Cisco 350-501 Practice Test 2
Question 10
For an original SPCOR service-provider engineering scenario, consider: A carrier migrates a routed IP backbone toward MPLS yet assumes that enabling label forwarding automatically creates isolated customer VPNs without any service policies. Select TWO complementary steps: the targeted correction and its strongest prechange validation.
- Change: Select a service model matching customer connectivity and use the required MPLS forwarding and VPN control-plane mechanisms rather than treating a transport label as tenant isolation.
- Change: Apply source validation or ACL policy at the correct ingress, coordinate RTBH only for approved attack targets and enable link-layer encryption where required.
- Check: Map each service endpoint, customer attachment, label-switched path and VPN policy against intended reachability using a two-tenant lab.
- Place all customers in one unrestricted bridge domain and claim MPLS labels alone make their traffic private.
- Check: Confirm exact software release, target command hierarchy, candidate diff, commit outcome and rollback in a lab device.
Explanation
Correct Answer
A:Metro Ethernet connectivity models define endpoint relationships, while an MPLS transport label steers packets and customer isolation requires a separate service and routing design. Acceptance: Only intended tenant endpoints communicate and core forwarding provides the required transport without unwanted cross-customer bridging.
C:Metro Ethernet connectivity models define endpoint relationships, while an MPLS transport label steers packets and customer isolation requires a separate service and routing design. Required intervention: Select a service model matching customer connectivity and use the required MPLS forwarding and VPN control-plane mechanisms rather than treating a transport label as tenant isolation.
Incorrect Answers
B:Change: Apply source validation or ACL policy at the correct ingress, coordinate RTBH only for approved attack targets and enable link-layer encryption where required. Metro Ethernet connectivity models define endpoint relationships, while an MPLS transport label steers packets and customer isolation requires a separate service and routing design.
D:For this select two assessment, the shortcut changes or bypasses the necessary routing, service or operational boundary rather than correcting it. Metro Ethernet connectivity models define endpoint relationships, while an MPLS transport label steers packets and customer isolation requires a separate service and routing design.
E:Check: Confirm exact software release, target command hierarchy, candidate diff, commit outcome and rollback in a lab device. Metro Ethernet connectivity models define endpoint relationships, while an MPLS transport label steers packets and customer isolation requires a separate service and routing design.
Question 11
A service provider network engineer is reviewing this backbone or customer-service scenario: An operator requires traffic to traverse a low-latency backbone path but advertises an ordinary IGP shortest path and calls it a guaranteed traffic-engineered policy. A proposed shortcut is: Add an arbitrary segment list with no advertised SIDs and assume every path automatically meets the latency objective. What should the service provider engineer recommend as the narrowly scoped correction? Select ONE best answer.
- Place each split RAN function and its xHaul link deliberately, enforcing the transport latency, timing and reliability needs for the selected functional split.
- Validate coherent optic capabilities, router support, fiber reach and link optical telemetry before enabling routed optical connectivity.
- Add an arbitrary segment list with no advertised SIDs and assume every path automatically meets the latency objective.
- Define the selected SR data plane and explicit policy segments, then verify headend steering, supported SIDs and actual egress path.
Explanation
Correct Answer
D:This targeted action addresses the observed service-provider control or forwarding gap without discarding necessary controls. Applied case: An operator requires traffic to traverse a low-latency backbone path but advertises an ordinary IGP shortest path and calls it a guaranteed traffic-engineered policy.
Incorrect Answers
A:Place each split RAN function and its xHaul link deliberately, enforcing the transport latency, timing and reliability needs for the selected functional split. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
B:Validate coherent optic capabilities, router support, fiber reach and link optical telemetry before enabling routed optical connectivity. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
C:Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations. For this best change assessment, the shortcut changes or bypasses the necessary routing, service or operational boundary rather than correcting it.
Question 12
A Cisco service provider design review finds: An operator requires traffic to traverse a low-latency backbone path but advertises an ordinary IGP shortest path and calls it a guaranteed traffic-engineered policy. The team proposes: Define the selected SR data plane and explicit policy segments, then verify headend steering, supported SIDs and actual egress path. Which engineering principle most strongly supports the recommended response? Select ONE best answer.
- IOS XE and IOS XR have distinct software architectures and management workflows; IOS XR supports a transactional configuration commit model.
