350-501 · domain
troubleshooting
Practise Cisco SPCOR / CCNP Service Provider Core 350-501 troubleshooting practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.
Focused practice
Practice troubleshooting questions
Scored sessions drawing only from this domain — pick a length below.
Start 20-question practice test →What this domain covers
What to know about troubleshooting
troubleshooting questions test whether you can apply the concept in context, not just recognise a definition.
How the topic appears in realistic exam-style scenarios.
Which detail in the question changes the correct answer.
How to eliminate plausible but wrong options.
How to connect the question back to the wider exam objective.
Watch out for
Common troubleshooting exam traps
- ▸Answering from memory before reading the full scenario.
- ▸Missing a constraint such as cost, availability, security, scope or command context.
- ▸Choosing a broad answer when the question asks for the most specific fix.
- ▸Ignoring why the wrong options are tempting.
Question index
All troubleshooting questions (971)
Click any question to see the full explanation, or start a practice session above.
A service provider wants to provide Internet access to an MPLS L3VPN customer without leaking the Internet route into the VRF. Which feature allows the PE to forward traffic from the VRF to the global routing table?
Easy2A service provider is deploying Segment Routing (SR) with TI-LFA for fast convergence. Which mechanism does TI-LFA use to repair a link failure in a node segment path?
Hard3What is the primary function of the NED (Network Element Driver) in NSO?
Easy4A network engineer is troubleshooting QoS on a Cisco ASR 1000 router. The router has a service-policy applied on the ingress interface GigabitEthernet0/0/0. The policy uses a class-map to match traffic based on NBAR protocol discovery for 'cisco-jabber'. The goal is to mark the traffic with DSCP AF41. However, when the engineer checks the policy statistics, the class 'jabber' shows zero matches, even though the users are actively using Cisco Jabber. The NBAR protocol discovery is enabled globally and on the interface. The engineer verifies that the NBAR protocol pack is up-to-date. What is the most likely reason for the class-map not matching?
Medium5A network engineer is troubleshooting MPLS LSP connectivity. The MPLS LDP session is up on both endpoints, but some MPLS labels are missing in the LFIB. Which configuration change would most likely resolve the issue?
Hard6A service provider is planning to offer L2VPN services using MPLS. Which TWO statements are true regarding Ethernet over MPLS (EoMPLS) and Virtual Private LAN Service (VPLS)?
Easy7Which TWO of the following are characteristics of Segment Routing (SR-MPLS) compared to traditional LDP-based MPLS? (Select two.)
Medium8Which LISP feature allows a device to register its location to a mapping system so that another device can find it?
Easy9Refer to the exhibit. A service provider is applying this QoS policy on a PE-CE interface. The business customer complains that voice traffic (marked with DSCP EF) experiences drops during congestion. What is the likely cause?
Hard10A service provider is implementing hierarchical QoS on an edge router. The goal is to shape the aggregate traffic to 100 Mbps and then apply different queuing policies for voice and data within that shaped pipe. Which configuration approach is correct?
Medium11An engineer is configuring MPLS LDP on a Cisco router. Which TWO statements about LDP operation are correct? (Choose two.)
Easy12A service provider is preparing for maintenance on a BGP-speaking router. To minimize packet loss, they want to signal to neighbors that the session is being shut down gracefully. Which BGP feature should be used?
Medium13A service provider is migrating from LDP-based MPLS to Segment Routing (SR-MPLS) with IS-IS. After enabling SR on all routers, the adjacency segment IDs (ADJ-SIDs) are not being advertised. Which configuration is missing?
Hard14Which MPLS EXP bits value is typically mapped from DSCP EF at the ingress PE to maintain voice QoS in an MPLS network?
Medium15A service provider is implementing MPLS-TE with FRR (Fast Reroute) using one-to-one backup tunnels. After activation, they notice that the number of labels in the forwarding table has increased significantly. What is the most likely reason for this increase?
Hard16A service provider wants to prevent BGP hijacking of its customer prefixes. The SP implements RPKI with BGP Origin Validation. When a route is received with an origin AS that does not match any ROA, what is the validation state?
Medium17Which DSCP value is recommended for Expedited Forwarding (EF) per-hop behavior, commonly used for voice traffic?
Easy18Which TWO features are used to improve BGP convergence in an MPLS VPN environment?
Medium19Which THREE of the following are benefits of using Segment Routing over LDP in an MPLS network? (Choose three.)
Hard20In SRv6, which endpoint behavior is used for decapsulation and forwarding to a Layer 3 VPN IPv4 destination, removing the outer IPv6 header?
Hard21An SP network engineer is reviewing a QoS configuration on a PE router. The policy-map uses a class for voice with the 'priority' command, and a class for video with 'bandwidth remaining percent 30'. What is the purpose of the 'bandwidth remaining percent' command?
Medium22Refer to the exhibit. A PE router is showing a VRF route. What does the [200/0] indicate?
Medium23Drag and drop the steps to configure a Layer 3 interface on a Cisco switch (SVI) into the correct order.
Medium24Based on the exhibit, what is preventing the BGP session from establishing?
Medium25Based on the exhibit, which statement is true about the QoS policy?
Medium26Refer to the exhibit. An engineer applies two service policies to the same subinterface in the outbound direction. Which statement describes the expected behavior?
Medium27An engineer is configuring EVPN IRB (Integrated Routing and Bridging) to provide IP connectivity between tenants across a service provider network. Which THREE components are essential for EVPN IRB operation? (Choose three.)
Medium28Which IS-IS TLV is used to carry IPv6 reachability information?
Easy29In an OSPF network, an engineer wants to reduce the size of the routing table and prevent external routes from being advertised into an area. Which area type should be configured?
Easy30In an SP MPLS core, a PE router maps incoming DSCP values to MPLS EXP bits. Which statement about EXP marking is accurate when using the DiffServ Tunneling Model?
Hard31An engineer is configuring BGP prefix filtering on a provider edge router to prevent BGP hijacking. They want to allow only customer prefixes that are registered in the RIR database. What is the most effective method to automate this filtering?
Hard32A service provider wants to offer Layer 2 VPN services using MPLS. Which technology should be used to transport Ethernet frames across the MPLS core?
Easy33A service provider is deploying multicast over MPLS L3VPN. Which mechanism is used to provide multicast in the core between PE routers?
Hard34A service provider is redesigning its MPLS core to support both L3VPN and L2VPN services. They want to minimize the number of labels in the forwarding table while maintaining per-VRF label allocation. Which label allocation mode should be used for the L3VPN service?
Medium35Which tool can verify connectivity along an MPLS Label Switched Path (LSP) and detect label loops?
Easy36In SR-MPLS traffic engineering, which three components are essential for configuring an SR Policy on a headend router? (Choose three.)
Hard37A service provider wants to protect its routers from CPU overload caused by excessive traffic to the control plane. Which mechanism should be configured on IOS XR routers to classify and rate-limit management traffic?
Easy38In an MPLS network, a PE router receives a VPNv4 route from a route reflector. The route is not being installed in the VRF table. Which condition could cause this?
Medium39Refer to the exhibit. The router cannot form a full OSPF adjacency with 10.0.0.2. Which is the most likely cause?
Medium40An SP is designing a QoS policy for a customer with voice, video, and data traffic. Which queuing mechanism provides a strict priority queue for voice while ensuring other queues do not starve?
Medium41Which OSPF neighbor state indicates that a router has received a hello packet from a neighbor but the neighbor's Router ID is not yet seen in its own hello packet?
Easy42When using NETCONF to edit a running configuration on a Cisco IOS XR router, which sequence of operations is correct?
Medium43A service provider wants to deploy DDoS mitigation using BGP FlowSpec. Which two actions can FlowSpec rules specify? (Choose two.)
Medium44Which THREE of the following are characteristics of Segment Routing (SR-MPLS) compared to traditional MPLS with LDP?
Hard45A company is connecting two sites using MPLS L3VPN. The PE routers are running both LDP and Segment Routing (SR-MPLS) in the core. The CE router at Site A cannot reach the CE at Site B. On the PEs, the VRF routes are present. Which command would you use to verify the MPLS forwarding path for the VPN traffic?
Medium46In CSPF (Constrained Shortest Path First) for MPLS-TE, which of the following is NOT a typical constraint considered during path computation?
Hard47An engineer configures model-driven telemetry on a Cisco XR router to send data to a collector. After configuring, the collector receives no data. The engineer verifies that the collector IP and port are reachable. What is the next step to troubleshoot?
Medium48An SP uses NSO for automation. Which TWO protocols can NSO use as southbound interfaces to communicate with network devices? (Choose two.)
Medium49A network engineer is configuring an MPLS L3VPN on a PE router. The VRF is configured with route-target import/export. The PE and CE are running eBGP. The CE advertises routes to the PE, and the PE installs them in the VRF routing table. However, the remote PE does not receive these routes via BGP VPNv4. The local PE's BGP table shows the VPNv4 prefixes with the correct next hop and label. The remote PE's BGP table shows no such prefixes. The IGP between the PEs is working, and MPLS LSPs are up. What is the most likely cause and correct action?
Medium50In BGP, what is the purpose of the ORIGINATOR_ID attribute in a route reflector environment?
Medium51A network engineer is troubleshooting a BGP route selection issue on a router that receives the same prefix from two different peers. Which THREE BGP attributes are considered in the route selection process before the 'prefer the route with the lowest metric' step?
Medium52An MPLS L3VPN service provider wants to prevent label spoofing attacks where a customer could inject MPLS labels to bypass ACLs. Which configuration practice should be implemented on PE-CE links?
Hard53An SRv6 SID is composed of three parts: Locator, Function, and Arguments. Which part identifies the SRv6-capable node in the network?
Medium54A service provider has a network with PE1, P1, P2, and PE2 connected in a chain: PE1-P1-P2-PE2. The IGP is IS-IS with wide metrics, and MPLS LDP is enabled on all interfaces. The goal is to provide L3VPN services between PE1 and PE2. The engineer has configured MP-iBGP between PE1 and PE2, and the VPNv4 routes are exchanged. However, when a CE router behind PE1 tries to reach the CE behind PE2, the traffic fails. The engineer checks the MPLS forwarding table on PE1 and sees that the label for the BGP next-hop (PE2's loopback) is 'Untagged'. The BGP next-hop is reachable via ICMP. What is the most likely cause of this issue?
Hard55Which TWO statements accurately describe the differences between GPON and XGS-PON? (Choose two.)
Medium56Which MEF service type provides a point-to-point Ethernet connection between two user-network interfaces (UNIs)?
Medium57Which two are benefits of using EVPN-VPWS over traditional VPWS? (Choose two.)
Hard58Refer to the exhibit. A network engineer applies this policy on the PE-CE link. What is the expected behavior for VoIP traffic matching the access list?
Hard59Which IS-IS TLV is used to carry Traffic Engineering (TE) information such as link bandwidth and TE metric in modern SP networks?
Easy60Which technology provides Layer 2 multipoint connectivity over an MPLS network, where customer sites appear to be on the same Ethernet broadcast domain?
Medium61An engineer is configuring IS-IS fast convergence. Which mechanism provides sub-second failure detection independently of the routing protocol?
Medium62A service provider is deploying an MPLS L3VPN solution for a customer with two sites. The PE routers are running OSPF as the IGP and LDP for label distribution. The provider wants to ensure that customer traffic is load-balanced across two equal-cost paths between the PEs. The network team notices that all traffic is taking only one path despite the IGP showing equal-cost routes. The team has verified that the MPLS forwarding table on the P router shows only one label entry for the BGP next-hop. The team suspects a load-balancing issue. Which action best resolves the problem?
Hard63Refer to the exhibit. A network engineer is troubleshooting MPLS forwarding for prefix 10.10.10.0/24. The router shows two entries. What does the 'Pop tag' in the outgoing tag indicate?
Medium64An SP is deploying MPLS in the core/backbone to support L3VPN services. What is the purpose of MP-BGP in an MPLS VPN architecture?
Medium65Which TWO statements about MPLS label switching are correct? (Choose two.)
Medium66A service provider is deploying BGP PIC (Prefix Independent Convergence) to improve convergence after a link failure. Which mechanism does BGP PIC leverage to achieve fast failover?
Hard67An ISP is deploying BGP confederations to reduce iBGP mesh requirements. Which of the following statements about BGP confederations are true? (Choose two.)
Hard68Which tool is used to validate YANG data models against device capabilities and to generate Python bindings for automation scripts?
Easy69A service provider wants to use NETCONF to manage devices. Which two statements are true about NETCONF operations? (Choose two.)
Medium70A service provider is migrating from LDP to SR-MPLS. Which mechanism allows a router to allocate labels for prefixes using both LDP and SR simultaneously during the migration?
Hard71In an MPLS network using LDP, which statement correctly describes the label distribution behavior for a given FEC?
Medium72An SP is implementing Carrier-Grade NAT (CGNAT) to conserve IPv4 addresses. Which feature must be enabled to support applications that embed IP addresses in the payload, such as SIP or FTP?
Easy73In SR-MPLS TE, a headend router is configured with an SR Policy that includes an explicit candidate path with segment list [16001, 16003]. What do these numbers represent?
Medium74A provider is implementing EVPN for data center interconnect. They require multi-homing with all-active load balancing and fast convergence using BGP. Which EVPN feature enables this?
Medium75A service provider is implementing 6PE to carry IPv6 traffic over an existing MPLS IPv4 core. Which BGP extension is required on the provider edge (PE) routers to exchange IPv6 prefixes with an IPv4 next-hop?
Medium76An engineer is deploying MPLS in the core and wants to ensure that all core routers use the same label for a specific prefix, regardless of which router originated it. Which MPLS label allocation mode should be used?
Easy77In BGP route selection, which attribute is considered before LOCAL_PREF?
Medium78A customer requires MPLS Layer 2 VPN connectivity between two sites using Pseudowire. Which control protocol is used to signal the pseudowire label?
Medium79An engineer is configuring management plane hardening on an IOS XR router. The requirement is to authenticate users against a central server and provide granular command authorization. Which protocol and feature should be used?
Medium80An SP deploys EVPN to provide L2VPN services with multi-homing. The customer CE is dual-homed to two different PE routers. Which EVPN mechanism ensures that only one PE forwards traffic to the CE for a given Ethernet segment, preventing loops?
Hard81A service provider recently deployed MPLS L3VPN for a customer with four sites (Site1, Site2, Site3, Site4) connected to PE1, PE2, PE3, and PE4 respectively. All sites are in VRF CUST-A with route targets 100:1 import and 100:1 export on all PEs. The customer reports that Site4 cannot ping the loopback interface (10.1.1.1/32) of Site1, but Site2 and Site3 can reach it. The provider verifies that BGP sessions between all PEs and the route reflector are up and that VPNv4 routes are advertised. The VRF on PE4 shows the route 10.1.1.1/32 with next-hop 192.0.2.1 (PE1's loopback) but when Site4 initiates a ping, it fails. What should the provider check next?
Easy82Which technology should be used to provide per-flow load balancing across multiple equal-cost paths in an MPLS network while preserving packet order?
Easy83A service provider is deploying MPLS L3VPN and notices that BGP next-hop resolution for VPNv4 routes fails on the PE routers. The PE routers are running OSPF as the IGP and have loopback interfaces used for LDP and BGP peering. Which configuration change should the engineer implement to ensure that the BGP next-hop is reachable?
Medium84An SP is implementing BGP FlowSpec to mitigate DDoS. The FlowSpec rule should match traffic with destination port 80 and DSCP value 0. Which FlowSpec component is used to specify the destination port?
Hard85Refer to the exhibit. CE1 is not receiving the VPNv4 route for the 192.168.1.0/24 subnet. What is the most likely cause?
Medium86A large SP network uses Segment Routing (SR) with MPLS data plane. They want to enforce a strict path for certain traffic flows across the core while using shortest-path for others. Which technique should be used?
Hard87An SP is implementing RPKI to validate BGP origin AS. After configuring RPKI-to-Router (RTR) and setting BGP origin validation, a route is marked as 'invalid'. What action does BGP default take for invalid routes?
Medium88Which THREE actions can help mitigate the impact of BGP prefix flapping in a service provider network?
Hard89Refer to the exhibit. The output shows an MPLS forwarding entry with FRR protection. What is the purpose of the backup path shown?
Hard90A service provider wants to stream interface counters from a Cisco router to a collector using model-driven telemetry. The collector is behind NAT and cannot be reached from the router. Which telemetry model should be used?
Easy91Which two protocols are commonly used for label exchange in an MPLS network? (Choose two.)
Easy92An SP is designing an OSPF network with a totally stubby area to reduce the LSA database. Which LSA types are blocked by default in a totally stubby area?
Medium93An engineer configures a class-map to match traffic with DSCP AF41. What is the numerical DSCP value for AF41?
Medium94A network engineer needs to ensure that a specific customer's traffic is not adversely affected by other customers' traffic in a shared MPLS core. Which technology should be used?
Easy95In an MPLS-TE tunnel configuration, which RSVP message carries the Explicit Route Object (ERO) that specifies the explicit path the tunnel must follow?
Medium96A service provider is troubleshooting a BGP route advertisement issue. Routes from a customer are not being advertised to the upstream provider. The PE router is configured with 'neighbor 10.0.0.1 route-map RMAP out'. The route-map RMAP permits the customer prefix. However, the BGP table on the PE shows the prefix as valid but not advertised. What is a likely cause?
Medium97A service provider is implementing Segment Routing (SR) with MPLS. Which three statements are true regarding SR-MPLS? (Choose three.)
Hard98Which TWO statements about BGP route reflectors are true?
Medium99Which of the following best describes the function of CSPF in MPLS-TE?
Medium100Which DSCP value is used for voice traffic (EF) in the DiffServ model?
Easy101A service provider is implementing 6VPE to provide IPv6 L3VPN services over an MPLS core. Which BGP address family must be configured on the PE routers to exchange IPv6 VPN routes?
Hard102A service provider is designing a greenfield MPLS core and wants to minimize control-plane complexity while still supporting traffic engineering. They plan to use Segment Routing with MPLS. Which statement about Segment Routing in this context is accurate?
Easy103Which TWO statements about BGP FlowSpec (RFC 8955) are correct?
Medium104Which protocol is used by a BNG to authenticate and authorize subscribers?
Easy105A network engineer is troubleshooting an OSPF adjacency issue between two routers connected via a serial link. The routers are configured with point-to-point network type. The adjacency stays in EXSTART state. What is the most likely cause?
Hard106Match each IS-IS term to its definition.
Medium107A service provider is deploying EVPN-VPWS for point-to-point services. They have set up an EVPN instance with Ethernet Segment Identifier (ESI) and EVI. After configuration, the pseudowire is not coming up. Which misconfiguration is most likely?
Medium108An SP network uses RSVP-TE for MPLS traffic engineering with FRR link protection. Which THREE statements are correct about RSVP-TE operation and FRR? (Choose three.)
Hard109A service provider is deploying a Broadband Network Gateway (BNG) for subscriber management. Which protocol is used by the BNG to authenticate subscribers via a RADIUS server?
Medium110A service provider has deployed QoS on its MPLS backbone to offer different classes of service. The provider notices that EF (Expedited Forwarding) traffic sometimes experiences high jitter during congestion. Following recommended practices, which action is MOST likely to reduce jitter for EF traffic?
Medium111Which THREE technologies or protocols are used to implement automated service provisioning in a Cisco service provider network?
Medium112Refer to the exhibit. An engineer configures IP SLA for UDP jitter. The operation completes successfully, but the customer reports voice quality issues. What should the engineer check next?
Easy113Which statement about the commit/rollback configuration model in IOS XR is true?
Medium114In an IS-IS network, a router has a NET of 49.0001.1921.6800.1001.00. What does the '00' at the end represent?
Easy115An ISP is deploying EVPN-VXLAN for its data center interconnect. Which statement about control-plane learning is correct?
Hard116Which EVPN component ensures that only one of the multi-homed PEs forwards traffic to the CE for a given Ethernet segment?
Hard117An SP uses BGP FlowSpec to mitigate DDoS attacks. They also want to rate-limit the traffic per FlowSpec rule. Which configuration is required to enable policing within a FlowSpec action?
