hardMultiple SelectObjective-mapped
350-401 Practice Question: Which three statements about MPLS Layer 3 VPNs…
Which three statements about MPLS Layer 3 VPNs are true? (Choose three.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Customer edge (CE) routers exchange routing information with provider edge (PE) routers using static routing, RIP, OSPF, EIGRP, or BGP.
MPLS L3VPNs use VRFs for isolation, MP-BGP for route exchange, and MPLS labels for forwarding, with the provider core unaware of customer routes.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Customer edge (CE) routers exchange routing information with provider edge (PE) routers using static routing, RIP, OSPF, EIGRP, or BGP.
Why this is correct
Correct because PE-CE routing can use any of these protocols, as supported by the provider's configuration.
- ✓
VRF (Virtual Routing and Forwarding) instances are used on PE routers to maintain separate routing tables for each VPN customer.
Why this is correct
Correct because VRFs isolate customer routes on the PE, ensuring traffic separation.
- ✓
MP-BGP (Multiprotocol BGP) is used between PE routers to exchange VPNv4 routes, which include an RD and RT.
Why this is correct
Correct because MP-BGP carries VPN-IPv4 prefixes with route distinguishers (RD) and route targets (RT) for VPN membership.
- ✗
The MPLS core routers (P routers) maintain full VPN routing tables to forward traffic based on customer IP prefixes.
Why it's wrong here
Incorrect because P routers only swap MPLS labels and do not maintain VPN routing tables; they are label-switching routers.
- ✗
Route targets (RT) are used to uniquely identify each customer VPN across the provider network.
Why it's wrong here
Incorrect because route distinguishers (RD) ensure uniqueness of VPN prefixes, while RTs control route import/export policies.
Go deeper
Related to this question
About these practice questions
One of 1,175 original 350-401 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on 350-401
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which three statements about MPLS Layer 3 VPNs are true? (Choose three.)
hard- ✓ A.MP-BGP is used to exchange VPNv4 routes between PE routers.
- ✓ B.Each customer site requires a separate VRF on the PE router.
- C.The P router maintains a full routing table for all VPN customers.
- D.A single MPLS label is used for both transport and VPN identification.
- ✓ E.The PE router performs the routing between the CE device and the MPLS core.
Why A: MPLS L3VPNs use MP-BGP to exchange VPNv4 routes, require a VRF per customer, and use two labels (IGP label for transport, VPN label for VRF lookup). The PE router performs the routing between CE and the MPLS core.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.