- DWDM multiplexes wavelength channels over fiber while xPON shares passive optical distribution and DOCSIS and xDSL use distinct access media and systems.
- Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
- Network functions can be virtualized as VM or container workloads, but packet throughput and security depend on reserved resources and supported host interfaces.
Explanation
Correct Answer
C:Demonstrable success requires: Measured traffic follows the intended policy when valid and a known fallback occurs if a segment becomes unreachable. Applied case: An operator requires traffic to traverse a low-latency backbone path but advertises an ordinary IGP shortest path and calls it a guaranteed traffic-engineered policy.
Incorrect Answers
A:IOS XE and IOS XR have distinct software architectures and management workflows; IOS XR supports a transactional configuration commit model. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
B:DWDM multiplexes wavelength channels over fiber while xPON shares passive optical distribution and DOCSIS and xDSL use distinct access media and systems. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
D:Network functions can be virtualized as VM or container workloads, but packet throughput and security depend on reserved resources and supported host interfaces. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
Question 13
The service provider operations team has not yet approved a change. Current evidence indicates: An operator requires traffic to traverse a low-latency backbone path but advertises an ordinary IGP shortest path and calls it a guaranteed traffic-engineered policy. Which evidence best tests the technical diagnosis before approving a disruptive change? Select ONE best answer.
- Review span attenuation, termination equipment, optical power budget, splitter ratio and supported service rates in a documented link plan.
- Benchmark representative packet rates, CPU pinning or acceleration, virtual NIC queues, failure recovery and privilege boundaries.
- Capture customer DSCP, MPLS traffic class at ingress and transit, and egress queue or remark behavior under controlled congestion.
- Examine IGP SID advertisement, SR policy candidate path, segment list and traceroute or telemetry for both normal and failed links.
Explanation
Correct Answer
D:This check tests the actual routing, transport or service boundary before an operationally risky response. Applied case: An operator requires traffic to traverse a low-latency backbone path but advertises an ordinary IGP shortest path and calls it a guaranteed traffic-engineered policy.
Incorrect Answers
A:Review span attenuation, termination equipment, optical power budget, splitter ratio and supported service rates in a documented link plan. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
B:Benchmark representative packet rates, CPU pinning or acceleration, virtual NIC queues, failure recovery and privilege boundaries. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
C:Capture customer DSCP, MPLS traffic class at ingress and transit, and egress queue or remark behavior under controlled congestion. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
Question 14
A candidate correction has been tested and the platform team requires a post-change acceptance check. Original problem: An operator requires traffic to traverse a low-latency backbone path but advertises an ordinary IGP shortest path and calls it a guaranteed traffic-engineered policy. The carrier operations owner needs positive and negative tests showing existing customer services remain available. Which acceptance result demonstrates correct service provider forwarding and control behavior without disrupting authorized workflows? Select ONE best answer.
- Marking and scheduling follow the selected model without unintended exposure of one customer's QoS assumptions to another.
- Only intended tenant endpoints communicate and core forwarding provides the required transport without unwanted cross-customer bridging.
- Measured traffic follows the intended policy when valid and a known fallback occurs if a segment becomes unreachable.
- Spoofed ingress traffic is denied, authorized flows remain, blackholing stays scoped and required Ethernet links are authenticated and encrypted.
Explanation
Correct Answer
C:Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations. Applied case: An operator requires traffic to traverse a low-latency backbone path but advertises an ordinary IGP shortest path and calls it a guaranteed traffic-engineered policy.
Incorrect Answers
A:Marking and scheduling follow the selected model without unintended exposure of one customer's QoS assumptions to another. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
B:Only intended tenant endpoints communicate and core forwarding provides the required transport without unwanted cross-customer bridging. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
D:Spoofed ingress traffic is denied, authorized flows remain, blackholing stays scoped and required Ethernet links are authenticated and encrypted. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
Question 15
An implementation sign-off request identifies the following problem: An operator requires traffic to traverse a low-latency backbone path but advertises an ordinary IGP shortest path and calls it a guaranteed traffic-engineered policy. Which paired technical change and validation should close the implementation review? Select ONE best answer.