Hard118A service provider is deploying LISP (Locator/ID Separation Protocol) to provide mobility and multihoming for customer endpoints. Which LISP component is responsible for maintaining the mapping between Endpoint Identifiers (EIDs) and Routing Locators (RLOCs) and for responding to Map-Request messages from ITRs?
Medium119You are a network architect for a large service provider. The network consists of multiple core routers (P routers) and edge routers (PE routers) supporting both L3VPN and L2VPN services. The network currently uses LDP for label distribution and has a flat IGP (OSPF) design. Recently, there have been scalability issues: the IGP convergence time has increased significantly, and the OSPF link-state database (LSDB) has grown large, causing high CPU utilization on core routers. Additionally, the LDP sessions are taking longer to establish after a router reboot. You are tasked with redesigning the network to improve scalability and convergence. The budget allows for significant changes but cannot replace all hardware. Which approach best addresses the scalability issues while minimizing disruption?
Hard120In IS-IS, what is the purpose of the System ID portion of the NET address?
Easy121A network engineer is troubleshooting an MPLS L3VPN where the CE router is receiving the correct VPN prefixes from the PE, but traffic from the CE to those prefixes is being dropped. The PE has a default route pointing to the CE. What is the most likely cause?
Hard122Which OSPF area type does not allow external routes (Type 5 LSAs) but does allow inter-area routes and can have a default route injected?
Medium123A team uses Ansible to automate configuration of Cisco devices. They want to ensure that configurations are applied only if the device is reachable and the current configuration differs from the intended. Which Ansible module or feature is best suited for this?
Medium124Refer to the exhibit. The router is configured as a PE router in an MPLS VPN network. Which option correctly identifies a configuration error that would prevent proper operation?
Medium125An SP engineer is using YANG to model a service. Which statement correctly describes the use of a 'leafref' type?
Medium126A service provider is designing an MPLS L3VPN network to provide Layer 3 VPN services to multiple customers. Which two statements correctly describe the roles of the Provider Edge (PE) and Customer Edge (CE) routers in this architecture?
Medium127In SR-TE, a headend router is configured with an SR Policy that includes an explicit candidate path with segment list [16001, 16003, 16005]. What does this segment list represent?
Hard128What is the primary purpose of the SRGB (Segment Routing Global Block) when configuring SR-MPLS on a network?
Medium129An SP is implementing IPv6 transition using MAP-T. Which encapsulation method does MAP-T use?
Hard130Which TWO statements correctly describe the use of OSPF in a service provider network?
Medium131In an MPLS L3VPN network, which security measure should be taken on PE-CE links to prevent MPLS label spoofing?
Hard132Which THREE factors must be considered when deploying MPLS Layer 3 VPN services to ensure optimal scalability and convergence?
Medium133Which DSCP value corresponds to Best Effort (DF) per-hop behavior?
Easy134Which access technology is based on ITU-T G.984 and provides downstream speeds up to 2.488 Gbps?
Easy135Which THREE DSCP values are part of the Assured Forwarding (AF) class 4? (Select three.)
Easy136An engineer is designing an iBGP route reflector topology to improve scalability. Which two statements about BGP route reflectors are correct?
Medium137Which THREE are mechanisms used in EVPN to support multi-homing and load balancing? (Choose three.)
Hard138A service provider operates a large MPLS network with Segment Routing (SR) and BGP-LS enabled on all routers. They have deployed a centralized Path Computation Element (PCE) to compute SR-TE policies for optimal traffic engineering. The PCE is configured to receive the network topology via BGP-LS from a route reflector (RR). Recently, the PCE has been unable to compute paths for certain destinations, and logs show that the topology database is missing some links and nodes. The engineer verifies that all routers have BGP-LS configured and are peering with the RR. The RR's BGP table shows the BGP-LS NLRI received from all routers. However, the PCE sees only a subset of the topology. Which action should the engineer take to resolve the issue?
Hard139Which three BGP communities are standardized and commonly used for inter-AS traffic engineering? (Choose three.)
Medium140Which BGP attribute is locally significant and used to influence outbound traffic from an AS?
Easy141Refer to the exhibit. An engineer checks the policy and notices that the policing is not working as expected—traffic is not being dropped even when exceeding 1 Mbps. What could be the issue?
Easy142What is the main difference between traffic shaping and traffic policing?
Easy143An engineer is troubleshooting MPLS label switching in a service provider core. They notice that packets are being forwarded correctly between provider edge routers, but when they check the MPLS forwarding table on a P router, they see only implicit-null labels for some destinations. What is the most likely reason for this?
Medium144An SP is deploying a Quality of Service (QoS) architecture in its core network to support multiple services: voice, video, and data. The core routers use MPLS and implement QoS based on the MPLS EXP bits. The architecture must ensure that voice packets are never dropped, even during congestion, while allowing video to have higher priority than data. The current design marks voice with EXP 4, video with EXP 3, and data with EXP 0. During a traffic burst, voice traffic is being dropped, which should not happen. The core routers have the following queue configuration: (1) a priority queue (PQ) for EXP 4+5, (2) a bandwidth queue for EXP 2-3, (3) a default queue for EXP 0-1. What is most likely the cause of voice drops?
Easy145A network engineer applies the above configuration on a PE router. The PE receives route 172.16.1.0/24 from eBGP peer 10.1.1.1. Which communities will be attached to this route?
Hard146Refer to the exhibit. An engineer configured Segment Routing on a router. However, the router does not advertise a Prefix-SID for the loopback0 interface. What is the most likely reason?
Medium147An SP engineer is configuring QoS on a PE router for MPLS traffic. The core network uses MPLS EXP bits for QoS. Which TWO methods can be used to set MPLS EXP bits based on IP DSCP? (Select two.)
Medium148An automation engineer uses RESTCONF to configure a Cisco ASR 9000 router. When sending a PATCH request to update an interface description, the API returns 404 Not Found. What is the most probable issue?
Medium149Which THREE are requirements for deploying MPLS Traffic Engineering with RSVP-TE?
Hard150A service provider is deploying MPLS Layer 3 VPNs and wants to ensure that customer traffic is not dropped when a PE-CE link fails. The CE router is using static routing. Which design should be implemented to provide fast convergence?
Medium151An engineer is troubleshooting an MPLS-TE tunnel that is not coming up. The configuration includes an explicit path with strict hops. Which TWO conditions could prevent the tunnel from being established? (Choose two.)
Medium152You are responsible for network assurance for a Tier-1 ISP that has deployed model-driven telemetry using gNMI with ON_CHANGE subscriptions on all core routers. Recently, the NMS team reported that some BGP route flaps are not being captured in the telemetry data, even though the routers' syslogs show the flaps occurred. The telemetry subscription is for the path '/bgp/neighbors/neighbor/state/messages/received'. The NMS is using a gNMI collector that supports both ON_CHANGE and SAMPLE subscriptions. You suspect the issue is with the subscription configuration. Upon reviewing the router configuration, you see that the telemetry subscription uses the SAMPLE mode instead of ON_CHANGE. What is the most appropriate action to ensure all BGP route flap events are captured?
Hard153An SP engineer is configuring hierarchical QoS on a PE router for a subscriber with a 10 Mbps shaped rate. The child policy must guarantee 2 Mbps for voice, 4 Mbps for video, and the rest for data. However, the parent policy shape rate is 10 Mbps. Which configuration ensures proper operation?
Hard154A service provider is deploying QoS on a Cisco ASR 9000 router to support a triple-play service (voice, video, data) over an Ethernet access network. The network engineer must ensure that voice traffic (EF) is prioritized, video traffic (AF41) is treated with low loss, and data traffic (default) gets best-effort service. Additionally, the engineer must implement a hierarchical QoS policy to shape the aggregate subscriber traffic to 100 Mbps on a GigabitEthernet interface, with the following per-class bandwidth allocations: voice 10 Mbps, video 40 Mbps, and data 50 Mbps. During testing, voice packets are being dropped under congestion, and video traffic is experiencing jitter. The current QoS configuration is as follows: policy-map CHILD class VOICE priority level 1 police rate 10 mbps class VIDEO bandwidth remaining ratio 40 class DATA bandwidth remaining ratio 50 ! policy-map PARENT class class-default shape average 100 mbps service-policy CHILD ! Which action should the engineer take to resolve the issues while maintaining the design objectives?
Medium155Which TWO are characteristics of SR-MPLS when compared to LDP-based MPLS? (Choose two.)
Medium156In an IOS XR system, CPU and memory resources are allocated per line card. What is the primary reason for this design?
Medium157Which component in EVPN is used to uniquely identify an Ethernet segment across multiple PE devices in a multi-homing scenario?
Easy158An SP is deploying a Network Services Orchestrator (NSO) for service automation. Which THREE components are integral to NSO architecture? (Select three.)
Hard159A service provider's network uses MPLS TE with Fast Reroute (FRR) for link protection. After a fiber cut on a core link, the traffic is rerouted via a backup tunnel, but the backup tunnel's path suffers from high latency. The customer complains about poor voice quality. What can be done to avoid this scenario in future deployments?
Medium160Based on the exhibit, which prefix is missing a label binding and likely causing traffic to be dropped?
Medium161Which TWO conditions cause a router to drop packets when a police action is configured?
Easy162Which three are characteristics of SR-TE policies? (Choose three.)
Medium163Refer to the exhibit. An engineer monitors the queue depths on a core interface. Which class is experiencing the most congestion?
Easy164A service provider is deploying network slicing for 5G services. Which slice type is characterized by low latency and high reliability for applications like autonomous driving?
Hard165A network operator wants to distribute traffic filtering rules to multiple routers dynamically during a DDoS attack. Which technology should be used?
Medium166Which BGP attribute influences inbound traffic to an AS by affecting the path selection of eBGP peers?
Easy167An engineer configures an MPLS-TE tunnel with a bandwidth of 100 Mbps and an explicit path that avoids a specific link. Which RSVP message carries the Explicit Route Object (ERO) to signal the path?
Medium168Which three BGP attributes are considered in the route selection process before comparing MED? (Choose three.)
Medium169Refer to the exhibit. A PE router configuration for VRF CUST1 is shown. What is the most likely result when a CE sends a route with RT 100:100?
Easy170Which access technology in a service provider network uses a passive optical splitter to distribute signals to multiple customers, with typical downstream speeds up to 2.5 Gbps?
Easy171Which Cisco automation tool is designed for service modeling with YANG and provides lifecycle management of network services?
Easy172A network engineer notices that BGP-LU prefixes learned from an eBGP neighbor are not being installed in the MPLS forwarding table (LFIB). The BGP table shows the prefixes with the correct label. The IGP route to the neighbor is reachable. What additional configuration is needed?
Hard173A service provider is implementing MPLS L3VPN for a customer. The customer requires that routes from two different VPNs be imported into a single VRF. Which feature should be used?
Easy174Which THREE protocols are used for label distribution in an MPLS network?
Easy175In MPLS, which operation occurs when a router receives a labeled packet and replaces the top label with a new label before forwarding?
Easy176In SRv6, which behavior is used for L3VPN decapsulation (removing the outer IPv6 header and SRH, and forwarding the inner IPv4 packet based on the VPN routing table)?
Hard177Which NETCONF RPC is used to retrieve the complete running configuration from a network device?
Medium178An SP engineer is configuring BGP Graceful Shutdown (GSHUT) for maintenance on a router. What does the GSHUT community do to the BGP best path selection process?
Hard179A service provider offers Carrier Ethernet services using MPLS-TP in the access and aggregation layers. The network uses MPLS-TP tunnels with static LSPs and protection via 1:1 linear protection with APS. One customer reports intermittent connectivity issues on their E-LINE service. The operations team observes that the protection switchover is occurring frequently due to apparent signal failures on the working path. However, the physical layer shows no errors. The protection switching is configured with revertive mode. The working LSP has an RDI (Remote Defect Indication) configured. Upon further investigation, the team finds that the working LSP's OAM continuity check messages (CCMs) are being lost occasionally, triggering a protection switch. What is the most likely misconfiguration?
Medium180A network architect is designing an MPLS network that must provide fast convergence in case of a link failure. The network uses Segment Routing. Which mechanism provides sub-50ms protection by using a precomputed backup path?
Easy181A service provider deploys MPLS L3VPN to connect multiple customer sites. Which VPN address family must be enabled on the PE routers to exchange customer IPv4 routes between PEs?
Easy182Which Cisco platform is designed for high-capacity core/backbone routing with support for MPLS, Segment Routing, and large-scale BGP?
Easy183Which THREE are valid methods for label distribution in an MPLS network?
Hard184Which TWO queuing mechanisms best meet the requirements for voice traffic (low latency and jitter) in a service provider network?
Medium185A service provider wants to implement Segment Routing in its MPLS core to simplify traffic engineering. What is the primary advantage of Segment Routing over traditional RSVP-TE?
Medium186A service provider is hardening management plane access on IOS XR routers. Which TWO measures should be implemented to secure management access? (Choose two)
Medium187In a carrier's network, MPLS-TE tunnels are used to steer traffic away from congested links. The operator configures a tunnel with a bandwidth of 200 Mbps and a dynamic path. The CSPF computation shows a path with sufficient bandwidth, but the tunnel fails to come up. The RSVP neighbor is established. What is the most likely cause?
Hard188A service provider router receives a route with a higher specific prefix length than the same prefix in the routing table. Which route will be preferred?
Easy189Which TWO BGP path attributes are considered before AS-path length in the default best-path selection process?
Hard190In SR-TE, a headend router is configured with an SR Policy using an explicit candidate path that includes a segment list [100, 200, 300]. If all routers have the same SRGB starting at 10000, what is the actual outgoing label stack for the first segment?
Hard191In Segment Routing (SR-MPLS), which IGP TLV is used by IS-IS to advertise the Node SID for a prefix?
Medium192A service provider is using NSO for service orchestration. Which protocol does NSO use to communicate with network devices for configuration?
Hard193An engineer is using NETCONF to retrieve the operational QoS statistics from a router. The response contains XML data but does not include the queueing statistics. What is the most likely reason?
Medium194Refer to the exhibit. An engineer has configured an SR-TE policy. What is required for this policy to be used for traffic steering?
Hard195In BGP route selection, which attribute is considered before the MED when comparing routes from different ASes?
Medium196Refer to the exhibit. The policy above is applied on a PE router. The customer complains that voice quality is poor. Based on the exhibit, what is the most likely cause?
Medium197A service provider uses an MPLS-TE tunnel to carry voice and data traffic. The tunnel is experiencing packet loss during congestion. The engineer wants to ensure that voice traffic receives guaranteed bandwidth and low latency while data traffic uses remaining bandwidth. Which QoS configuration should be applied on the tunnel interface?
Hard198An SP is implementing DiffServ at the edge router. Which TWO DSCP values are used for AF41 and AF31, respectively? (Choose two.)
Medium199An SP is deploying Deep Packet Inspection (DPI) to classify traffic for QoS and security. Which DPI technique is used to identify applications regardless of port numbers?
Medium200A service provider is deploying EVPN-VXLAN in its data center to provide Layer 2 and Layer 3 overlay services. The underlay uses an eBGP-based CLOS fabric with spine and leaf switches. The leaf switches act as VTEPs and run EVPN for MAC/VXLAN advertisement. One of the tenants, a financial customer, requires that their traffic between two leaf-connected servers is always forwarded through a firewall for inspection, even when the servers are on the same leaf. The firewall is connected to a service leaf. The architect proposes using EVPN integrated routing and bridging (IRB) with asymmetric IRB. However, traffic between two VMs on the same leaf is bypassing the firewall. Which architectural change ensures that all inter-VM traffic within the same leaf goes through the firewall?
Medium201Match each service provider architecture term to its description.
Medium202In IOS XR architecture, what is the role of the Secure Domain Router (SDR)?
Easy203Which TWO are benefits of using Segment Routing (SR) over traditional LDP-based MPLS?
Medium204An SP's core router experiences excessive packet drops on a congested link. The QoS policy uses CBWFQ with 4 queues. The drops occur only in the queue for a premium business class. Which is the most likely cause?
Medium205A service provider's network is experiencing suboptimal routing for BGP prefixes received from a customer. The customer is multihomed to two different PE routers in the same AS. Which BGP feature can ensure that traffic ingresses via the correct PE?
Medium206Which three BGP attributes are considered before the MED in the BGP best path selection process?
Medium207A service provider wants to influence inbound traffic from a customer AS. The customer AS is multi-homed to two provider ASes. Which BGP community is most effective to make the customer prefer a specific entry point?
Hard208In EVPN, what is the function of the Ethernet Segment Identifier (ESI)?
Medium209In a BGP confederation, which AS number is used in the AS_PATH to prevent loops within the confederation?
Hard210A service provider is designing an OSPF network for both IPv4 and IPv6. Which two features are supported by OSPFv3 but not by OSPFv2? (Choose two.)
Medium211An engineer is deploying MPLS-TE with FRR using the 1:1 detour method. Which statement about link protection in this scenario is true?
Hard212Which BGP mechanism can reduce the number of iBGP sessions in a large SP network while preventing routing loops?
Medium213An SP is deploying network slicing for 5G services. They need to ensure ultra-reliable low-latency communication (uRLLC) slice has dedicated bandwidth and low latency. Which mechanism is best suited to guarantee performance for this slice?
Hard214A network engineer is troubleshooting MPLS L3VPN issues on a PE router. The CE router is receiving routes from the PE, but the CE cannot ping the remote CE. The PE shows the remote prefix in its routing table and in the VRF. What is the most likely cause?
Medium215A service provider uses BGP communities to influence routing policies. An administrator wants to prevent a specific prefix from being advertised to any external AS. Which BGP community should be applied?
Hard216In OSPFv3, what change was introduced compared to OSPFv2 for supporting IPv6?
Medium217A large SP is using model-driven telemetry to collect interface statistics from 5000 routers to a centralized collector. The collector is deployed on two servers with load balancing. Recently, the operations team noticed that some router telemetry streams are missing data for intervals of up to 5 minutes during peak hours. The engineer suspects packet loss between the routers and collector. The routers are sourced from different vendors but all support gRPC dial-out telemetry. The engineer wants to identify which routers are affected. The current configuration uses a single telemetry collector IP with port 5000. What step should the engineer take to isolate the problematic routers?
Hard218In IS-IS, which type of router is responsible for routing between different areas and also maintains a Level 1 Link State Database?
Easy219A service provider needs to offer L3VPN services with customer isolation. Which technology is used to maintain separate routing tables for different customers on a single PE router?
Medium220Which MEF Carrier Ethernet service type is used for a rooted-multipoint topology, where a single root site communicates with multiple leaf sites but leaf sites cannot communicate directly?
Medium221A service provider is implementing Multicast VPN (MVPN) in an MPLS backbone. They use Rosen GRE (draft-rosen) for multicast transport. What is the primary limitation of Rosen GRE compared to mLDP-based MVPN?
Medium222A service provider is configuring BGP community propagation in an MPLS VPN network. Which two actions are necessary to ensure that communities are passed from CE to remote PE?
Easy223Refer to the exhibit. An engineer pushes this XML configuration via NETCONF, but the device rejects it with an error stating 'invalid policy-map structure'. What is the problem?
Hard224Which congestion avoidance technique drops packets probabilistically before the queue becomes full?
Easy225A service provider is migrating from OSPF to IS-IS in the core. During the migration, both protocols are running. Some prefixes are learned via both OSPF and IS-IS. The network uses BGP for external routes and MPLS for VPNs. The engineer notices that BGP routes are pointing to a next-hop that is reachable via OSPF but not via IS-IS, causing traffic to be dropped. What is the best course of action to ensure that during the migration, BGP uses only one IGP protocol?
Easy226In MPLS, which operation is performed when a packet arrives at a transit router and the top label matches the router's own label assigned for the FEC?
Easy227An SP wants to secure management access to IOS XR routers. Which two measures should be implemented? (Choose two.)
Easy228You are a network engineer at a service provider that offers L3VPN services. A customer complains that their VPN traffic is intermittently dropping. The network uses OSPF as the IGP, LDP for label distribution, and MP-BGP for VPNv4 route exchange. The PE routers are connected to two core routers (P1 and P2) in a redundant design. Upon investigation, you find that the BGP next-hop for some VPN prefixes is set to the loopback interface of the remote PE, but the route to that loopback is sometimes unreachable due to a flapping link between P1 and P2. The IGP converges, but the BGP prefixes take longer to recover. What is the most likely cause of the intermittent drops?
