ethernet segment and enable load balancing and fast convergence?

Medium

Frequently asked questions

What does the troubleshooting domain cover on the 350-501 exam?
troubleshooting questions test whether you can apply the concept in context, not just recognise a definition.
How many questions are in this domain?
This page lists all 971 troubleshooting questions in the 350-501 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only troubleshooting questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.