350-501 MPLS and Segment Routing Practice Question

Correct answer & explanation

End.DT2U is for L2VPN; for IRB, the router uses End.DT4/DT6 for IP forwarding and then bridges to the segment; however, the question asks for the SID behavior that enables IRB. Usually, IRB is achieved by combining a Layer 2 VPN SID and a Layer 3 VPN SID, but for the specific behavior that forwards between IP and MAC, it's often End.DT4 or End.DT6 plus a MAC lookup. But standard SRv6 IRB uses a dedicated SID like End.DT2U? Actually, IRB requires both routing and bridging; the common approach is to use a Layer 3 VPN SID for the routed part and an EVPN Ethernet segment for bridging. In SRv6, the endpoint behavior for IRB is typically End.DT4 or End.DT6 for the routing side, and for bridging, it's End.DT2U. But the question expects a single behavior? Perhaps End.DT2U is for L2VPN only. Let's think: Cisco documentation often describes 'End.DT2U' for L2VPN, and 'End.DT4' for L3VPN. For IRB, the service is provided by a combination. However, a specific SID behavior called 'End.DT2U' can be used for EVPN VPWS. To align with common SIDs, the answer is End.DT2U for L2VPN IRB? Actually, IRB typically uses a Layer 3 gateway SID. I'll choose End.DT4 as it routes IP, and then the router bridges locally. But the question says 'forward packets between the IP fabric and the Ethernet segment' - that is routing. So End.DT4 is correct.