Medium229An engineer wants to configure SR-TE without using RSVP. Which mechanism does SR-TE use to specify the explicit path?
Medium230A service provider is designing a new MPLS core network and needs to choose a routing protocol that supports traffic engineering and fast convergence. Which protocol should be used?
Easy231A service provider is implementing BGP PIC (Prefix Independent Convergence) for its core network. Which mechanism does BGP PIC primarily rely on to achieve fast convergence?
Medium232A network engineer is designing a Layer 2 VPN using EVPN with MPLS data plane. The customer requires all-hub multipoint connectivity with optimal multicast replication. Which EVPN route type is used to advertise multicast group membership?
Hard233Which RSVP-TE message is used to reserve resources along the path and includes the Explicit Route Object (ERO)?
Medium234Which component in MQC is used to classify traffic based on match criteria?
Easy235A service provider operates a Layer 2 MPLS VPN using VPLS. Recently, two new CE routers were added to the VPLS domain, but they cannot ping each other. The existing CEs can communicate. The network uses BGP autodiscovery and signaling. The new CEs are connected to different PEs. The 'show vfi status' command on the new PEs indicates the VFI is up but the pseudowire to the remote PE is down. The BGP session between the PEs is established and the L2VPN address family routes are exchanged. What is the most probable cause?
Hard236An SP implements Carrier-Grade NAT (CGNAT) to conserve IPv4 addresses. For legal compliance, what additional function must be enabled to log subscriber IP-port mappings?
Medium237A service provider is deploying a new MPLS core network and needs a router platform that supports high-scale MPLS forwarding and offers a modular operating system. Which Cisco platform is best suited for this role?
Medium238In IOS XR, what is the primary purpose of the commit/rollback configuration model?
Medium239Based on the exhibit, which OSPF network type is configured on this interface?
Easy240What is the main benefit of using Q-in-Q (802.1ad) in metro Ethernet networks?
Easy241An SP engineer is implementing LLQ on a PE router to prioritize voice. Which additional configuration is recommended to prevent voice traffic from starving other queues?
Medium242A service provider uses BGP to exchange routes with customers. To prevent the customer from announcing prefixes they do not own (BGP hijacking), which tool should the provider apply on the customer-facing BGP session?
Easy243In OSPFv3, which of the following is true about the protocol's operation?
Medium244A customer's MPLS L3VPN has two CE routers connected to two different PEs, but the PEs are not receiving the customer's routes from each other. The PE-CE routing protocol is OSPF. The PEs have the VRF configured with OSPF process, and the routes from CE are in the VRF routing table. The MP-BGP session between PEs is up and the VPNv4 address family is working. On the source PE, the routes show as not advertised to BGP. What is the likely issue?
Medium245A service provider is implementing Segment Routing over IPv6 (SRv6) in their core. They want to provide path isolation for different services using SRv6 SIDs. Which SID structure is used to encode both the locator and the function?
Hard246Which three mechanisms are used within the DiffServ model to provide QoS in an SP network? (Choose three.)
Hard247Which network architecture model separates the control plane and data plane in a way that allows for centralized control and distributed forwarding?
Easy248In an MPLS-based service provider core network, the aggregation layer typically connects to the core backbone. Which technology is primarily used at the aggregation layer to scale Ethernet services for many customers while preserving VLAN separation?
Medium249Which OSPF area type can import external routes as Type 7 LSAs?
Easy250Which THREE of the following are required components for implementing MPLS Layer 3 VPN (L3VPN) in a service provider network? (Choose three.)
Medium251A service provider wants to mitigate DDoS attacks by blackholing traffic destined to a victim IP address. They plan to use Remotely Triggered Black Hole (RTBH) filtering. What BGP community is commonly used to trigger the blackhole route?
Easy252Which LDP mode uses downstream unsolicited label distribution and liberal label retention?
Easy253Which TWO are correct about network slicing? (Choose two.)
Hard254Which TWO statements about IOS XR architecture are correct? (Choose two.)
Medium255Refer to the exhibit. Which statement about this BGP configuration is true?
Hard256A service provider is running OSPF in their core network. After a link failure, routing convergence is taking longer than expected. The engineer suspects the issue is related to the SPF calculation. Which OSPF feature can reduce the SPF calculation time?
Medium257A service provider wants to enable fast convergence for OSPF networks. Which feature should be enabled to detect link failures in sub-second time?
Medium258Refer to the exhibit. Which prerequisite for MPLS L3VPN is missing on PE1?
Easy259Which SRv6 endpoint behavior is used for L3VPN decapsulation and IP forwarding to the destination in a VRF?
Medium260A service provider is designing a Layer 2 MPLS VPN to connect multiple customer sites. Which technology should be used to provide end-to-end Ethernet service with MAC address transparency and support for multiple customer VLANs?
Easy261A service provider is deploying segment routing in its MPLS core. Which label allocation method is used by segment routing to distribute prefix SIDs?
Medium262An ISP is implementing 6PE for IPv6 transport over MPLS. Which two conditions are required for 6PE to work? (Choose two.)
Hard263An SP engineer configures a QoS policy on an IOS XR router to re-mark DSCP from AF11 to AF22 for traffic matching a specific ACL. The policy compiles successfully but traffic is not re-marked. What is a likely reason?
Easy264A network administrator is designing an MPLS TE tunnel for a service provider backbone. The goal is to provide bandwidth protection for voice traffic. Which MPLS TE feature should be configured?
Easy265In an MPLS network using LDP, which LDP mode allocates a label for every prefix in the routing table and advertises it to all LDP neighbors, regardless of whether the neighbor requests it?
Medium266An engineer is configuring an MPLS Traffic Engineering tunnel using RSVP-TE. The tunnel is intended to carry voice traffic with strict delay requirements. Which RSVP-TE object should be used to enforce a maximum delay path?
Easy267A service provider is implementing RPKI to validate BGP routes. Which THREE components are necessary for a complete RPKI deployment on routers? (Choose three)
Hard268In Segment Routing over IPv6 (SRv6), what is the function of the 'Locator' part of an SRv6 SID?
Easy269Which TWO statements correctly describe RSVP-TE reservation styles? (Choose two.)
Medium270A service provider operates a large MPLS network with hundreds of PE routers. They have deployed QoS policies to ensure real-time traffic (voice and video) receives priority. The policy uses LLQ with a strict priority queue for voice (DSCP EF) and another for video (DSCP AF41). Each priority queue has a policer to prevent starvation of other classes. Recently, a customer reports that their video calls are experiencing jitter and packet loss. The engineer examines the PE router connected to this customer. The interface is GigabitEthernet0/0/1 with the policy applied in the output direction. Show commands indicate that the video priority queue is frequently dropping packets, while the voice queue has no drops. The police for the video queue is set to 10 Mbps. The customer's contract guarantees 20 Mbps for video traffic. However, the actual video traffic is averaging 15 Mbps with bursts to 18 Mbps. The engineer notes that the video class also has a bandwidth command of 10 Mbps under the priority statement. What is the most likely cause of the video packet loss?
Hard271An SP is using Cisco ASR 9000 routers with IOS XR. They need to apply a configuration change and ensure that if the change causes issues, it can be easily reverted. Which IOS XR feature supports this?
Medium272A service provider is designing a new MPLS core network and wants to simplify traffic engineering without deploying a centralized controller. Which technology should be used to enable source-routed paths with explicit path control?
Easy273Match each Ethernet OAM protocol to its function.
Medium274Which Cisco platform is best suited for the core/backbone role of a large service provider network, offering high scalability and MPLS forwarding capacity?
Medium275Which component of SRv6 SID format is used to identify the specific function (e.g., End, End.X) on the node?
Medium276An SR-TE policy is configured with a candidate path containing multiple segment lists. Which selection criteria is used to choose the active segment list among the candidate paths?
Medium277A Cisco XR router is configured to stream telemetry via gRPC with TLS. The collector can connect but receives empty data. The telemetry configuration is as follows: sensor-group with 'openconfig-interfaces' paths. What is the likely cause?
Hard278An SP engineer is configuring IS-IS on a router and specifies a NET address of 49.0001.1921.6800.1001.00. What does the '00' at the end represent?
Medium279Which Cisco SP router platform runs IOS XR and is designed for the aggregation layer with high-density 10GE/100GE interfaces?
Easy280Which protocol is typically used to distribute MPLS labels between directly connected LSRs?
Easy281Which TWO actions are required to implement QoS trust boundaries correctly in a service provider network?
Easy282In a CBWFQ policy with LLQ, which statement is true regarding the bandwidth command for non-priority classes?
Hard283Which THREE QoS mechanisms can be used for traffic policing?
Medium284An engineer is configuring MPLS-TE FRR for link protection. Which of the following options describes a 1:1 protection scheme where a dedicated detour LSP is created for each protected LSP?
Hard285In the context of YANG modeling for network automation, which statement about 'must' expressions is true?
Medium286Which component of an MPLS-TE FRR (Fast Reroute) configuration provides protection for the next-hop node by bypassing it?
Easy287Which IS-IS metric type is required for traffic engineering and segment routing?
Easy288Which TWO access technologies are considered fiber-based solutions for service provider access networks? (Select two.)
Easy289A multicast service provider is designing an IPv4 PIM Sparse Mode (PIM-SM) network with multiple RPs. The network must support Anycast RP using MSDP. Which THREE statements are correct regarding this design?
Hard290What is the primary difference between traffic policing and traffic shaping?
Easy291Which LDP label retention mode stores all received label bindings even if they are not currently used for forwarding?
Easy292What is the primary benefit of using model-driven telemetry over traditional SNMP polling for network assurance?
Easy293A network administrator is configuring a Cisco ASR 9000 router for MPLS L3VPN. The PE receives customer routes via eBGP from the CE. Which command is required to redistribute these routes into the VPNv4 BGP table on the PE?
Easy294An SP network is migrating from IS-IS narrow metrics to wide metrics. What is a key advantage of using wide metrics?
Medium295During multicast troubleshooting, the command 'show ip mroute' shows that the RPF neighbor for a particular (S,G) entry is incorrect. What is the most likely cause?
Hard296Which TWO statements accurately describe the behavior of the QoS policy shown in the exhibit?
Medium297An MPLS TE tunnel is configured with an explicit path. Which RSVP message is used by the headend to signal the path and carry the Explicit Route Object (ERO) listing the hops?
Medium298Which SR-MPLS SID is advertised by an IS-IS router to identify a specific link and is distributed only to adjacent neighbors?
Medium299A service provider wants to provide point-to-point Ethernet services with strict SLAs. Which technology should they use?
Hard300Refer to the exhibit. An engineer is troubleshooting an MPLS LDP session between two routers. The output shows that the LDP session is operational. However, MPLS labels are not being exchanged. What is the most likely cause?
Hard301A service provider is implementing Segment Routing in an IS-IS network. Which TLV is used to advertise the Segment Routing Global Block (SRGB)?
Hard302A network engineer is troubleshooting an OSPF issue in a service provider network. The network uses OSPFv2 with multiple areas. Routers in area 0 are able to ping each other, but routers in area 1 cannot reach routers in area 2. All routers are OSPF-enabled and have correct network type configurations. What is the most likely cause?
Easy303A service provider is implementing QoS on a PE router for customer traffic. Which tool should be used to classify traffic based on application layer information?
Easy304Refer to the exhibit. What is the significance of the entry with 'Pop Label'?
Hard305Refer to the exhibit. A PE router in an MPLS L3VPN network shows the above output. The VRF CUSTOMER contains two routes. Which statement about forwarding for these routes is true?
Hard306When configuring EVPN VPWS, which TWO parameters must match between the two endpoints of the pseudowire?
Hard307Refer to the exhibit. An operator configures an SR-TE policy on a headend router. Which statement is true about the traffic steered into this policy?
Hard308In a BGP/MPLS IP VPN, which technique ensures that customer traffic from different VPNs remains isolated on the same PE router?
Medium309An engineer is configuring BGP Graceful Shutdown (GSHUT) for maintenance on a router. Which BGP attribute is set to trigger the graceful shutdown behavior?
Easy310A large enterprise recently implemented centralized QoS policies using Cisco DNA Center. The policies are pushed via RESTCONF to the branch routers. After the deployment, the branch office reports that critical business applications (like ERP) are being delayed. The network team verifies that the QoS policy is applied correctly on the WAN interface (Serial0/0/0) with a shape of 10 Mbps. The policy-map has a class for 'critical-data' with bandwidth 5 Mbps and another class for 'transactional-data' with bandwidth 3 Mbps. The remaining traffic is in class-default with fair-queue. The branch router's CPU utilization is normal. The interface output shows that the queue for critical-data is rarely full, but packets are experiencing high latency. The engineer pings from the branch server to the central site and sees 200 ms RTT normally, but up to 500 ms during peak hours. What is the most likely cause of the high latency for critical-data?
Medium311A network engineer is troubleshooting an MPLS TE tunnel that is not coming up. The tunnel is configured with a strict explicit path, and the path includes an interface that is currently down. Which action should the engineer take to allow the tunnel to use an alternative path?
Easy312Match each Segment Routing component to its function.
Medium313Which two statements about MPLS label operations are true? (Choose two.)
Easy314A network architect is designing a Segment Routing (SR) network for a service provider with a requirement for fast convergence upon node failure. The network uses IS-IS as the IGP with segment routing extensions. Which design choice BEST ensures that the network can achieve sub-50ms convergence without relying on any signaling protocol beyond the IGP?
Hard315In RSVP-TE, which filter spec style allows multiple senders to share the same reserved resources on a link, as long as their flows do not exceed the reservation?
Hard316An SP is deploying NAT64 to allow IPv6-only clients to access IPv4 servers. Which address translation mechanism is used by NAT64 to map IPv6 addresses to IPv4 addresses?
Hard317A service provider is using LISP to provide host mobility. Which LISP component is responsible for storing the mapping of EID to RLOC?
Hard318Which THREE of the following are benefits of using EVPN over traditional VPLS for L2VPN services? (Select three.)
Hard319A service provider wants to offer a point-to-point Ethernet service between two customer sites with a defined bandwidth and performance guarantee, according to MEF standards. Which Carrier Ethernet service type is appropriate?
Easy320Which congestion avoidance mechanism is used to prevent tail drop by selectively dropping packets from lower-priority flows before the queue becomes full?
Medium321In an IS-IS segment routing network, after the global 'segment-routing mpls' configuration, which IS-IS configuration is mandatory for label allocation?
Medium322Which two statements about MPLS Layer 3 VPN route target (RT) communities are correct?
Easy323When deploying EVPN with SR-MPLS or SRv6, which THREE statements about EVPN multi-homing and related concepts are correct? (Choose three.)
Hard324An engineer is designing an EVPN IRB (Integrated Routing and Bridging) solution. Which two statements about EVPN IRB are correct? (Choose two.)
Medium325Refer to the exhibit. CE1 is unable to ping the loopback of a remote CE. Which configuration change is required on PE1 to enable communication?
Hard326In the DiffServ model, which per-hop behavior (PHB) is associated with the AF31 DSCP value?
Medium327Refer to the exhibit. The show command output displays the LDP neighbor state. What does the 'Downstream' label mode indicate about label distribution?
Easy328A service provider is designing an OSPF network for MPLS-TE. Which two OSPF LSA types are used to advertise Traffic Engineering information? (Choose two.)
Medium329An engineer is configuring IS-IS in a service provider network. The network uses wide metrics for traffic engineering. Which TLV is mandatory for IS-IS to carry traffic engineering (TE) information in accordance with RFC 5305?
Medium330In EVPN, what is the purpose of Ethernet Segment Identifier (ESI)?
Medium331A service provider wants to enforce a hard rate limit of 10 Mbps on a subscriber's traffic, dropping any excess packets. Which QoS mechanism should be used?
Medium332In IS-IS, which type of LSP is used to advertise prefix information for IPv4 and IPv6 in a modern SP network that supports traffic engineering?
Easy333Which TWO statements about model-driven telemetry compared to SNMP are correct? (Choose two.)
Medium334What is the purpose of the 'mpls ldp autoconfig' command on an interface?
Easy335An engineer configures an SR-TE policy with a segment list containing adjacency SIDs. The required path includes a strict loose hop through a specific router. Which segment type should be used for the strict hop?
Hard336In IS-IS, a router is configured as L1 only. Which statement is true regarding its routing table?
Easy337Which THREE of the following are required for successful operation of OSPFv3 in an IPv6 service provider network?
Easy338A service provider uses RESTCONF to automate interface configuration. They need to add a new IPv4 address to an existing interface. Which HTTP method and URI should be used?
Medium339An SP is implementing traffic shaping on an MPLS PE-CE link. Which TWO statements are true about shaping compared to policing? (Select two.)
Medium340Which TWO of the following are valid BGP extended community attributes? (Choose two.)
Hard341Which TWO statements about SR-MPLS compared to LDP are correct? (Choose two.)
Medium342In an MPLS L3VPN network with route reflectors, what is the default behavior regarding the BGP next-hop attribute for reflected VPNv4 routes?
Hard343What is the role of Network Services Orchestrator (NSO) in service provider automation?
Medium344In a carrier network using VRF-lite for customer isolation, which issue arises if route-target values are not correctly configured?
Medium345Which TWO statements correctly describe the DiffServ model? (Choose two.)
Medium346A service provider is deploying IPv6 transition mechanisms. Which three technologies use encapsulation over an IPv4 network? (Choose three.)
Hard347An SP network operator needs to ensure that voice traffic always gets priority access to the output link. Which queuing mechanism is designed to provide a strict priority queue while preventing starvation of other queues?
Medium348A service provider is deploying a BNG for subscriber management. Which protocol is used to authenticate subscribers and assign IP addresses via the BNG?
Medium349A service provider wants to prevent BGP hijacking by validating the origin AS of received routes. They deploy RPKI with Route Origin Authorizations (ROAs). When a router receives a prefix with an origin AS that matches the ROA, what is the BGP Origin Validation state?
Medium350Which TWO statements about Cisco NSO (Network Services Orchestrator) are true? (Choose two.)
Hard351Which MPLS label is used to identify the egress PE in a Layer 3 MPLS VPN?
Easy352In a multicast environment, a PE router is not receiving multicast traffic from a source behind a CE. The PIM neighbors are established. The RP is reachable. What is the most likely issue?
Medium353Which IS-IS level is used for routing within an area?
Easy354A service provider wants to provide Layer 3 VPN services to customers using MPLS. Which technology is used to distribute VPNv4 routes between PE routers?
Easy355Which four statements correctly describe the SRv6 micro-SID (uSID) concept? (Choose four.)
Hard356An SP network is running OSPFv3 for IPv6 and needs to support traffic engineering extensions for RSVP-TE. Which three statements about OSPFv3 TE extensions are true?
Medium357In OSPF Traffic Engineering (TE) extensions for RSVP-TE, which LSA type is used to carry TE information?
Medium358Which three are benefits of using MPLS Layer 3 VPNs over traditional VPNs? (Choose three.)
Hard359In MPLS, what is the term for the operation where the top label is removed and replaced with a new label?
Easy360Based on the exhibit, which label operation will occur when a packet destined to 10.2.2.1 enters PE1 with label 17?
Easy361An SP router is configured with a hierarchical QoS policy (parent policy shaper, child policy with CBWFQ). When applying this policy to an interface, the router reports 'Policy map not found' error. What is the most likely cause?
Hard362In OSPF, which type of area does not allow external routes and only accepts a default route?
Easy363An SP network is implementing BGP PIC (Prefix Independent Convergence) for fast failover. What is the primary mechanism used by BGP PIC to achieve sub-second convergence?
Medium364Which Cisco router platform is designed for the aggregation layer and supports both mobile backhaul and business services with high density 10GE/100GE interfaces?
Easy365A service provider is deploying Segment Routing in the MPLS core using IS-IS. Which extension is required in IS-IS to advertise the prefix-SID?