- Change: Define the selected SR data plane and explicit policy segments, then verify headend steering, supported SIDs and actual egress path. Verify: Examine IGP SID advertisement, SR policy candidate path, segment list and traceroute or telemetry for both normal and failed links.
- Change: Establish explicit QoS trust boundaries, bounded class marking and TE reservation policies that match measured capacity and the selected bandwidth model. Verify: Inspect received DSCP distributions, policer counters, class queue drops and reservation availability on a link saturation test.
- Change: Match the physical access or transport technology to the fiber plant, sharing model, reach and capacity requirements before choosing optics or termination equipment. Verify: Review span attenuation, termination equipment, optical power budget, splitter ratio and supported service rates in a documented link plan.
- Change: Size and isolate NFVI compute, networking and storage resources for each VNF or container workload and validate orchestration and availability. Verify: Benchmark representative packet rates, CPU pinning or acceleration, virtual NIC queues, failure recovery and privilege boundaries.
Explanation
Correct Answer
A:The change is successful only when: Measured traffic follows the intended policy when valid and a known fallback occurs if a segment becomes unreachable.
Incorrect Answers
B:Change: Establish explicit QoS trust boundaries, bounded class marking and TE reservation policies that match measured capacity and the selected bandwidth model.
C:Change: Match the physical access or transport technology to the fiber plant, sharing model, reach and capacity requirements before choosing optics or termination equipment.
D:Change: Size and isolate NFVI compute, networking and storage resources for each VNF or container workload and validate orchestration and availability. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
Question 16
A service provider network engineer is reviewing this backbone or customer-service scenario: A provider wants SRv6 steering but assumes that a classic MPLS node SID and an IPv6 segment endpoint have identical forwarding and encapsulation behavior. A proposed shortcut is: Add an arbitrary segment list with no advertised SIDs and assume every path automatically meets the latency objective. What should the service provider engineer recommend as the narrowly scoped correction? Select ONE best answer.
- Place each split RAN function and its xHaul link deliberately, enforcing the transport latency, timing and reliability needs for the selected functional split.
- Define the selected SR data plane and explicit policy segments, then verify headend steering, supported SIDs and actual egress path.
- Add an arbitrary segment list with no advertised SIDs and assume every path automatically meets the latency objective.
- Establish explicit QoS trust boundaries, bounded class marking and TE reservation policies that match measured capacity and the selected bandwidth model.
Explanation
Correct Answer
B:This targeted action addresses the observed service-provider control or forwarding gap without discarding necessary controls. Applied case: A provider wants SRv6 steering but assumes that a classic MPLS node SID and an IPv6 segment endpoint have identical forwarding and encapsulation behavior.
Incorrect Answers
A:Place each split RAN function and its xHaul link deliberately, enforcing the transport latency, timing and reliability needs for the selected functional split. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
C:Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations. Applied case: A provider wants SRv6 steering but assumes that a classic MPLS node SID and an IPv6 segment endpoint have identical forwarding and encapsulation behavior.
D:Establish explicit QoS trust boundaries, bounded class marking and TE reservation policies that match measured capacity and the selected bandwidth model. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
Question 17
A Cisco service provider design review finds: A provider wants SRv6 steering but assumes that a classic MPLS node SID and an IPv6 segment endpoint have identical forwarding and encapsulation behavior. The team proposes: Define the selected SR data plane and explicit policy segments, then verify headend steering, supported SIDs and actual egress path. Which engineering principle most strongly supports the recommended response? Select ONE best answer.
- Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
- IOS XE and IOS XR have distinct software architectures and management workflows; IOS XR supports a transactional configuration commit model.
- Routed optical architectures integrate packet routing and optical transport interfaces but physical-layer impairments and equipment compatibility still constrain operation.
- uRPF checks source reachability, RTBH can discard selected routed traffic during attacks and MACsec protects appropriate Ethernet links; none is interchangeable.
Explanation
Correct Answer
A:Demonstrable success requires: Measured traffic follows the intended policy when valid and a known fallback occurs if a segment becomes unreachable. Applied case: A provider wants SRv6 steering but assumes that a classic MPLS node SID and an IPv6 segment endpoint have identical forwarding and encapsulation behavior.