Easy366A large service provider operates a national MPLS backbone with over 200 P routers and 500 PE routers. They use IS-IS as the IGP with segment routing and have deployed TI-LFA for link and node protection. Recently, a core router (P1) suffered a complete failure, and during the failure, traffic for some prefixes was dropped for over 200ms. After the failure, the network recovered within seconds. The engineer suspects that TI-LFA did not provide the expected sub-50ms protection for some destinations. Further analysis reveals that the affected prefixes have their BGP next-hop on a router that is multiple hops away, and the P1 failure impacted both the primary path and the backup path computed by TI-LFA. The engineer reviews the TI-LFA configuration and finds that 'fast-reroute per-prefix ti-lfa' is enabled under router isis. The engineer also notes that P1 was not a protecting node for those prefixes. Which action should the engineer take to improve convergence time for these prefixes?
Hard367In a service provider network, the access layer connects end customers. Which technology is commonly used for fibre-based access in GPON deployments?
Easy368An automation engineer is writing a Python script using Cisco's pyATS library to validate QoS configurations across a fleet of routers. The script runs without errors but reports that all routers are compliant even though some are not. What is the most likely issue?
Hard369An SP engineer is configuring QoS on a router and needs to drop traffic that exceeds a certain rate while allowing bursts up to a specified amount. Which QoS feature should be used?
Easy370A service provider is implementing MPLS TE to optimize bandwidth utilization. The engineer notices that tunnels are not using the explicitly configured path. What is the most likely reason?
Medium371An enterprise uses IPsec VPN to connect branch offices. They apply QoS policies on the tunnel interface but notice that original DSCP markings are not preserved after encryption. Which feature should be enabled to maintain end-to-end QoS?
Hard372A service provider is implementing QoS policies on an access aggregation router. They want to shape traffic to a downstream DSLAM to 10 Mbps, but they do not want to exceed the shaping rate even if the line rate is higher. Which QoS tool should be used on the interface facing the DSLAM?
Medium373Which TWO are characteristics of the access layer in a service provider network? (Choose two.)
Easy374A service provider is deploying MPLS in its core network. The core routers are all configured with LDP. Which label operation does an ingress PE perform on the first packet of a new flow?
Easy375An engineer configures an RSVP-TE tunnel with a bandwidth of 100 Mbps and an explicit path that excludes a specific interface. The tunnel fails to come up. Which term describes the path computation method used by RSVP-TE to find a feasible path given these constraints?
Hard376Which RESTCONF HTTP method is used to create a new data resource?
Medium377An SP engineer is designing a BGP-based MPLS L3VPN service. The PE routers are fully meshed via iBGP for VPNv4 routes, and an RR is deployed to reduce sessions. The engineer notices that all PE routers are receiving duplicate routes from different PEs, causing suboptimal path selection. Which BGP feature should be enabled to ensure proper load balancing across multiple equal-cost paths?
Hard378In IS-IS, which TWO are types of Link State PDUs (LSPs)?
Easy379In a carrier-supporting carrier (CSC) architecture, the customer carrier runs MPLS in its network. Which technology is used to exchange VPN routes between the provider carrier and the customer carrier?
Hard380A service provider is designing its core network to carry both IPv4 and IPv6 traffic. Which BGP approach best minimizes routing table size on core routers while maintaining full reachability?
Easy381An engineer is troubleshooting an MPLS network where some routers are not exchanging labels via LDP. Which two steps are most appropriate for diagnosing the issue? (Choose two.)
Medium382An SP is designing MQC policies. Which THREE statements about MQC are true? (Choose three.)
Hard383Refer to the exhibit. What is the role of this router for prefix 10.0.1.0/24?
Hard384Which THREE components are required to deploy MPLS Layer 3 VPN?
Hard385Which THREE of the following are key components of an MPLS L3VPN architecture? (Choose three.)
Medium386An engineer is troubleshooting MPLS LSP connectivity. The ingress PE router has the label binding for the FEC 10.1.1.0/24, but no LSP is established. Which command should be checked on the P routers to verify the LSP path?
Hard387In an MPLS core, which forwarding mechanism do P routers use to forward packets for L3VPN?
Medium388An SP network is using IS-IS and wants to achieve fast convergence using BFD. Which two statements about BFD in IS-IS are correct?
Easy389Which MPLS security best practice helps prevent label spoofing attacks where an attacker injects MPLS packets with a forged label stack to bypass ACLs?
Medium390An engineer is configuring VPLS on a Cisco ASR 9000. After verifying the pseudowire status, they notice that the 'pw status' shows 'down' for one of the PWs. Which two conditions could cause this? (Choose two.)
Medium391An SP is implementing RPKI to validate BGP route origins. They have set up an RPKI cache and configured routers with the RPKI-to-Router (RTR) protocol. During validation, a route is received with an AS that does not match any ROA. What is the validation state?
Hard392Refer to the exhibit. A network engineer configures a BGP route-map to set communities on routes advertised to a neighbor. After applying the configuration, the engineer checks the BGP table on the neighbor router and does not see the communities. What is the most likely reason?
Medium393Which BGP attribute is used to influence inbound traffic to an AS by indicating the preferred path into the AS?
Medium394Refer to the exhibit. A network engineer is configuring a segment routing traffic engineering policy. The output shows two candidate paths. Why is path1 selected as the active path even though path2 has a bandwidth constraint?
Medium395A service provider offers L3VPN services to multiple enterprise customers. One customer reports that they cannot reach some remote sites intermittently. The network uses MPLS L3VPN with MP-BGP for VPN route exchange. The PE routers are configured with route-target import and export. The customer's CE router is dual-homed to two different PEs in the same point of presence. The engineer checks the BGP table on both PEs and sees the customer routes with the correct route-target. However, pings from the CE to a remote site fail about 50% of the time, and the flapping pattern suggests load balancing issues. The engineer discovers that the remote site's network prefix is being advertised from both PEs with the same route-target but with different next-hops. The CE has equal-cost paths via both PEs. What is the most likely cause of the intermittent connectivity?
Medium396A network automation engineer needs to retrieve QoS policy statistics from a Cisco IOS XE device using RESTCONF. Which YANG module should be targeted?
Hard397Which THREE of the following are standard per-hop behaviors (PHBs) in the DiffServ model? (Select three.)
Easy398In IS-IS, what is the result of configuring wide metrics on all interfaces?
Medium399Which THREE functions are provided by EVPN multi-homing? (Choose three.)
Hard400An SP is migrating its core network to Segment Routing (SR-MPLS). The network uses IS-IS as the IGP with SR extensions. Which three statements about SR-MPLS architecture are correct?
Hard401A network operator is deploying segment routing in an MPLS network. They want to use a centralized controller to compute paths based on traffic demand and network constraints. Which architecture is being used?
Hard402In the context of MPLS QoS, at which point are EXP bits typically set based on the DSCP value of the IP packet?
Easy403A service provider is designing a multicast solution for a Layer 3 VPN. They want to use MVPN with BGP signaling (draft-rosen). The PE routers are configured with VRF and multicast routing enabled. Which BGP address family must be enabled between PE routers to carry multicast routing information?
Hard404An SP network engineer configures IS-IS with wide metrics. Which statement is true about IS-IS wide metrics compared to narrow metrics?
Medium405An engineer is troubleshooting a BGP peering issue between two routers. The peering is established, but routes are not being exchanged. On router R1, 'show bgp neighbors 192.0.2.2' shows the neighbor state as 'Established' but the 'Prefixes received' counter is zero. What is most likely the cause?
Medium406An OSPF network uses point-to-point links. The engineer notices that LSAs are being flooded every 30 minutes even when no topology changes occur. What is the most likely reason?
Medium407In Inter-AS MPLS Option B, which routers exchange labeled VPNv4 prefixes directly?
Medium408An operator is deploying EVPN-VPWS over an MPLS network. Which component uniquely identifies a multihomed Ethernet segment in EVPN?
Hard409An SP is deploying SR-TE policies using PCEP. What is the role of the SR-PCE in this architecture?
Medium410An engineer is designing an MPLS network and needs to ensure that VPN traffic between two PE routers is label-switched. The PE routers are connected via a P router and have a full mesh of iBGP sessions. Which label distribution method is required for the VPN labels?
Easy411Refer to the exhibit. An engineer configured a telemetry subscription to push interface state data to a collector. The subscription shows 'State: Invalid'. What is the most likely cause?
Medium412When deploying IS-IS in a large service provider core, what is the recommended network type on Ethernet interfaces to improve scalability?
Easy413A service provider is implementing EVPN for its VPLS replacement. They have configured BGP EVPN on all PEs and have set up an EVPN instance for a customer requiring broadcast, unknown unicast, and multicast (BUM) traffic. The customer reports that broadcast traffic from one site is not being received at another site. The engineer checks the EVPN configuration and finds that the EVI is configured correctly, the route-target matches, and the BGP sessions are established. The engineer also checks the MAC address table on the receiving PE and sees that the source MAC of the broadcast frame is learned on the local interface, but not from the remote VTEP. The engineer suspects an issue with the IMET (Inclusive Multicast Ethernet Tag) route. Which action should the engineer take to verify the IMET route?
Medium414Which THREE of the following are correct statements about EVPN-VXLAN in a data center fabric? (Select three.)
Hard415In EVPN with SRv6, which SID behavior is used for integrated routing and bridging (IRB) to forward packets between the IP fabric and the Ethernet segment?
Hard416What is the primary difference between traffic shaping and policing in a QoS implementation?
Medium417In SR-MPLS, what is the purpose of the SRGB (Segment Routing Global Block)?
Medium418A service provider is troubleshooting an MPLS L3VPN where customers behind CE-A cannot reach CE-B. The PE routers are Cisco ASR 9000 series. On PE-A, the show cef vrf CUSTOMER prefix 10.1.1.0/24 command displays 'punt' as the forwarding path. What is the most likely cause?
Medium419A service provider is deploying segment routing in their MPLS core. They want to use an IGP as the control plane for label distribution without running LDP or RSVP-TE. Which IGP is best suited for this purpose?
Medium420Which THREE are correct statements about IOS XR process separation? (Choose three.)
Hard421Which two statements about LDP liberal label retention are true? (Choose two.)
Medium422An SP engineer is configuring model-driven telemetry (MDT) to monitor interface utilization on Cisco routers. The telemetry receiver uses gRPC and is experiencing high CPU load due to excessive subscription data. Which MDT subscription parameter should be adjusted to reduce the data rate without losing critical threshold events?
Hard423Given the output, which configuration mismatch would prevent a remote PE in the same VPN from installing this route into its VRF?
Medium424Which TWO tasks are required when implementing segment routing in an MPLS network?
Medium425An engineer is configuring MPLS LDP on a Cisco router. The router uses downstream unsolicited mode with liberal label retention. Which behavior describes the label distribution and retention on this router?
Medium426An SP engineer configures IS-IS fast convergence mechanisms. Which three techniques help achieve sub-second convergence in IS-IS?
Hard427Which Cisco SP router platform uses IOS XR and is commonly deployed at the aggregation layer, supporting both L2 and L3 services?
Medium428Which technology allows a service provider to offer different classes of service over a single MPLS network?
Easy429Which TWO statements correctly describe differences between PIM dense mode and PIM sparse mode? (Choose two.)
Easy430A service provider is implementing BGP route reflectors to scale iBGP. Which THREE mechanisms are used to prevent routing loops in a route reflector topology? (Choose three.)
Medium431A customer has a 100 Mbps access link and wants to limit traffic to 95 Mbps with burst allowance up to 100 Mbps. Which QoS action should be applied on the egress interface?
Medium432What does the output indicate about the TI-LFA protection on R1?
Hard433Which MPLS label operation is performed by the penultimate hop router in PHP (Penultimate Hop Popping)?
Easy434You are a network automation engineer for a large service provider. Your team is tasked with automating the provisioning of new MPLS L3VPN services across a multi-vendor environment (Cisco and Juniper). The automation framework uses Ansible with Jinja2 templates and NETCONF as the transport protocol. During a pilot deployment, the automation successfully configures the Cisco devices but fails on Juniper devices with a 'syntax error' when applying the generated XML configuration. The Jinja2 templates are designed to generate Cisco-style configuration. You need to modify the automation to support both vendors. Which approach is most effective?
Medium435Match each MPLS protection mechanism to its description.
Medium436An SP router is configured with CBWFQ. For a data class requiring 30% bandwidth guarantee, which command is correct in the policy-map?
Medium437Which three components are part of NSO (Network Services Orchestrator) architecture? (Choose three.)
Hard438Which three are required components for deploying Segment Routing in an MPLS network? (Choose three.)
Medium439Refer to the exhibit. Which statement is true about this configuration?
Easy440An SP engineer is hardening management plane access on IOS XR routers. They want to enforce role-based access control using task groups. Which AAA protocol is required to support attribute-based authorization on IOS XR?
Medium441An SP uses traffic policing and shaping to manage bandwidth. Which statement best describes the difference between the two mechanisms?
Medium442An engineer is configuring NTP authentication on IOS XR routers to ensure secure time synchronization. What is required for NTP authentication to work?
Medium443A network engineer is configuring management plane security on IOS XR. Which TWO of the following are recommended practices? (Choose two.)
Easy444A service provider is deploying segment routing (SR) with MPLS data plane. The network uses OSPF as the IGP. Which configuration is required to enable SR-MPLS and ensure that routers advertise prefix-SIDs for their loopback interfaces?
Hard445A network engineer is troubleshooting QoS in a service provider environment. Customer traffic is marked with DSCP AF31 (011010) at the CE. On the PE router, the policy maps trust DSCP and sets the CoS to 4. However, core routers remark the DSCP to 0. What is the most likely cause?
Medium446A service provider wants to offer a point-to-point Layer 2 Ethernet service between two customer sites with strict SLAs. The solution must use MPLS pseudowires. Which MEF service type aligns with this requirement?
Hard447Which TWO methods can RESTCONF use to create a new data resource? (Choose two.)
Medium448Refer to the exhibit. An engineer notices that R1 has an LDP neighbor but 'show mpls forwarding-table' on R1 shows no label bindings for prefixes learned from R2. What is the most likely cause?
Medium449Which TWO statements about YANG data models are true? (Choose two.)
Easy450A service provider is deploying a new MPLS core with Segment Routing and requires fast convergence upon link failure. They plan to use TI-LFA (Topology Independent Loop-Free Alternate). What is a prerequisite for TI-LFA to provide protection against any single link failure?
Hard451Which TWO are benefits of using Segment Routing over LDP in a service provider core?
Medium452In an MPLS network, which field in the MPLS label header is used to carry QoS information between LSRs?
Medium453Which Cisco automation tool uses service models in YANG and communicates via NETCONF to orchestrate device configurations and lifecycle management?
Easy454An SP is designing a GPON access network. Which technology allows multiple ONUs to share the same fiber using different wavelengths for upstream and downstream?
Hard455An SP is deploying IS-IS fast convergence. Which mechanism triggers an immediate SPF computation when a neighbor fails?
Medium456Based on the exhibit, why is the route 10.10.10.0/24 from remote PE not installed in the VRF Customer-A on PE1?
Hard457An engineer is designing an MPLS L3VPN solution and must ensure that the provider edge (PE) routers can handle routing updates for multiple customers without interfering with each other. Which mechanism should be used on the PE routers?
Medium458A network operator wants to prefer a specific BGP route from a peer for a prefix. After applying a route-map to set local preference to 200, the route is still not preferred over a route from another peer with local preference 150. What could be the issue?
Medium459Which two statements correctly describe the use of DSCP values in the DiffServ model? (Choose two.)
Medium460The CE router behind the VRF interface is unable to reach the remote CE. Which configuration error is most likely the cause?
Medium461In a Cisco IOS XR router, which statement best describes process separation?
Hard462A router is receiving a BGP prefix with community 100:100. The operator wants to modify the local preference to 200 for this prefix. Which configuration will achieve this?
Easy463In BGP/MPLS IP VPN (L3VPN), which component provides customer isolation by maintaining separate routing tables per customer?
Medium464A service provider is deploying Segment Routing over IPv6 (SRv6) and needs to ensure that the forwarding plane can support SRv6 encapsulated packets. Which hardware capability is most critical for SRv6 at the line rate?
Hard465An SP network uses MPLS to provide IPv6 connectivity over an IPv4 backbone using 6PE. Which BGP extension is required on the provider edge routers to exchange IPv6 prefixes with an IPv4 next-hop?
Hard466During QoS troubleshooting, you capture traffic and see that DSCP markings are not being applied as configured. Which two common misconfigurations could cause this? (Choose two.)
Easy467A service provider is deploying IGMPv3 snooping on an MVPN network to optimize multicast forwarding. After configuration, multicast traffic is not reaching receivers. The source is sending to group 239.1.1.1. The PE router has received the IGMP report from the receiver, and the MDT is established. What is the most likely reason?
Easy468Which two are characteristics of the Anycast SID in Segment Routing? (Choose two.)
Hard469In BGP confederation, which attribute is used to prevent loops between sub-ASes?
Medium470An SP uses NSO for service orchestration. A new service requires YANG data validation to ensure that the 'bandwidth' leaf does not exceed 10000 kbps when the 'service-type' is 'premium'. Which YANG statement is appropriate?
Hard471While troubleshooting a customer complaint about slow data transfers, you notice that traffic from a specific site is being dropped. The QoS policy on the PE router includes a police command for the customer's traffic. The observed drop rate is exactly half of the configured police rate. What is the most probable reason?
Hard472An ISP is designing a new core network using MPLS-TE. They require very fast failure detection for link and node failures to minimize traffic loss. Which two technologies should they combine? (Choose two.)
Medium473In BGP, which attribute is used to prevent routing loops when route reflectors are deployed?
Medium474Which THREE are common causes of QoS misconfiguration on PE routers? (Choose three.)
Medium475In SRv6, which Segment Identifier (SID) format is used to encode a function that performs IPv6 decapsulation and forwarding?
Easy476An engineer is troubleshooting an MPLS VPN issue where CE1 cannot ping CE2 across the provider network. The PE routers are configured with MP-BGP and LDP. On PE1, 'show ip bgp vpnv4 vrf CUST' shows the route to CE2's loopback as valid, but 'show mpls forwarding-table' does not list a label for that prefix. What is the most likely cause?
Hard477A service provider is implementing EVPN to support multi-homing for a customer site. Which EVPN attribute ensures that only one of the PEs forwards traffic for a given Ethernet segment?
Medium478A service provider operates an MPLS-TE network using RSVP-TE with a full mesh of tunnels between core routers. The network uses OSPF as IGP with traffic engineering extensions. Recently, a new headend router PE-New was added and configured with several TE tunnels to remote destinations. However, some tunnels repeatedly go down after a few minutes and show in the 'down' state with the error 'Tunnel path option 0: no path to destination (TEDB lookup failed)'. The TE tunnels that remain up are those to destinations that are directly connected to the same OSPF area. The network has multiple OSPF areas (area 0, 1, 2) with inter-area routes redistributed. The operator suspects the issue is related to the TEDB (Traffic Engineering Database) not having complete information. Which action is MOST likely to resolve the issue?
Easy479Drag and drop the steps to configure EIGRP on a Cisco router into the correct order.
Medium480An SP is using MQC to configure QoS on a core router. Which TWO statements about MQC are correct? (Select two.)
Medium481A network operator is configuring RSVP-TE tunnels for traffic engineering in an MPLS core. They want to enforce that the tunnel path strictly follows a predefined set of hops. Which explicit path option should be used?
Medium482An SP is deploying EVPN to provide both L2 and L3 VPN services. Which advantage does EVPN offer over traditional VPLS for multi-homing?
Hard483An MPLS-TE tunnel is configured with Fast Reroute using link protection. The primary path traverses links A-B and B-C. If link B-C fails, which action does the head-end router take?
Hard484A service provider is deploying a new automation framework using Ansible to configure MPLS VPNs. They need to ensure that the Ansible playbook can handle configuration rollback in case of failure. Which Ansible feature should be used?
Medium485An SP is deploying SR-TE policies using a central controller. The controller needs to compute paths based on bandwidth and latency constraints. Which protocol is used between the controller and the routers to signal the SR-TE policies?
Hard486In OSPFv3 (for IPv6), which of the following statements is true regarding OSPFv3 packet format and authentication?
Hard487Which protocol is used by NSO to communicate with network devices for configuration management?
Easy488An SP is deploying BGP security features. Which three mechanisms can be used to prevent BGP route hijacking? (Choose three.)
Hard489Drag and drop the steps to configure MPLS LDP on a Cisco router into the correct order.
Medium490A service provider is experiencing high CPU usage on a router running BGP. Which action should be taken first to mitigate the issue without disrupting traffic?
Easy491A service provider is designing a core network with IS-IS as the IGP. To support MPLS traffic engineering, which IS-IS extensions are required?
Medium492Drag and drop the steps for the BGP route selection process (best path selection) in order.
Medium493Which TWO statements about EVPN Route Type 2 (MAC/IP advertisement) are correct?
Medium494To prevent MPLS label spoofing in a Layer 3 VPN, which configuration should be applied on the PE-CE link?
Medium495Which THREE characteristics apply to the BGP-LS (BGP Link State) protocol?
Hard496A service provider is deploying MPLS L3VPN to connect multiple customer sites. The PE router receives a route from a CE router via MP-BGP. Which attribute must the PE router add to the route before advertising it to the route reflector?
Medium497An engineer is implementing MPLS-TE Fast Reroute for link protection. Which protection method provides a backup tunnel that bypasses a specific link, protecting all LSPs traversing that link?
Medium498Which two mechanisms are used for congestion avoidance in a QoS policy? (Choose two.)
Medium499Which TWO MPLS VPN features are used to provide Layer 3 VPN services in a service provider network?
Easy500In EVPN with Integrated Routing and Bridging (IRB), which type of interface is used to connect the bridge domain to the IP-VRF for inter-subnet forwarding?
Hard501Which label distribution mode does LDP use by default in Cisco IOS?
Easy502In the context of EVPN, which BGP address family is used to advertise MAC/VPN routes between PE routers?
Hard503Refer to the exhibit. The router is configured as a route reflector for VPNv4. What is the requirement for the route reflector to propagate VPNv4 routes received from a client to other clients?
Hard504A large SP plans to deploy SR-TE tunnels across the backbone using an SDN controller for path computation. To ensure fast convergence and scalability, which automation approach should be used for tunnel creation?
Hard505An SP uses SR-PCE for traffic engineering. Which protocol does the SR-PCE use to communicate path computation requests and responses with path computation clients (PCCs)?
Hard506An SP network engineer is designing a new segment routing traffic engineering deployment within a single IGP area. The network consists of 50 core routers running IS-IS and MPLS. The engineer needs to steer traffic from Router A to Router D over a path that avoids high latency links. Which technology should be used to define and instantiate the explicit path?
Easy507A network administrator configures a class map to match VoIP traffic using 'match ip dscp ef' on a Cisco router. However, the QoS policy is not applying the expected marking to VoIP packets. What is a possible reason?
Medium508Which protocol is used to exchange label binding information in a classic MPLS network without Segment Routing?
Medium509Refer to the exhibit. An engineer makes a RESTCONF request to retrieve operational data for all interfaces, but the response shows only one interface. What is the most likely cause?
Hard510A service provider router running IOS XR is configured with Control Plane Policing (CoPP) to protect the route processor. Which type of traffic is most commonly rate-limited using CoPP in the control plane?
Easy511Which statement about the use of MTU in an MPLS network is correct?
Easy512In IOS XR, each routing protocol runs as a separate process. What is the primary benefit of this architecture?
Medium513In MPLS networks, the EXP bits are used for QoS. How are the 3-bit EXP values typically derived from DSCP markings at the ingress PE router?
Medium514A service provider is implementing control plane protection (CoPP) on an IOS XR router. Which protocol should be classified and rate-limited to prevent excessive control plane load due to routing updates?
Medium515Which THREE are valid SRv6 endpoint behaviors for VPN services? (Choose three.)
Hard516In BGP route selection, if two routes have the same weight, local preference, and are both locally originated, which attribute is considered next?
Medium517An ISP is implementing BGP PIC (Prefix Independent Convergence) for edge routers. Which BGP feature must be enabled to support PIC for core-facing failures?
Hard518A service provider is designing a BGP-based network. Which TWO are characteristics of BGP within a service provider core?
Medium519What is the default range of the Segment Routing Global Block (SRGB) on Cisco IOS XR?
Easy520An engineer is configuring an MPLS L3VPN and needs to ensure that the PE router installs VPNv4 routes from a remote PE into the VRF of a customer. The remote PE sends a VPNv4 route with route-target 100:1. Which configuration on the local PE causes the route to be imported into the VRF?
Hard521A large service provider is migrating its L2VPN services (VPWS and VPLS) to EVPN-based solutions to improve scalability and support multi-homing. During the rollout for a customer using VLAN-based EVPN for a data center interconnect, the operations team notices frequent MAC address flapping and broadcast storms on one of the attachment circuits connected to a PE router. The PE is configured for EVPN-MPLS with ESI multihoming using all-active mode. The customer has two PEs (PE1 and PE2) connected to the same CE via two separate Ethernet links. The MAC table on PE1 shows the same MAC address alternating between the local AC interface and the remote EVPN peers. What is the most likely cause and the correct action to resolve this issue?
Hard522A network engineer is troubleshooting slow BGP convergence after a link failure in an MPLS core. Which feature can be enabled on the PE routers to fast-failover traffic upon BGP next-hop unreachability?
Medium523An SP is deploying IS-IS fast convergence using Partial Route Computation (PRC). Under which condition does PRC occur?
Hard524In MPLS, which forwarding table is used to determine the outgoing label and interface for a labeled packet?
Easy525In the context of SR-PCE, which protocol does the PCE use to communicate with the path computation client (PCC) to set up SR-TE policies?
Medium526A service provider is configuring BGP route reflectors to scale iBGP. Which two mechanisms are used to prevent routing loops in a route reflector environment? (Choose two.)
Medium527In MPLS, which label operation is performed by a Penultimate Hop Popping (PHP) router?
Medium528Which BGP attribute is used to prefer a specific entry point into an AS when multiple ASBRs are advertising the same prefix to a neighboring AS?
Medium529Which encapsulation technology is commonly used in service provider networks to separate subscriber traffic in an Ethernet aggregation network?
Easy530A network engineer is using Cisco NSO to create a managed L3VPN service. After deploying the service, the engineer notices that the configuration on the devices is not being updated. What is the most likely cause?
Easy531In SP automation, which protocol is used by NSO to communicate with network devices for configuration management?
Medium532To secure NTP in a service provider network, which feature should be enabled on IOS XR routers to prevent time synchronization with unauthorized NTP servers?
Easy533A service provider is designing an OSPF network with multiple areas. Which TWO area types allow external routes (Type 5 LSAs) to be injected into the area? (Choose two.)
Medium534Which two statements about MPLS label distribution are correct? (Choose two)
Medium535An SP uses NSO with a YANG service model to provision L3VPNs. Which database in NSO stores the configuration and state for all managed devices?
Hard536Which label distribution protocol is replaced by segment routing in SR-MPLS deployments?
Easy537A service provider is designing a QoS policy for a business VPN service that carries voice, video, and data. The policy must ensure that voice (EF) is never dropped even during congestion, while video (AF41) and data (AF21) share the remaining bandwidth in a ratio 2:1. Which queuing strategy should be used?
Medium538An SP engineer is designing a QoS policy for a customer with three traffic classes: voice (priority), premium data (bandwidth guarantee), and best effort. The total bandwidth is 10 Mbps, with voice limited to 1 Mbps, premium data to 4 Mbps, and best effort to the remaining. Which policy-map configuration correctly uses LLQ and CBWFQ?
Hard539Which TWO statements about MPLS label operations are correct? (Choose two.)
Medium540In the MQC (Modular QoS CLI) framework, which component is used to match traffic based on DSCP values?
Easy541Which THREE steps are required when configuring MPLS L3VPN on a PE router? (Choose three.)
Medium542Which architecture feature of IOS XR ensures that a failure in one routing protocol process does not affect other processes on the same router?
Medium543An engineer is designing an MPLS L3VPN for a customer with multiple sites. The customer requires overlapping IP addresses between sites. Which method allows the provider to support overlapping customer addresses?
Medium544An engineer is configuring SR-MPLS in an IS-IS network. Which IS-IS TLV is used to advertise the Segment Routing Global Block (SRGB) and Node-SID assignments?
Medium545Which THREE YANG data nodes are part of the Cisco-IOS-XR-qos-ma-cfg module for defining a QoS policy-map? (Choose three.)
Hard546When implementing RPKI for BGP origin validation, which three states can a route be marked as? (Choose three.)
Hard547In SR-MPLS, which mechanism replaces LDP for label distribution?
Easy548Which THREE of the following are key characteristics of Cisco IOS XR operating system?
Hard549A service provider is automating QoS policy deployment using Cisco NSO and YANG. During validation, the engineer discovers that the pushed policy is not taking effect. Which three possible causes should be investigated? (Choose three.)
Hard550An SP is deploying BGP FlowSpec (RFC 8955) to distribute traffic filtering rules. Which component is responsible for disseminating FlowSpec rules to routers in the network?
Medium551In Cisco IOS XR architecture, using Secure Domain Routers (SDRs) allows partitioning a physical router into multiple logical routers. Which statement about admin plane and SDRs is correct?
Hard552A service provider wants to ensure that customer traffic is not impacted during a planned maintenance on a core LSR in an MPLS network. Which MPLS feature should be used?
Easy553A network engineer needs to automate configuration of multiple Cisco routers and wants to use a protocol that supports both datastore operations and selective retrieval of configuration. Which protocol should be used?
Easy554Which two are requirements for deploying Segment Routing in a service provider network? (Choose two.)
Medium555Which Cisco router platform is designed for the aggregation layer and runs IOS XR, supporting both L2 and L3 services at high density?
Easy556In MPLS-TE, what is the purpose of the Explicit Route Object (ERO) in the RSVP PATH message?
Easy557An engineer is troubleshooting BGP convergence. The router has multiple paths for a prefix, but it selects a path with a lower local preference over a path with a higher local preference. The higher local preference path is from an EBGP peer. What could cause this?
Hard558A network engineer is designing an MPLS core using Segment Routing. They want to minimize label stack depth while still providing fast convergence using TI-LFA. Which prefix-SID assignment strategy should be used?
Easy559In a VXLAN EVPN deployment, a host sends a broadcast ARP request. Which component in the fabric is responsible for replying on behalf of the target host to reduce flooding?
Hard560Which label operation is performed on a router when an MPLS packet arrives with a top label that matches a local label assigned to a directly connected prefix?
Easy561An SP is deploying Inter-AS MPLS VPN option B. Which design characteristic is unique to Option B compared to Option A?
Medium562A network engineer is designing a new MPLS core. Which three of the following are recommended best practices for MPLS LDP configuration? (Choose three.)
Easy563Which TWO QoS mechanisms are used to provide congestion avoidance? (Choose two.)
Medium564In SRv6 micro-SID (uSID) compression, which part of the SID is used to carry a compressed instruction set, enabling efficient forwarding with a shorter SID list?
Hard565In a Carrier Supporting Carrier (CSC) architecture, which condition is necessary for the customer carrier's BGP routes to be carried over the provider carrier's MPLS backbone?
Hard566In an MPLS L3VPN network, a customer has overlapping IP addresses between two VPNs. The provider edge routers are configured with VRF instances. Which method ensures that traffic from one VPN does not leak into the other when using MPLS labels?
Hard567Which BGP extended community is used to signal the OSPF domain ID between PE routers in an MPLS L3VPN when OSPF is the PE-CE protocol?
Medium568Refer to the exhibit. An engineer is troubleshooting packet loss in the MPLS core. For prefix 10.3.3.0/24, the outgoing label is 'Untagged'. What does this indicate?
Medium569An SP is deploying 6VPE (IPv6 L3VPN). Which BGP extensions are used to carry IPv6 VPN prefixes?
Hard570A service provider is deploying EVPN-MPLS for L2VPN services. The customer requires that MAC addresses learned from one PE are not advertised to other PEs unless they are active. Which EVPN route type is used for MAC address withdrawal?
Medium571A network operator is deploying Segment Routing with TI-LFA across an OSPF network. After configuring OSPF with 'segment-routing mpls' and 'fast-reroute per-prefix', they notice that backup paths are not being installed for some prefixes. 'Show ip ospf segment-routing protected' shows 'No FRR backup' for those prefixes. What is a possible reason?
Hard572A service provider is deploying MPLS L3VPN and wants to ensure that routes from a specific customer VRF are only advertised to a specific remote PE. Which mechanism should be used?
Medium573Which BGP attribute is used to influence inbound traffic to an AS by advertising a preferred path to a neighbor AS?
Medium574A service provider is migrating from a legacy MPLS network using LDP to Segment Routing (SR-MPLS). They have enabled SR on all routers and are using IS-IS. The migration plan is to keep LDP running alongside SR during the transition. After enabling SR, some traffic is being forwarded using the SR path, but the network operator notices that some CEs in an L2VPN are experiencing packet loss during failover scenarios. Troubleshooting shows that the primary pseudowire is using SR labels, but the backup pseudowire is still using LDP labels. The backup path is not working correctly. What is the most likely cause?
Easy575A service provider is experiencing intermittent multicast issues in their core network. They use PIM-SM with a static RP at 10.1.1.1. The multicast traffic originates from a source connected to PE1 and is received by customers connected to PE2. Recently, after a firewall upgrade between the PE routers and the core, some multicast streams stopped working, while others continue. The network team notices that 'show ip mroute' on PE2 shows the (*, G) entry but not the (S, G) entry for the affected groups. The RP is reachable via OSPF. The firewall logs show no dropped packets for known multicast addresses. Which action should the engineer take to restore full multicast forwarding?
Hard576A service provider is implementing QoS for voice traffic using the DiffServ model. Which DSCP value should be assigned to voice packets to ensure the highest priority treatment?
Easy577A service provider deploys BGP route reflectors in the core. Which mechanism prevents routing loops within the route reflector cluster?
Hard578A service provider operates a large MPLS VPN network using OSPF as the IGP and LDP for label distribution. The PE routers (PE1, PE2, PE3) are connected to a core of P routers. Recently, a new link was added between P2 and P3. After the link came up, the engineering team noticed that several VPN routes that were previously reachable via PE2 are now being blackholed when traffic is sent from PE1 to those prefixes. The teams verify that the VPNv4 routes are present in the BGP table on PE1 with valid next-hops, but traffic fails. The traceroute from PE1 to the CE behind PE2 stops at P2. The show mpls forwarding-table on P2 shows the correct label for the VPN prefix, but the outgoing interface is null. Which action should the engineer take to resolve the issue without causing additional disruption?
Hard579An SP is designing a QoS policy for a customer VPN that carries voice, video conferencing, and bulk data. The voice traffic requires low latency, video conferencing requires assured bandwidth, and bulk data should use any remaining bandwidth. Which queuing strategy should be applied on the PE-CE link?
Medium580A network engineer is automating BGP configuration using the Cisco IOS-XE YANG model. They want to enable the 'always-compare-med' feature under BGP. Which XPath expression correctly targets this leaf?
Hard581A service provider wants to provide IPv6 connectivity over an existing MPLS IPv4 core using BGP extensions. Which technology should be used?
Hard582An MPLS network is experiencing micro-loops during convergence after a link failure. The network uses LDP and IS-IS as IGP. Which of the following solutions can prevent micro-loops during IGP convergence without requiring additional protocols?
Hard583Which OSPF network type elects a Designated Router (DR) and Backup Designated Router (BDR) to reduce the number of adjacencies on a multi-access segment?
Easy584A service provider is deploying MPLS L2VPN using Virtual Private Wire Service (VPWS). After configuration, the two CEs cannot ping each other. The PE routers show the xconnect interface is up, but no MAC addresses are learned. What is the most likely cause?
Medium585A service provider is troubleshooting an L2VPN where a CE is unable to ping the remote CE. The PE-CE interfaces are up, and the pseudowire status shows 'up'. Which two actions should be taken to further isolate the issue? (Choose two.)
Medium586Which TWO are characteristics of Segment Routing (SR-MPLS)? (Choose two.)
Easy587A service provider is migrating from LDP to Segment Routing in its MPLS core. The team has enabled IS-IS as the IGP and configured segment routing under the IS-IS process on all core routers. However, after the migration, some LSPs are not being signaled correctly and traffic is blackholing. Which action should be taken to ensure seamless interworking between LDP and SR during the migration?
Medium588In Segment Routing, what is the role of the 'Prefix-SID'?
Medium589An engineer configures MPLS TE tunnels. After configuration, the tunnel remains down. The 'show mpls traffic-eng tunnels' output shows 'Tunnel is down - path computation failed'. What is the most likely cause?
Hard590During a network migration from EIGRP to OSPF, you notice that some routes are being redistributed incorrectly, causing routing loops. The OSPF domain uses area 0 and area 1. The EIGRP domain uses AS 100. Which configuration change would best prevent loops during the migration?
Hard591Which BGP address family must be used to exchange VPNv4 routes between PE routers in an MPLS L3VPN?
Medium592A service provider is deploying IS-IS with wide metrics to support traffic engineering. Which two statements about IS-IS wide metrics are correct?
Easy593Which TWO BGP attributes are considered during the best path selection process and can be used to influence outbound traffic from an AS? (Choose two.)
Medium594A service provider is deploying uRPF on customer-facing interfaces to prevent IP spoofing. The network has asymmetric routing due to multiple upstream connections. Which uRPF mode should be used?
Medium595A service provider is implementing network slicing for 5G services. Which of the following is NOT a typical characteristic of a network slice?
Hard596An SP network experiences congestion on a core link. The QoS policy uses CBWFQ with classes for voice (LLQ), video (bandwidth 30%), and data (bandwidth 50%). During congestion, voice traffic spikes to 25% of the link. What happens to video and data traffic?
Hard597A customer reports that CE routers attached to PE1 and PE2 in the same VRF cannot ping each other. Based on the exhibit, what is the most likely cause?
Medium598A service provider is designing a Layer 3 MPLS VPN for a customer with two sites. The customer requires fast convergence in case of a PE-CE link failure. Which routing protocol should be used between PE and CE to achieve the fastest convergence?
Easy599Which TWO statements about MPLS label operations in a service provider core are correct? (Choose two.)
Hard600Which Cisco router platform is designed for high-density 100GE and uses IOS XR, making it suitable for the core/backbone of a service provider network?
Medium601A service provider is deploying L3VPN using BGP/MPLS. Which mechanism ensures customer isolation in the provider network?
Medium602During a DDoS attack, an SP uses Cisco Peakflow for detection and wants to drop attack traffic at the edge routers. They decide to use S/RTBH. Which action must be performed on the edge routers to trigger the black hole?
Hard603When configuring an MPLS-TE tunnel with affinity/constraint-based routing, what is the effect of assigning a link attribute of 'red' and setting the tunnel's affinity to include 'red' with the 'include-all' keyword?
Medium604An SP engineers want to restrict management access to their IOS XR routers. Which combination provides the most secure management plane hardening?
Easy605Which TWO conditions must be met for a BGP route to be considered valid and used for forwarding?
Medium606A service provider uses MP-BGP with IPv6 address family. They notice that routes redistributed from OSPFv3 are not being advertised to iBGP peers. The OSPF routes are internal. What is a likely reason?
Hard607An engineer is troubleshooting MPLS forwarding. On a router, the 'show mpls forwarding-table' command displays that for a specific FEC, the outgoing label is 'Untagged'. What does this indicate?
Easy608Which THREE are EVPN multi-homing functions? (Choose three.)
Hard609An engineer is configuring MPLS LDP on a Cisco router. The router is using downstream unsolicited mode and liberal label retention. Which statement correctly describes the label advertisement behavior?
Medium610In IOS XR, which process is responsible for managing the configuration database and commit operations?
Medium611Which MEF service type defines a point-to-point Ethernet connection, often used for business connectivity?
Medium612An ISP is implementing MAP-T to transition to IPv6. Which of the following best describes MAP-T?
Hard613Which IOS XR feature allows an administrator to grant specific commands to a user based on their role, using task groups?
Hard614Which RESTCONF HTTP method should be used to replace the entire configuration of a device interface?
Medium615An SP is migrating from an MPLS LDP-based network to Segment Routing. They want to ensure that existing LDP LSPs continue to work alongside SR LSPs during the migration. Which mechanism should be configured?
Hard616A service provider deploys uRPF on customer-facing interfaces to prevent IP spoofing. They have a multihomed customer with asymmetric routing. Which uRPF mode should be used to avoid dropping legitimate traffic?
Hard617A service provider is experiencing suboptimal routing due to BGP route reflection. To improve path selection while maintaining IBGP scalability, which feature should be implemented?
Medium618An SP network engineer is hardening management plane access on IOS XR routers. They require authentication, authorization, and accounting (AAA) with per-command authorization and role-based access control. Which combination should be used?
Medium619A service provider is implementing L2VPN using EoMPLS. The CE devices are connected to two different PE routers, and the PE routers are configured with xconnect under the attachment circuit. Which command is required on the PE routers to establish the pseudowire?
Easy620An engineer is configuring LDP in an MPLS network. Which THREE are valid label distribution modes for LDP?
Hard621A service provider is implementing network automation using YANG data models. They need to ensure that the automation solution supports both configuration and operational state data retrieval. Which NETCONF operation should be used to retrieve operational state data?
Medium622In NSO, which statement best describes the function of the CDB (Configuration Database)?
Hard623Drag and drop the steps to configure a PPPoE client on a Cisco router into the correct order.
Medium624In SRv6, which endpoint behavior is used for decapsulating the outer IPv6 header and performing an IPv4 lookup (e.g., for L3VPN)?
Hard625In SR-MPLS, which THREE statements correctly describe the properties of Adjacency SIDs? (Choose three.)
Hard626A service provider is deploying L3VPN. Which mechanism ensures that customer routes are isolated and not leaked between different customers?
Medium627Which THREE statements are true regarding NSO's NED? (Choose three.)
Hard628Which Cisco router platform is designed for the core/backbone of a service provider network, supporting high-density 100GE interfaces and massive scale for MPLS and Segment Routing?
Medium629Match each network automation tool to its primary use.
Medium630A service provider wants to provide IPv6 connectivity over an MPLS IPv4 core using 6PE. Which BGP extension is required on the provider edge routers?
Hard631Which THREE statements about implementing QoS in an MPLS VPN environment are correct? (Choose three.)
Hard632Refer to the exhibit. Which statement is true regarding the forwarding entry for 10.2.2.0/24?
Hard633Refer to the exhibit. Which of the following is true about the BGP table?
Medium634What is the purpose of the SEL (NSAP Selector) field in an IS-IS NET address?
Easy635In the context of IOS XR commit/rollback configuration model, which command is used to apply a set of configuration changes as a single atomic operation?
Medium636In IS-IS, which TLV is used to carry traffic engineering information for MPLS-TE?
Hard637A service provider is designing an OSPF network with multiple areas. Which two area types prevent Type 5 LSAs from being flooded? (Choose two.)
Medium638In IOS XR, each routing protocol runs as a separate process. What is the primary benefit of this architecture?
Medium639In an MPLS L3VPN network, a route reflector (RR) is used to distribute VPNv4 routes between PE routers. After a new PE router (PE4) is added, some VPN routes are not being received by other PEs. Which TWO actions should be investigated to resolve the issue? (Choose two.)
Hard640Refer to the exhibit. A PE router has this BGP configuration. The CE router is advertising a default route via eBGP. However, the PE is not installing the route in the VRF table. What is the most likely cause?
Medium641Which TWO of the following are characteristics of the IOS XR operating system architecture? (Select two.)
Medium642Which TWO are valid benefits of automating QoS policy management in a large SP network? (Choose two.)
Easy643Which technology allows an IPv6-only customer edge router to connect to an MPLS provider edge router using IPv4 transport, encapsulating IPv6 packets in MPLS with a labeled IPv4 next-hop?
Easy644A large ISP is designing a multicast architecture to support IPTV, requiring high availability and minimal traffic convergence. Which RP placement design is most appropriate?
Hard645A service provider is transitioning from LDP-based MPLS to Segment Routing (SR-MPLS). Which TWO statements correctly describe differences or interoperability considerations? (Choose two.)
Medium646Drag and drop the steps to configure a VLAN on a Cisco switch into the correct order.
Medium647An SP is implementing CGNAT to conserve IPv4 addresses. For legal compliance, they must log all NAT translations with timestamps and source/destination information. Which CGNAT feature should be enabled?
Hard648A service provider is implementing EVPN with MPLS data plane. Which encapsulation type is used in MPLS EVPN to carry Ethernet frames across the MPLS network?
Hard649An SP is deploying IPv6 using 6VPE. Which THREE components are required? (Choose three.)
Hard650An OSPF network is configured with RSVP-TE. Which OSPF extension is used to advertise TE link attributes such as bandwidth and administrative group?
Medium651Which NETCONF operation is used to retrieve the entire running configuration from a network device?
Easy652A service provider is designing a new MPLS core network using Segment Routing with MPLS data plane. They require traffic engineering capabilities to optimize bandwidth utilization. Which technology should be used to compute optimal paths based on IGP link attributes and bandwidth constraints?
Hard653Which TWO of the following are characteristics of MPLS-TE (Traffic Engineering)?
Medium654An SP is deploying DDoS mitigation using BGP FlowSpec. Which THREE types of actions can be encoded in a FlowSpec rule? (Choose three.)
Medium655An SP engineer is configuring a policy-map to implement hierarchical QoS. Which two statements are correct when using MQC for hierarchical QoS? (Choose two.)
Medium656Which TWO statements correctly describe Segment Routing characteristics? (Select two.)
Medium657Match each BGP attribute to its category or purpose.
Medium658An SP engineer is configuring NTP authentication on IOS XR routers in the management plane. Which TWO statements about NTP authentication are correct? (Choose two.)
Hard659An engineer is configuring QoS for voice traffic on a Cisco router. Which marking should be applied to voice packets to ensure proper end-to-end prioritization?
Easy660An engineer is troubleshooting a QoS policy on a Cisco router. The policy is intended to mark voice traffic with DSCP EF and video traffic with DSCP AF41. After applying the policy, voice traffic is correctly marked, but video traffic is marked as DSCP 0. What is the most likely cause?
Medium661When automating service provisioning with NSO, which three components are part of the NSO architecture? (Choose three.)
Hard662Which TWO are functions of the MPLS data plane?
Easy663A service provider is deploying a new MPLS core network. The network has four routers: P1, P2, PE1, and PE2. OSPF is used as the IGP. The engineer configures MPLS LDP on all interfaces. After enabling LDP, the engineer notices that the LDP session between P1 and P2 is established, but no labels are exchanged for the loopback0 interfaces of PE1 and PE2. The loopback0 addresses are advertised in OSPF. The engineer verifies that the OSPF routes are present in the routing table of all routers. What is the most likely reason for the missing labels?
Medium664An engineer is configuring RSVP-TE fast reroute for link protection. Which protection method uses a pre-configured bypass tunnel that protects multiple LSPs on the same link?
Medium665Which THREE are benefits of implementing MPLS-TE in a service provider core?
Medium666A service provider needs to offer L3VPN services to multiple customers, each with overlapping IP addresses. The provider plans to use MPLS VPNs with VRFs. Which statement is TRUE regarding the configuration of VRFs on the PE routers?
Easy667A service provider is troubleshooting an MPLS L3VPN issue where a CE router is receiving the VPN route from the PE but cannot ping the remote CE's loopback. The PE shows that the VPN label is assigned but cannot route the packets. Which command would help determine if the remote PE is correctly resolving the BGP next-hop via IGP?
Hard668A service provider is deploying MPLS-TE with RSVP-TE in their core network. They notice that some LSPs are not being established due to resource contention. Which action would best address this issue without redesigning the entire traffic engineering deployment?
Medium669An engineer is deploying Segment Routing in an MPLS network. To ensure that routers can forward packets based on SR-MPLS labels without requiring LDP, which requirement must be met?
Hard670Which TWO statements about MPLS label operations are correct? (Choose two.)
Medium671A network engineer at a service provider is using Cisco NSO to automate the provisioning of VLANs on thousands of access devices. The engineer creates a service using a custom YANG model and deploys it to a set of devices. However, the deployment fails with a 'failed to reach devices' error for some devices, while others succeed. The engineer checks device connectivity and confirms all devices are reachable via SSH and NETCONF. The engineer also verifies that the NSO device list is accurate and includes all target devices. What is the most likely cause of the failure?
Medium672An MPLS core network uses LDP to distribute labels. An engineer wants to verify that the LDP session between two routers is up and exchanging labels. Which command should be used?
Easy673A service provider uses BGP route reflectors to scale iBGP. A route reflected from a route reflector arrives at a client with the originator-id set. What is the purpose of the originator-id attribute?
Medium674An SP engineer is configuring hierarchical QoS on a PE router. The parent policy shapes the traffic to 10 Mbps, and the child policy applies LLQ for voice and CBWFQ for data. What is the primary purpose of using policing within the LLQ child policy?
Medium675A service provider is implementing QoS on an MPLS network to support voice, video, and data traffic. Which queuing mechanism provides the lowest latency for real-time traffic?
Easy676A client reports intermittent connectivity issues when accessing a server across a provider MPLS network. The issue occurs only during peak hours. Which component should be checked first?
Easy677An SP engineer is configuring hierarchical QoS on a PE router to enforce a per-subscriber bandwidth contract of 10 Mbps and prioritize voice within that contract. Which MQC configuration sequence is correct?
Medium678A service provider is implementing BGP security using RPKI. Which three components are required for RPKI-based BGP origin validation? (Choose three.)
Hard679An SP customer reports intermittent voice quality issues. The engineer wants to measure jitter and packet loss between two remote sites using Cisco IP SLA. Which IP SLA operation type should be configured?
Easy680Match each MPLS VPN technology to its description.
Medium681An engineer is troubleshooting MPLS traffic engineering tunnels and needs to verify path calculation and RSVP errors. Which command should be used?
Hard682Which THREE are valid methods to provide fast convergence in an MPLS/Segment Routing network? (Select three.)
Hard683Which THREE of the following are valid IS-IS TLV types used to support traffic engineering and segment routing? (Choose three.)
Hard684An ISP operates an MPLS Layer 3 VPN backbone. A customer, Corporation X, has four sites (A, B, C, D) each connected to a different PE router (PE-A, PE-B, PE-C, PE-D). They use OSPF as the CE-PE routing protocol. Sites A, B, and C can exchange routes without issue. However, Site D suddenly loses connectivity to Site B, though it can still reach Sites A and C. Show commands on PE-D reveal that the VRF for Corporation X imports RT:100:200, and the route for Site B (prefix 10.10.20.0/24) is present in the BGP VPNv4 table with RT:100:200 and next-hop 10.0.2.2. The OSPF neighbor between PE-D and the CE at Site D is up, and no route filters are configured. ‘ping 10.10.20.0’ from PE-D fails. What is the most likely cause of the issue?
Hard685Which MPLS VPN technology allows a service provider to offer overlapping IP addresses to different customers while using a single routing table per VPN?
Medium686A network engineer is troubleshooting a NETCONF session that fails to establish between a controller and a router. The router supports NETCONF over SSH on port 830. The controller can reach the router but the session fails. What is the most likely cause?
Hard687A service provider has recently deployed MPLS L3VPN to provide IP connectivity to multiple enterprise customers. One customer reports that they cannot reach a remote site that is connected to a different PE router. The engineer checks the BGP VPNv4 table on the customer's PE and sees the route for the remote site, but the next-hop is unreachable. The interface between the PE and P routers is up/up, and IGP reachability to the PE's loopback is fine. What is the most likely cause? Consider that the network uses LDP for label distribution and OSPF as the IGP.
Hard688A service provider is deploying L3VPN with inter-AS option B (ASBR-to-ASBR). Which TWO statements are true about this design?
Hard689Which TWO of the following are services that can be offered using MPLS Layer 3 VPN (L3VPN) technology? (Select two.)
Easy690An SP network engineer needs to implement hierarchical QoS on a PE router to shape customer traffic to a contracted rate of 10 Mbps while providing priority for voice traffic and bandwidth guarantee for critical data. Which MQC configuration correctly achieves this?
Hard691A service provider is migrating their MPLS core network to Segment Routing (SR-MPLS). All existing core routers run IOS-XR and are configured with an SRGB of 16000-23999 and OSPF as the IGP. A new router (R5) is added as a PE. The engineer configures R5 with the same SRGB and enables segment-routing under OSPF. However, when configuring an SR-TE policy from R5 to the remote loopback 10.0.0.1 on R1, the policy remains down. Show commands reveal that R5 is not learning the prefix-SID for 10.0.0.1. On R1, the prefix-SID is configured with index 100. The engineer verifies that OSPF adjacencies are up and that R5 can ping 10.0.0.1. What is the most likely cause of the issue?
Medium692In an MPLS L3VPN, how can a service provider prevent a CE device from learning the MPLS label stack and potentially spoofing labels?
Medium693An ISP is designing an MPLS core network and needs to choose an IGP that supports fast convergence. Which IGP meets this requirement and is most commonly used in MPLS core networks?
Easy694In an MPLS network using RSVP-TE for traffic engineering, which two mechanisms can be used for fast reroute (FRR) protection? (Choose two.)
Medium695Which access technology uses a passive optical splitter to deliver broadband services to multiple subscribers over a single fiber?
Easy696An engineer configures the 'set-overload-bit' command on an IS-IS router. What is the immediate effect on the network?
Medium697Which TWO of the following are advantages of segment routing over traditional LDP-based MPLS? (Choose two.)
Medium698In MPLS forwarding, what label operation does a transit LSR perform on the top label of a labeled packet?
Easy699Which MPLS-based service provides point-to-point Ethernet connectivity over a service provider network, emulating a wire?
Easy700A service provider wants to prevent IP spoofing at the customer edge by verifying that the source IP address of incoming packets is reachable via the interface they arrive on. Which uRPF mode should be used?
Easy701A customer is experiencing intermittent packet loss in an MPLS L3VPN network. The PE routers show no errors on interfaces. Which tool can help isolate the issue by showing the complete path a packet takes through the MPLS network?
Medium702A network operator deploys a QoS policy on a route reflector to classify traffic based on BGP community values. However, the policy is not matching the intended traffic. Which is the most likely cause?
Easy703An SP network uses NSO for service orchestration. Which component in NSO provides the abstraction layer to communicate with different device types using protocols like NETCONF or CLI?
Medium704A service provider is deploying Segment Routing Traffic Engineering (SR-TE) with a Path Computation Element (PCE). The PCE fails to compute a path for an SR-TE policy configured with constraint 'avoid nodes in affinity red'. The core network has red affinity assigned to several nodes. Which is the most likely cause?
Hard705A service provider has a network with multiple PE routers providing MPLS L3VPN services. Customers are complaining that some remote sites are unreachable after a recent software upgrade on PE1. Upon investigation, you notice that PE1 is receiving BGP VPNv4 routes from the route reflector, but some routes are not being installed in the VRF routing table. PE1 is configured with BGP additional-path capability and has a route policy that selects only the best path. The VRF on PE1 has import and export route targets configured correctly. The missing routes have a higher local preference but are not selected due to a tie-break in BGP path selection. Which action should be taken to ensure that all valid routes are installed in the VRF?
Hard706A service provider is deploying OSPFv3 for IPv6 in its core. The network uses multiple areas. Which LSA type is used by OSPFv3 to advertise prefix information for inter-area routes?
Medium707An SP has configured MPLS TE tunnels for traffic engineering. To verify the status of the TE tunnels, which command provides the most relevant information?
Easy708A service provider is deploying a BNG for subscriber management. Which protocol is typically used to authenticate subscribers and assign IP addresses in a PPPoE-based broadband network?
Easy709A service provider is deploying a point-to-point Layer 2 VPN across an MPLS network using Ethernet over MPLS (EoMPLS) with Martini encapsulation. The customer requires transparent transport of VLAN tags (Q-in-Q) between two sites. The provider configures the attachment circuits on the PE routers as VLAN subinterfaces with dot1q encapsulation. After configuration, the customer reports that only untagged frames pass through the pseudowire; double-tagged frames are dropped at the egress PE. Which action resolves the issue?
Easy710A service provider uses BGP FlowSpec (RFC 8955) to mitigate DDoS attacks. Which component in the network is responsible for originating the FlowSpec rules and distributing them to routers?
Hard711A service provider wants to gracefully shut down a BGP session to a customer for maintenance without causing traffic loss. Which BGP feature should be used to signal the peer to reroute traffic before the session is brought down?
Hard712Which QoS mechanism marks packets at the edge of the network to classify traffic into different service classes?
Easy713A service provider is migrating from OSPF to IS-IS in the core network. They need to support Traffic Engineering and Segment Routing. Which IS-IS TLV must be supported to carry TE information?
Medium714Which TWO are key features of IOS XR architecture? (Choose two.)
Medium715In Segment Routing over IPv6 (SRv6), what is the function of the SRH (Segment Routing Header)?
Hard716Which Cisco platform is designed for the core/backbone of large service provider networks and offers high scalability with IOS XR?
Hard717In IOS XR architecture, what is the purpose of Secure Domain Router (SDR)?
Easy718Refer to the exhibit. Which statement is correct about the LDP bindings for prefix 10.0.0.0/24?
Hard719An engineer notices that MPLS VPN traffic is taking a suboptimal path because the MPLS label binding for the BGP next-hop loopback is missing. What is the most likely cause?
Easy720Which MEF service type provides a multipoint-to-multipoint Ethernet virtual connection?
Easy721What is the primary function of the aggregation layer in a service provider network?
Easy722An SP is designing a MPLS L3VPN service with BGP as the PE-CE routing protocol. They want to ensure that the CE router does not become a transit router between two sites. Which BGP feature should be configured on the PE to prevent the CE from advertising routes received from one site to another?
Hard723Based on the exhibit, which statement is true about the applied QoS policy?
Medium724In an SP network using NSO for service orchestration, which component abstracts device-specific CLI or SNMP interactions into a common model for NETCONF/RESTCONF southbound communication?
Hard725An SP is managing a large MPLS network and needs to verify the MPLS forwarding entries for a specific VRF. Which command provides the most complete information for the VRF?
Easy726In SR-MPLS, when a router receives a packet with an MPLS label corresponding to an Adjacency SID, what operation does it perform?
Medium727In EVPN multi-homing with all-active mode, which mechanism is used to elect a designated forwarder (DF) for broadcast, unknown unicast, and multicast (BUM) traffic on a given Ethernet segment?
Medium728Drag and drop the steps to configure a GRE tunnel on a Cisco router into the correct order.
Medium729Which component of the IOS XR architecture is responsible for managing the system configuration and providing a separation of control plane for multiple tenants?
Easy730Based on the exhibit, which prefix is NOT reachable via MPLS forwarding?
Medium731A network engineer needs to perform maintenance on a BGP router without causing traffic loss. They plan to use BGP Graceful Shutdown (GSHUT). What does GSHUT do?
Easy732A network engineer is designing a Segment Routing over IPv6 (SRv6) deployment. Which TWO statements are true about the SRv6 SID format and behaviors? (Choose two.)
Medium733In OSPFv3, which statement correctly describes how OSPFv3 differs from OSPFv2 regarding router IDs and adjacencies?
Medium734Which TWO are essential components for deploying EVPN in a service provider network?
Hard735A service provider is implementing security for BGP peering. Which two methods help prevent BGP route hijacking? (Choose two.)
Medium736In the DiffServ model, which DSCP value is used for Voice over IP (VoIP) traffic to ensure Expedited Forwarding (EF) per-hop behavior?
Easy737During a DDoS attack, an SP wants to drop traffic destined to the victim IP at the network edge without affecting other traffic. Which technique should be used to achieve this by propagating a black-hole route from a trigger router to all edge routers?
Medium738Which MPLS-based service provides point-to-point Ethernet connectivity over a service provider network, also known as a pseudowire?
Easy739A network architect is designing a model-driven telemetry solution for a large SP network. Which three factors are critical to consider when configuring telemetry subscriptions? (Choose three.)
Hard740In BGP route selection, when comparing two routes with the same LOCAL_PREF, which attribute is considered next?
Medium741A service provider's network core runs IS-IS as the IGP. After adding a new router, some routers have incomplete LSP databases. The new router's interfaces are up, and IS-IS adjacency is up with neighbors. What is the cause? The network has a mix of interface MTUs, with some links having MTU 1500 and others 4470.
Easy742Which TWO are possible causes for a NETCONF session failing to establish with a Cisco IOS-XE device?
Hard743An SP is using NETCONF with YANG to automate VRF provisioning. The engineer notices that the NETCONF session is established but configuration changes are not applied. Which issue is most likely?
Hard744Which LDP label distribution mode is characterized by a router advertising labels for all prefixes in its routing table to all neighbors, regardless of whether they are needed?
Medium745A service provider is configuring VRF-lite between two CE routers connected to the same PE. The CE routers are in different VRFs. Which command allows the PE router to forward traffic between the VRFs?
Easy746During an MPLS network migration from LDP to Segment Routing, an engineer notices that some routers are not advertising Prefix-SIDs for certain loopbacks. The IGP is OSPF. What configuration is required on these routers to advertise Prefix-SIDs?
Medium747A service provider wants to provide a point-to-point Ethernet service between two customer sites with strict Service Level Agreements (SLAs). Which MEF service type should be used?
Medium748Which TWO of the following are characteristics of MPLS L3VPN architecture? (Choose two.)
Medium749An engineer is configuring QoS on a service provider edge router to prioritize real-time traffic. Which queuing mechanism provides the lowest latency and jitter for voice traffic?
Easy750Which two actions are performed by an MPLS label edge router (LER) when it receives an unlabeled IP packet destined for a prefix with an LSP? (Choose two.)
Medium751Which IS-IS metric type supports values up to 2^24-1 and is used for traffic engineering?
Easy752A service provider is troubleshooting BGP route selection for prefixes received from two different peers. The first peer prepends its AS path twice, making it longer than the second peer's path. However, the router still prefers the route with the longer AS path. Which additional attribute could cause this behavior?
Medium753An engineer wants to secure NTP on IOS XR routers. Which configuration is required to prevent unauthorized time synchronization?
Easy754Which SRv6 SID behavior is used to support EVPN-IRB (Integrated Routing and Bridging) for L2VPN with bridging?
Hard755A service provider is experiencing congestion on a core link connecting two P routers. The customer traffic is classified into three classes: voice (low latency), video (low loss), and data (best effort). The current configuration uses DSCP-based classification at the PE ingress, but many customers are remarking DSCP values to gain better service, bypassing the provider's QoS policy. The provider wants to enforce a strict trust boundary at the PE and re-mark all traffic according to a per-customer contract. Additionally, the provider must offer per-customer bandwidth guarantees, ensuring that one customer's traffic does not starve another customer's traffic on the congested core link. The solution must be scalable to hundreds of customers. What should the designer recommend?
Hard756Drag and drop the steps to configure a static route on a Cisco IOS router into the correct order.
Medium757A service provider is deploying MPLS Layer 3 VPN and needs to ensure that BGP next-hop resolution works correctly for VPNv4 prefixes learned from a route reflector. The PE routers are directly connected to the RR via iBGP, and there is an IGP running within the MPLS core. Which condition must be met for the PE to install the VPNv4 prefix into its routing table?
Medium758A service provider wants to automate service provisioning using NSO. Which protocol is typically used by NSO to configure network devices?
Medium759Which feature is used to validate that a BGP route origin is authorized by the prefix owner?
Easy760Which TWO are benefits of using EVPN over traditional VPLS for L2VPN services? (Choose two.)
Medium761In IS-IS, which type of router is responsible for exchanging routing information between different areas?
Easy762In SR-PCE architecture, which protocol is used for communication between the Path Computation Element (PCE) and the Path Computation Client (PCC) to request and report SR-TE paths?
Hard763A service provider is deploying BGP PIC (Prefix Independent Convergence) for edge routers. What is the primary benefit of BGP PIC?
Hard764Which BGP attribute is used to influence inbound traffic to a multi-homed AS by indicating the preferred entry point?
Easy765A service provider wants to protect its core routers from CPU exhaustion caused by excessive ICMP traffic. Which control plane protection mechanism on IOS XR would be most appropriate to rate-limit ICMP packets destined to the router?
Medium766A service provider wants to protect its core routers from control plane attacks. Which two mechanisms are effective in mitigating such attacks on IOS XR? (Choose two.)
Medium767A customer reports intermittent packet loss on a MPLS L3VPN connection. The PE router shows 'show mpls forwarding' entries for the CE prefix, but ping from the PE to the CE fails intermittently. Which action should be taken to isolate the issue?
Medium768In SRv6, what is the function of the 'End.DT4' behavior?
Hard769In an IS-IS network, a service provider wants to achieve fast convergence using Partial Route Computation (PRC). Which of the following events triggers a PRC instead of a full SPF?
Hard770Which THREE are MEF-defined Ethernet service types? (Choose three.)
Hard771Which RSVP message is used to tear down an MPLS-TE LSP by being sent from the ingress toward the egress?
Medium772A service provider wants to prevent IP spoofing attacks from customer edge devices connected to a PE router. The customer prefixes are known and asymmetric routing is not present. Which uRPF mode should be configured on the PE-CE interface?
Medium773An engineer configures an SRv6 SID with the behavior End.DT6. What is the primary function of this SID?
Medium774A network engineer is troubleshooting OSPFv3 on a service provider's IPv6 network. The router shows that OSPFv3 adjacency never reaches FULL, says 'Init'. The neighbor is directly connected over a point-to-point link. What is the most likely cause?
Hard775A service provider is migrating its MPLS core from LDP to Segment Routing with MPLS data plane (SR-MPLS). The network currently uses TE tunnels with RSVP-TE for traffic engineering. Which technology can the provider use to continue performing traffic engineering after the migration without requiring RSVP-TE?
Medium776Which TWO commands are most effective to verify that an SR-TE policy is active and forwarding traffic? (Choose two.)
Hard777Which MQC component is used to match traffic based on criteria such as DSCP or IP precedence?
Easy778An SP network uses NTP for synchronization. To secure NTP, which authentication mode should be used?
Easy779A service provider has implemented model-driven telemetry to monitor the health of its core network. The telemetry collector is a single server running a custom application that receives and processes gRPC streams from 200 routers. The collector is experiencing high CPU usage and is falling behind in processing data, causing some telemetry data to be dropped. The engineer decides to offload processing to multiple collectors. The routers support dial-out mode and can be configured with a list of collector IPs. The engineer wants to distribute the load evenly across collectors without manual configuration per router. Which should the engineer implement?
Medium780Refer to the exhibit. A service provider is receiving BGP prefixes from a customer (AS 64512). The provider wants to tag all routes from that customer that match prefix 10.1.0.0/16 or more specific with community 65000:100, while not modifying other routes. After applying the configuration, which statement is true?
Hard781A service provider needs to prioritize voice traffic over best-effort data in an MPLS VPN. The PE router uses a QoS policy applied to the ingress interface. Which action ensures that voice packets are marked with the correct DSCP value before entering the MPLS core?
Medium782In an MPLS VPN environment, which address family is used to exchange VPNv4 routes between PE routers?
Easy783A service provider is deploying MPLS in their core network and wants to ensure that all routers in the MPLS domain can dynamically exchange label bindings. Which protocol should be enabled on all routers to meet this requirement?
Easy784Which BGP attribute is used to indicate the preference of a route within an AS and is propagated to iBGP peers but not to eBGP peers by default?
Easy785Which three BGP attributes are considered during the route selection process before comparing AS_PATH length? (Choose three.)
Medium786Segment Routing with TI-LFA (Topology Independent Loop-Free Alternate) provides fast convergence. Which statement accurately describes TI-LFA?
Medium787An SP uses NSO to orchestrate MPLS L3VPN services. The service model is written in YANG, and the NED communicates with the PE routers. Which protocol does NSO use to push configuration to the network devices?
Medium788When implementing MPLS TE tunnels in a service provider core, what is the purpose of the 'affinity' attribute?
Medium789A network engineer notices that voice traffic is being dropped during congestion. The traffic is marked with DSCP EF. After reviewing the QoS policy, it is discovered that the voice traffic is not being placed into a priority queue. Which configuration change would ensure voice traffic receives priority treatment?
Easy790What is the function of the admin plane in IOS XR architecture?
Medium791A service provider is implementing MAP-T (Mapping of Address and Port using Translation) to transition customers from IPv4 to IPv6. Which two characteristics of MAP-T are true? (Choose two.)
Medium792An engineer is configuring BGP route reflectors to scale iBGP. Which TWO attributes are used to prevent routing loops in a route reflector cluster? (Choose two.)
Medium793In the DiffServ model, which field is used in the IP header to mark packets for QoS treatment?
Easy794An SP network uses OSPF with RSVP-TE for traffic engineering. Which OSPF extension is required to advertise TE link parameters such as maximum reservable bandwidth?
Medium795A network engineer is troubleshooting an LDP session failure between two directly connected routers. The routers are configured with the 'mpls ldp' command under the interface. The 'show mpls ldp neighbor' command shows no neighbors. Which two additional pieces of information should the engineer verify? (Choose two.)
Hard796An engineer is troubleshooting a BGP route reflector setup. Clients are not receiving all routes. The 'show bgp neighbors' output shows a state of 'Active'. What is the most likely cause?
Hard797A service provider is using Segment Routing with TI-LFA for fast convergence. During a link failure, the router performing the local repair must compute a backup path that avoids the failed link. Which type of Adjacency Segment Identifier (Adj-SID) is required for the backup path to be loop-free?
Medium798In the Modular QoS CLI (MQC), which component is used to define traffic classes based on match criteria?
Easy799A service provider is troubleshooting BGP route selection between two eBGP peers. The router receives a prefix from Peer A with local preference 150 and AS path length 3. From Peer B, the same prefix has local preference 100 and AS path length 2. Which route will be preferred?
Medium800A service provider is designing a network to support mobile backhaul for eMBB, uRLLC, and mMTC services. Which technology allows the physical network to be divided into virtual networks with dedicated resources for each service type?
Hard801A service provider uses OSPFv3 for IPv6 routing in the core. Which statement correctly describes OSPFv3 adjacency formation on a broadcast multiaccess network?
Hard802A service provider is implementing MPLS L3VPN and needs to ensure that BGP route advertisement uses a specific next-hop. Which technique ensures BGP advertises the PE-CE next-hop instead of the PE-PE loopback?
Easy803Refer to the exhibit. A telemetry subscription is configured on an IOS-XR router. The collector at 10.1.1.100 is not receiving data. Which configuration error is present?
Medium804Which THREE are benefits of using EVPN over traditional VPLS? (Choose three.)
Hard805A junior automation engineer is writing a Python script to configure OSPF on a Cisco IOS-XE router using RESTCONF. The script sends a PUT request to update the OSPF configuration but receives a 401 Unauthorized response. The engineer has configured a local user with privilege 15 on the router and enabled restconf. The engineer verified that the router's RESTCONF API is running on port 443. What is the most likely missing element in the script?
Easy806An SP engineer implements LLQ for VoIP traffic on a DS3 link. The policy-map calls for a priority queue of 500 kbps. The actual VoIP traffic averages 400 kbps with bursts to 600 kbps. What is the expected behavior during bursts?
Easy807An SP engineer is designing a QoS policy for a business customer with three traffic classes: Voice (critical latency), Transactional Data (low delay), and Bulk Data (no strict requirements). The link is 100 Mbps. Which TWO actions should be part of the policy? (Select two.)
Medium808In IS-IS, which metric type supports traffic engineering (TE) and is required for segment routing?
Medium809A service provider wants to use BGP Prefix Independent Convergence (PIC) for faster failover. Which BGP feature must be enabled to support PIC?
Hard810A service provider is building a new network slicing architecture to offer differentiated services to enterprise customers. The architecture uses SRv6 with network slices identified by slice IDs embedded in the SRv6 SID. The underlay is an IP network with ISIS. Each slice will have dedicated resources in the core, including guaranteed bandwidth and low latency. The plan is to use the SRv6 network programming concept to steer traffic into different slices. The provider wants to ensure that slice isolation is maintained end-to-end, including at the egress PE where traffic is handed off to the customer. However, during testing, they observe that traffic from one slice is incorrectly entering another slice's queue on an intermediate node, causing performance interference. The intermediate node is a transit router that does not terminate SRv6 but performs 'SID-based forwarding'. Which mechanism is most likely missing to ensure slice isolation on transit nodes?
Hard811In RSVP-TE, which message is sent by the headend router along the explicit route to reserve resources and establish an LSP?
Medium812A network engineer is configuring QoS on a Cisco ASR 9000 router to support multiple traffic classes. The policy must ensure that real-time traffic (EF) is not starved by high-volume bulk data (AF11). Which queuing strategy should be applied to the EF class to provide low latency and strict priority?
Easy813An SP is implementing DDoS mitigation using BGP FlowSpec. Which three types of actions can be specified in a FlowSpec rule? (Choose three.)
Medium814A network engineer is configuring MPLS LDP on a new router. After enabling LDP globally and on the interface, the LDP session does not establish. The IGP (OSPF) is fully operational. What should the engineer verify first?
Easy815A service provider has deployed segment routing with OSPF as the IGP in its core network. The network consists of 100 routers in a single area. The operations team reports that after a link failure between Router X and Router Y, traffic from Router A to Router B is taking a suboptimal path even though IGP convergence is complete and all routers have updated their LSDB. Router A and Router B are both segment routing capable. The team verifies that no SR-TE policies are configured and that all routers are using the default SPF algorithm. The expected shortest path from A to B should go through the newly restored link, but instead it still traverses an alternate path. Which action should resolve the issue?
Easy816Match each QoS mechanism to its primary function.
Medium817A network engineer needs to design a multicast solution for IPTV distribution across a service provider network. Which protocol is best suited for building a shared distribution tree where the RP is dynamically elected?
Hard818In EVPN multihoming with all-active mode, what is the purpose of the aliasing capability?
Hard819An engineer is using RESTCONF to configure an interface on a Cisco IOS-XE device. The request returns a 400 Bad Request error. What is the most likely cause?
Medium820Which two of the following are characteristics of MPLS Traffic Engineering that differentiate it from pure MPLS forwarding?
Medium821A service provider is migrating from LDP to Segment Routing in an IS-IS network. After enabling IS-IS with segment-routing on all routers, they observe that some prefixes still receive labels from LDP instead of from SR. Which configuration is most likely missing on these routers?
Hard822A service provider is deploying MPLS L3VPN over an OSPF backbone. The PE routers are configured with OSPF as the IGP. The CE router of customer A is connected to two PEs for redundancy. Which configuration is required on the PE routers to ensure that the CE router can load-balance traffic across both PEs without loops?
Medium823Which TWO of the following are characteristics of MPLS LDP?
Medium824In IS-IS, what is the purpose of the Partial Route Computation (PRC)?
Easy825In an EVPN-VPWS (Virtual Private Wire Service) deployment, which identifier is used to uniquely identify an Ethernet Segment for multi-homing?
Medium826A service provider is designing a QoS policy for a multi-service MPLS VPN network that carries voice, video, and data traffic. The network uses DiffServ and MPLS EXP markings. The design must ensure that voice traffic is given priority over video and data, while video traffic should have better treatment than data but not at the expense of voice. The provider plans to use a hierarchical QoS (HQoS) policy at the PE-CE interfaces. Which configuration approach best meets these requirements?
Hard827A service provider wants to use Segment Routing TE with Flex-Algo to engineer traffic around links with low bandwidth. Which configuration approach should be taken?
Hard828Which IS-IS router type maintains a full Layer 2 routing table of all areas and can act as a gateway between areas?
Easy829What is the purpose of the SRGB (Segment Routing Global Block) in SR-MPLS?
Easy830An SP uses NSO with a YANG service model to provision an L3VPN. The service model references a leafref to a VPN ID that must exist in a separate list. Which YANG statement ensures the leafref value is valid against the referenced list?
Hard831A service provider is implementing MPLS in their core network. They want to ensure that labeled packets for BGP prefixes are forwarded correctly without requiring an IGP label for every BGP prefix. Which technique should be used to achieve this?
Medium832A network engineer is configuring Segment Routing on an IOS-XR router. They want to use the preferred algorithm for automatically computing paths based on IGP metrics. Which algorithm should be configured under the SR segment list?
Easy833A service provider is migrating from LDP to Segment Routing (SR) in the core. They need to support MPLS forwarding without maintaining LDP sessions. Which SR data plane is appropriate?
Hard834In IOS XR, what is the commit/rollback configuration model?
Medium835An engineer notices that an MPLS LSP in the core is not establishing. Which troubleshooting step should be performed first?
Medium836A service provider is using Cisco Peakflow for DDoS detection. Peakflow identifies anomalies based on network traffic telemetry. Which data collection method does Peakflow primarily use?
Medium837When automating configuration changes across a large network using a tool like Cisco NSO, what is the best practice to minimize the risk of negative impact?
Hard838In IS-IS, what is the purpose of the NET (Network Entity Title) address field SEL (Selector) byte?
Easy839Which THREE are characteristics of EVPN? (Choose three.)
Medium840Drag and drop the steps to configure OSPF on a Cisco IOS router into the correct order.
Medium841A metro Ethernet provider needs to scale customer VLANs beyond the 4,096 limit by encapsulating customer VLAN tags with an outer service provider tag. Which IEEE standard is used?
Hard842In Segment Routing over MPLS (SR-MPLS), how are Prefix-SIDs advertised in IS-IS?
Medium843Drag and drop the steps to configure a standard ACL on a Cisco router into the correct order.
Medium844Which QoS mechanism is most effective for preventing congestion on a service provider edge link when traffic exceeds the link capacity?
Easy845An SP engineer is troubleshooting IS-IS routing. The network uses wide metrics, and some links have been configured with TE metrics. Which statement correctly describes the relationship between TE metrics and narrow metrics in IS-IS?
Medium846In the DiffServ model, which DSCP value is used for Expedited Forwarding (EF) to support voice traffic?
Easy847A service provider is troubleshooting BGP route advertisement for a VPNv4 prefix. The PE router receives the prefix from the route reflector but does not install it in the VRF routing table. The BGP table shows the prefix as valid but not best. What is the most likely cause?
Hard848Which two MPLS OAM tools can be used to troubleshoot label switching paths? (Choose two)
Easy849A network operator is migrating from traditional MPLS LDP to Segment Routing (SR) with IS-IS. The network consists of four routers (R1-R4) in a square topology. The engineer has enabled SR on all routers and configured prefix-SIDs for loopbacks. However, when checking the MPLS forwarding table on R1, the engineer sees that some prefixes have label values that are not the prefix-SIDs. For example, the prefix for R4's loopback shows label 16004 instead of the expected 16004 (which is correct). But for another prefix, the label is 16003 instead of 16003 (correct). The engineer does not see any labels for some external routes. What is the most likely reason that some labels are missing?
Easy850Match each multicast protocol to its role.
Medium851In BGP, an SP router receives multiple routes to the same prefix. The first route has a weight of 100, LOCAL_PREF of 200, AS_PATH length 3, and is learned via eBGP. The second route has weight 50, LOCAL_PREF 150, AS_PATH length 2, and is learned via iBGP. According to BGP route selection, which route will be preferred?
Hard852Refer to the exhibit. This JSON policy is used for Segment Routing Traffic Engineering. What is the purpose of the 'color' attribute?
Easy853A service provider plans to deploy automation using Cisco NSO. Which two benefits does NSO provide for service lifecycle management? (Choose two.)
Medium854Which TWO protocols are supported by a BNG (Broadband Network Gateway) for subscriber session establishment? (Choose two)
Easy855A service provider is automating the provisioning of MPLS L3VPNs across multiple devices using NETCONF. During a deployment, the automation script fails with an error indicating that the device does not support the required YANG model. Which action should the engineer take to verify device capabilities?
Medium856Which BGP community is used to prevent a route from being advertised to any eBGP peers?
Easy857An SP detects a volumetric DDoS attack targeting a customer network. The SP uses Cisco's S/RTBH technique to drop attack traffic. Which action is performed by the edge routers upon receiving a BGP route with a specific community?
Hard858Which TWO types of SIDs are defined in Segment Routing? (Select two.)
Easy859An SP engineer is designing an OSPF network with several remote sites that should not receive external routes but need to reach external destinations via a default route. Which OSPF area type best meets this requirement while also preventing Type 5 LSAs from entering?
Medium860Refer to the exhibit. The VRF CUSTOMER is configured with route-target import 100:1. Why is this route not installed in the VRF table?
Easy861A service provider is deploying Segment Routing Traffic Engineering (SR-TE) to optimize traffic flows. Which mechanism is used to steer traffic into an SR-TE policy?
Hard862A network operator is implementing segment routing (SR-MPLS) using OSPF as the IGP. Which OSPF TLV is used to advertise the Node SID (Prefix SID) for a router's loopback address?
Hard863What is the purpose of NTP authentication in a service provider network?
Easy864A customer is experiencing packet loss during congestion on a link. The service provider wants to implement a QoS policy that drops less important traffic before more important traffic. Which queuing mechanism is best suited?
Medium865A customer is using a Cisco ASR 9000 router with hierarchical QoS (HQoS) on a subscriber interface. The parent policy sets a shape rate of 10 Mbps, but the observed traffic rate is only 8 Mbps. What is a common misconfiguration that would cause this?
Medium866In EVPN multi-homing, which two mechanisms are used to avoid duplicate packets and ensure efficient forwarding? (Choose two.)
Medium867An SP uses OSPF with Traffic Engineering extensions to support RSVP-TE. Which LSA type is used to carry TE information in OSPF?
Medium868A service provider is designing a new MPLS L3VPN service. The customer requires that their VPN traffic be isolated from other customers and that the provider edge routers maintain separate routing tables for each VPN. Which architectural component is essential for this separation?
Medium869During a multicast deployment, some receivers are not receiving the stream. The PIM neighbor table shows the upstream interface is correct. Which command would verify whether the multicast routing table has the correct outgoing interface list?
Medium870An SP engineer is designing an OSPF network and wants to reduce the number of LSAs in a stub area. Which TWO area types would block Type 5 LSAs but allow Type 3 LSAs? (Choose two.)
Medium871An engineer is implementing Unicast Reverse Path Forwarding (uRPF) on a provider edge (PE) router to mitigate IP spoofing. The customer-facing interface has a single static default route. Which uRPF mode should be used to provide anti-spoofing without causing false drops?
Hard872A service provider is deploying uRPF on peering edges with multiple upstream providers and asymmetric routing. Which two statements are true about uRPF operation in this scenario? (Choose two.)
Medium873Refer to the exhibit. A network automation engineer uses NETCONF to retrieve the QoS policy 'POLICE-CUSTOMER'. Based on the response, what is the effect of this policy?
Hard874An SP is planning to offer L3VPN services. Which TWO components are essential for BGP/MPLS IP VPN operation?
Medium875In an SR network, which configuration is required to activate TI-LFA for link protection?
Hard876In a Layer 3 MPLS VPN, a customer site that is part of VRF RED is unable to communicate with another site that is also in VRF RED. The 'show ip bgp vpnv4 vrf RED' command shows the routes, but the router does not install them in the routing table. Which configuration element is most likely missing?
Easy877In BGP route reflection, what is the purpose of the ORIGINATOR_ID attribute?
Medium878Refer to the exhibit. The router has three LDP neighbors established. A network administrator notices that MPLS labels for the prefix 10.4.4.0/24 are not being advertised from this router to its neighbors, although the prefix is present in the routing table. Which is the most likely cause?
Medium879Which label is used for an Adjacency SID in SR-MPLS?
Easy880An SP uses Cisco NSO for automation. Which protocol does NSO typically use to push configuration changes to network devices?
Hard881In an MPLS VPN, what label operation does the egress PE perform on the VPN packet before forwarding it to the CE?
Easy882Which MEF service type is used for multipoint-to-multipoint Ethernet connectivity, such as a corporate LAN extension across multiple sites?
Easy883A service provider has deployed a new MPLS L3VPN service for a customer with multiple sites. The customer reports intermittent voice quality issues during peak hours. The provider uses a DiffServ QoS model with MPLS EXP markings. The PE routers apply the following policy on the customer-facing interfaces: policy-map CUSTOMER-OUT class VOICE priority percent 10 set mpls experimental topmost 5 class VIDEO bandwidth remaining percent 30 set mpls experimental topmost 4 class DATA bandwidth remaining percent 70 set mpls experimental topmost 0 The core network has a simple policy that maps EXP 5 to PQ, EXP 4 to a low-latency queue, and EXP 0 to best effort. The provider monitors the network and finds that the PE-CE interfaces are not congested (average utilization is 40%), but the voice packets are experiencing jitter. The customer's voice traffic is about 5% of the link capacity. Which action is most likely to reduce the jitter?
Easy884In SR-TE PCE, which protocol does the PCE use to communicate with the PCC (Path Computation Client) to set up LSPs?
Hard885An operator notices that a new MPLS-TE tunnel is not being established. The tunnel configuration includes a dynamic path option and a bandwidth of 100 Mbps. The network uses RSVP-TE with CSPF. The link-state database shows sufficient reservable bandwidth on all links along the calculated path. What is the most likely cause of the tunnel establishment failure?
Hard886Which TWO are benefits of model-driven telemetry over SNMP polling?
Easy887A network operator uses gRPC Network Management Interface (gNMI) to collect telemetry data from routers. They notice that some updates are missing. Which gNMI mode should be used to ensure that all state changes are captured?
Hard888In a Layer 3 MPLS VPN, a CE router is dual-homed to two different PE routers. The PE routers advertise the same prefix to the route reflector with different route targets. What ensures that only the best path is installed in the VRF?
Medium889Which three statements accurately describe the benefits of Segment Routing over RSVP-TE for traffic engineering? (Choose three.)
Hard890Which THREE BGP path attributes are considered during the best path selection process after local preference? (Choose three.)
Hard891Which THREE components are required for model-driven telemetry with gRPC? (Choose three.)
Medium892In the context of network slicing for 5G, which type of slice is optimized for massive IoT with low data rates and high connection density?
Medium893Which MPLS TE mechanism provides link protection by pre-establishing a backup LSP that bypasses a specific link, activated when the link fails?
Medium894An SP wants to filter BGP prefixes received from a customer to prevent hijacking. Which two tools can be used together on the provider edge router to implement inbound prefix filtering?
Medium895A service provider is implementing IPv6 transition in its core. Which transition mechanism is recommended for carrying IPv6 over an existing MPLS/IPv4 backbone without dual-stacking all routers?
Hard896A service provider implements CGNAT to conserve IPv4 addresses. Which feature is required to ensure that application-level protocols such as SIP or FTP function correctly?
Medium897A BNG (Broadband Network Gateway) is used for subscriber management. Which protocol is typically used between the BNG and the subscriber's modem (CPE) for authentication and IP address assignment in a PPPoE environment?
Easy898Based on the exhibit, which statement about label allocation for prefix 10.1.1.0/24 is true?
Medium899An SP uses DPI to classify traffic. What is the primary purpose of DPI in a service provider network?
Easy900Which DSCP value is recommended for Expedited Forwarding (EF) per-hop behavior, commonly used for voice traffic?
Easy901In BGP confederation, how does the AS_PATH attribute handle the confederation sub-AS numbers to prevent loops?
Medium902In a Segment Routing network with TI-LFA enabled, which mechanism prevents micro-loops during a link failure?
Hard903During MPLS LDP operation, a router receives a label mapping for a prefix from its neighbor. What is the correct behavior when the receiving router has a route to that prefix?
Easy904Which protocol is used to discover MPLS peers for LDP session establishment?
Easy905An SP is designing a core network using Cisco CRS routers running IOS XR. They require process separation to ensure that a failure in the BGP process does not affect OSPF operations. Which IOS XR architectural feature provides this capability?
Hard906An engineer is configuring MPLS on a Cisco router. Which label operation is performed on the ingress LSR when a packet enters the MPLS domain?
Easy907Which access technology uses orthogonal frequency-division multiplexing (OFDM) and is commonly deployed for high-speed internet over copper telephone lines?
Medium908Which multicast RP model is recommended for large-scale networks to provide redundancy and load sharing?
Easy909An MPLS Traffic Engineering LSP fails to establish. The RSVP signaling shows 'PathErr: Admission Control Failure'. The link has sufficient bandwidth but the headend reports a lack of resources. What is the most likely cause?
Medium910A service provider offers IPTV services using multicast. The network uses Multicast VPN (MVPN) with Rosen GRE encapsulation (Profile 1) in an MPLS L3VPN environment. The Provider Edge (PE) routers participate in both the default MDT and data MDT for high-bandwidth streams. Recently, a new channel was added, and it uses a data MDT. The content server is attached to a PE that is acting as a multicast source. Other PEs are receivers. Upon adding the channel, some receivers report missing packets. The network engineer checks the PEs and notices that the data MDT group address is being advertised via BGP as an MDT SAFI route, but some PEs are not joining the data MDT. The source PE's multicast routing table shows that it believes data MDT is active. Which architecture issue is most likely preventing some PEs from joining the data MDT?
Hard911A service provider wants to offer a service where a customer site can communicate with multiple other sites in a full mesh over MPLS. Which L2VPN technology is most appropriate?
Medium912Which THREE are valid reasons for using the 'ipv6 unicast-routing' command on a Cisco router?
Easy913An ISP wants to create separate virtual networks over a shared physical infrastructure to serve mobile broadband (eMBB), IoT (mMTC), and mission-critical services (uRLLC). Which technology enables this segmentation with per-slice resource guarantees?
Hard914Refer to the exhibit. The router has an outgoing label of 'Pop' for prefix ***********. What does this imply?
Medium915A service provider wants to prioritize voice traffic over data traffic on a PE-CE link. Which QoS mechanism should be applied at the PE ingress to classify packets?
Easy916Which routing protocol is used between CE and PE routers in a typical MPLS L3VPN deployment?
Easy917A small service provider is deploying MPLS in its core network for the first time. They have a simple topology: three P routers in the core and two PE routers connecting customers. They have configured LDP on all interfaces and OSPF as the IGP. They also configured a basic L3VPN for a customer with a single CE attached to each PE. The customer reports that they can ping between CEs for a few minutes, but then the connectivity drops. After a few seconds, it returns. This pattern repeats every few minutes. The engineer checks the LDP neighbors and sees that all LDP sessions are up. The OSPF adjacencies are stable. The engineer also notices that the pings time out exactly when the LDP graceful restart timer is expiring on one of the P routers. What is the most likely cause?
Easy918A service provider is deploying multicast service for IPTV using PIM-SM with a single RP. During high traffic periods, the RP becomes overloaded. What is the most scalable solution to distribute the load across multiple RPs?
Hard919You are a network engineer at a service provider. Your network uses MPLS L3VPN with OSPF as the IGP and LDP for label distribution. A customer has two sites connected to different PEs (PE1 and PE2) in the same VPN. The customer's CE routers are running eBGP with the PEs. Recently, the customer reports that traffic between the two sites is intermittently dropping. Upon investigation, you find that the BGP session between PE1 and the CE at site A goes down briefly every few minutes. The logs on PE1 show BGP notifications with error code 'Hold Timer Expired'. The CE router at site A is a low-end device with limited CPU. What is the most likely cause and the best course of action?
Medium920Which TWO statements about QoS policy propagation via BGP (QPPB) are correct?
Medium921An ISP is implementing BGP communities to influence routing behavior for their customers. They want to ensure that a customer's routes are not advertised to a specific transit provider. Which BGP community should be used?
Medium922A network administrator needs to automate the deployment of a new QoS policy on dozens of provider edge routers. Which Cisco tool is best suited for this purpose?
Easy923Which RSVP reservation style is most commonly used in MPLS-TE to allow sharing of resources among multiple LSPs of the same session?
Medium924Which access technology uses wavelength division multiplexing to provide symmetric gigabit speeds in fiber-optic networks?
Easy925A service provider is deploying a QoS policy for a customer with voice, mission-critical data, and best-effort traffic. The voice requires strict priority and low latency. Which queuing mechanism should be used to ensure voice packets are always served before other queues, and what additional measure is necessary to prevent voice traffic from starving other traffic?
Medium926What is the purpose of Constrained Shortest Path First (CSPF) in MPLS-TE?
Medium927A service provider is migrating from LDP to Segment Routing. What is the correct order of operations to ensure uninterrupted MPLS forwarding?
Medium928Which three of the following are valid methods for protecting a pseudowire in an MPLS network?
Hard929An SP is deploying SR-PCE for centralized traffic engineering. Which THREE functions does the PCE perform? (Select three.)
Hard930A network engineer is troubleshooting a BGP convergence issue in a large service provider network. After a link failure in the core, BGP sessions between route reflectors take a long time to reconverge. The RRs are receiving updates from many clients. Which technology can be implemented to improve convergence time? The network currently uses standard BGP with default timers.
Medium931A large enterprise uses MPLS L3VPN to connect multiple sites. They want to implement inter-AS option B (ASBR-to-ASBR MP-eBGP) for scalability. Which statement about this model is correct?
Medium932During a DDoS attack, a service provider uses Cisco Peakflow to detect anomalous traffic and then triggers S/RTBH. What must be configured on the router to black hole attack traffic using a /32 null route?
Hard933Refer to the exhibit. A network engineer notices that the local label 19 for prefix 10.4.4.0/24 shows 'Untagged' in the outgoing label column. What is the most likely cause?
Medium934An engineer is troubleshooting an MPLS L3VPN where customers behind CE1 cannot reach a specific prefix behind CE2. The PE routers are using OSPF as the IGP and LDP for label distribution. On PE2, the prefix is present in the VRF routing table, but not in the VRF forwarding table. What is the most likely cause?
Medium935An engineer is troubleshooting a BGP route propagation issue. The customer is receiving a default route from upstream provider, but the route is not being installed in the routing table. The BGP table shows the route is valid but not best. What is the most likely cause?
Medium936An SP is designing a metro Ethernet network using Q-in-Q. A customer uses VLAN ID 100 on their network, and the SP assigns service VLAN 200. Which frame format is used on the SP network?
Hard937In OSPF TE extensions for RSVP-TE, which LSA type is used to carry TE information (such as link attributes) in OSPF?
Hard938A service provider is troubleshooting an MPLS L3VPN scenario where a customer in VRF Blue cannot reach a server in VRF Blue at a remote site. The PEs are running MPLS with LDP. The VRF on both PEs shows the remote prefix. The PE at the local site shows the label from the remote PE for the prefix in the BGP table. However, when pinging from the CE, the packets are dropped. A packet capture on the core shows MPLS packets with the correct VPN label, but the transport label is missing. Further investigation shows that the LDP session between the two PEs is up, but the LDP label binding for the remote PE's loopback is not present. What is the most likely cause and correct action?
Medium939A network engineer is implementing QoS on a Cisco ASR 1000 for a customer with multiple service classes. The customer requires that mission-critical data not be starved when voice traffic bursts. Which two actions should the engineer take? (Choose two.)
Medium940In a hierarchical QoS policy, the parent policy shapes to 20 Mbps. The child policy has a class for voice with priority and police rate 2 Mbps, and a class for data with bandwidth 10 Mbps. What is the maximum bandwidth voice traffic can consume under congestion?
Hard941In an OSPF network, an engineer wants to minimize the size of the routing table in a non-backbone area while still allowing the area to learn external routes from other ASs. Which OSPF area type should be configured?
Medium942An SP is deploying EVPN with VXLAN encapsulation in a data center interconnect. The design requires that the control plane for MAC/VTEP learning is based on BGP. Which BGP address family must be configured?
Hard943A network engineer is troubleshooting an OSPF adjacency failure between two directly connected routers, R1 and R2. Both routers are configured with the same OSPF process ID and area. The engineer verifies that the interfaces are up and IP connectivity exists. Which configuration mismatch is most likely causing the adjacency to fail?
Easy944A service provider is deploying a new metro Ethernet network and needs to support multiple customer VLANs over a single physical link without overlapping VLAN IDs. Which technology should be used at the access layer to achieve this?
Medium945In a hierarchical QoS policy applied to a subscriber aggregation interface, the parent policy shapes to 100 Mbps and the child policy allocates 50% bandwidth to voice and 50% to data. If voice traffic exceeds 50 Mbps, what happens to the excess?
Hard946Which access technology is commonly used in service provider networks to deliver high-speed internet over existing telephone lines?
Easy947Which RSVP-TE filter style is commonly used for MPLS-TE tunnels to allow multiple senders on the same session?
Medium948In MPLS-TE Fast Reroute (FRR), what is a 'detour'?
Easy949An SP uses model-driven telemetry to monitor queue depths on core interfaces. They observe periodic spikes in the queue depth for EF traffic, causing increased latency. Which automation technique could dynamically adjust the QoS policy to mitigate the spikes?
Medium950In an OSPF network, an area is configured as a Not-So-Stubby Area (NSSA). Which statement about LSA types in this area is correct?
Hard951An SP is troubleshooting an MPLS L2VPN VPLS network where MAC flapping is occurring between two PEs. Which mechanism in VPLS prevents loops and ensures that a broadcast frame from one PE is not reflected back to the originating PE?
Hard952Refer to the exhibit. An engineer configures MPLS LDP on a router. The router has two interfaces with IP addresses 10.0.0.1/30 and 10.0.0.5/30. The engineer notices that LDP sessions are not established. The OSPF neighbor adjacencies are up. What is the most likely cause?
Hard953Which YANG data modeling construct is used to restrict a leaf value to be a reference to another leaf in the data tree?
Medium954An engineer is configuring MPLS VPN and needs to ensure that customer traffic is automatically marked with a specific QoS policy based on the VPN. Which method should be used to propagate QoS markings across the MPLS network?
Easy955In EVPN-VPWS, which identifier is used to uniquely identify an Ethernet Segment for multi-homing?
Medium956When DSCP markings are mapped to MPLS EXP bits at the ingress PE router, how many EXP values are available for traffic differentiation in the MPLS core?
Easy957Which TWO are characteristics of Segment Routing?
Easy958An SP engineer notices that BGP routes from a CE are not being installed in the VRF routing table, although the BGP session is established. The VRF configuration includes route-target import 100:1. The CE is sending routes with RT 100:1. What is the most likely cause?
Medium959Based on the exhibit, what is the purpose of the 'mpls ldp neighbor ... password cisco' commands?
Hard960A large service provider operates an MPLS L3VPN network with multiple Route Reflectors (RRs) in the core. The network uses BGP as the control plane for both IPv4 unicast and VPNv4 routes. Recently, one of the RRs started flapping, causing route withdrawals to many clients. The network architect wants to improve stability. The RRs are fully meshed with each other and clients are configured as route-reflector clients. The RRs have both IPv4 and VPNv4 address families enabled. Which action should be taken to minimize the impact of an RR failure?
Easy961During a maintenance window, an automation script pushed a QoS policy that inadvertently changed the marking for all inbound traffic on a core interface. The change was rolled back, but performance reports show that some traffic is still being marked incorrectly. What is the most logical explanation?
Hard962A service provider uses a centralized automation system to manage QoS policies via NETCONF and YANG. When attempting to push a new policy-map, the device returns an error indicating that the policy-map type is not supported in the specified location. What is the most likely cause?
Medium963Which THREE of the following L3VPN services require the use of a dedicated control plane per VPN instance?
Hard964In SRv6, which SID behavior is used to achieve L3VPN IPv6 VPN forwarding, where the SID points to a VPN instance and performs decapsulation and IPv6 lookup?
Hard965Refer to the exhibit. Based on the exhibit, what is the most likely reason for no label bindings?
Medium966An SP uses Cisco ASR 9000 routers with IOS XR. Which statement correctly describes the commit/rollback configuration model in IOS XR?
Hard967An ISP is implementing 6PE to provide IPv6 connectivity over an MPLS network that only supports IPv4 in the core. In 6PE, how are IPv6 prefixes carried across the MPLS backbone?
Hard968An SP engineer is implementing DSCP classification at the edge. Which two AF classes are typically used for mission-critical data? (Choose two.)
Medium969Which OSPF area type is most suitable for a service provider's customer-facing network where external routes are blocked, but internal routes (including inter-area) are allowed, and the area should not accept Type 5 LSAs?
Hard970An engineer is hardening the management plane of an IOS XR router. Which combination is the most secure for remote administration?
Medium971In EVPN-VPWS, which component is used to identify a multi-homed Ethernet segment and enable load balancing and fast convergence?
MediumOther domains
All 350-501 exam domains
Frequently asked questions
- What does the troubleshooting domain cover on the 350-501 exam?
- troubleshooting questions test whether you can apply the concept in context, not just recognise a definition.
- How many questions are in this domain?
- This page lists all 971 troubleshooting questions in the 350-501 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only troubleshooting questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.