Incorrect Answers
B:IOS XE and IOS XR have distinct software architectures and management workflows; IOS XR supports a transactional configuration commit model. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
C:Routed optical architectures integrate packet routing and optical transport interfaces but physical-layer impairments and equipment compatibility still constrain operation. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
D:URPF checks source reachability, RTBH can discard selected routed traffic during attacks and MACsec protects appropriate Ethernet links; none is interchangeable. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
Question 18
The service provider operations team has not yet approved a change. Current evidence indicates: A provider wants SRv6 steering but assumes that a classic MPLS node SID and an IPv6 segment endpoint have identical forwarding and encapsulation behavior. Which evidence best tests the technical diagnosis before approving a disruptive change? Select ONE best answer.
- Examine IGP SID advertisement, SR policy candidate path, segment list and traceroute or telemetry for both normal and failed links.
- Confirm exact software release, target command hierarchy, candidate diff, commit outcome and rollback in a lab device.
- Inspect received DSCP distributions, policer counters, class queue drops and reservation availability on a link saturation test.
- Compare optic part and platform matrix, channel power, error metrics and line-system span data on a controlled pair of links.
Explanation
Correct Answer
A:This check tests the actual routing, transport or service boundary before an operationally risky response. Applied case: A provider wants SRv6 steering but assumes that a classic MPLS node SID and an IPv6 segment endpoint have identical forwarding and encapsulation behavior.
Incorrect Answers
B:Confirm exact software release, target command hierarchy, candidate diff, commit outcome and rollback in a lab device. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
C:Inspect received DSCP distributions, policer counters, class queue drops and reservation availability on a link saturation test. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
D:Compare optic part and platform matrix, channel power, error metrics and line-system span data on a controlled pair of links. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
Question 19
A candidate correction has been tested and the platform team requires a post-change acceptance check. Original problem: A provider wants SRv6 steering but assumes that a classic MPLS node SID and an IPv6 segment endpoint have identical forwarding and encapsulation behavior. The carrier operations owner needs positive and negative tests showing existing customer services remain available. Which acceptance result demonstrates correct service provider forwarding and control behavior without disrupting authorized workflows? Select ONE best answer.
- Changes are accepted only through supported platform mechanisms and an invalid candidate does not silently alter unrelated service state.
- Measured traffic follows the intended policy when valid and a known fallback occurs if a segment becomes unreachable.
- Routed optical ports establish stable links within their documented performance limits and exposed errors are monitored.
- Marking and scheduling follow the selected model without unintended exposure of one customer's QoS assumptions to another.
Explanation
Correct Answer
B:Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations. The result must be validated using the documented device, service or access context.
Incorrect Answers
A:Changes are accepted only through supported platform mechanisms and an invalid candidate does not silently alter unrelated service state. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
C:Routed optical ports establish stable links within their documented performance limits and exposed errors are monitored. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
D:Marking and scheduling follow the selected model without unintended exposure of one customer's QoS assumptions to another. A provider wants SRv6 steering but assumes that a classic MPLS node SID and an IPv6 segment endpoint have identical forwarding and encapsulation behavior.
Question 20
For an original SPCOR service-provider engineering scenario, consider: A provider wants SRv6 steering but assumes that a classic MPLS node SID and an IPv6 segment endpoint have identical forwarding and encapsulation behavior. Select TWO complementary steps: the targeted correction and its strongest prechange validation.
- Check: Examine IGP SID advertisement, SR policy candidate path, segment list and traceroute or telemetry for both normal and failed links.
- Add an arbitrary segment list with no advertised SIDs and assume every path automatically meets the latency objective.
- Check: Test spoofed and valid sources, check BGP blackhole policy scope and verify MACsec session status and counters on supported links.
- Change: Define the selected SR data plane and explicit policy segments, then verify headend steering, supported SIDs and actual egress path.
- Change: Restrict and police packets destined to the routing control plane, and coordinate authenticated neighbor sessions and supported TTL-security settings.
Explanation
Correct Answer
A:Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations. Required intervention: Define the selected SR data plane and explicit policy segments, then verify headend steering, supported SIDs and actual egress path.
D:Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations. Evidence: Examine IGP SID advertisement, SR policy candidate path, segment list and traceroute or telemetry for both normal and failed links.
Incorrect Answers
B:For this select two assessment, the shortcut changes or bypasses the necessary routing, service or operational boundary rather than correcting it. Applied case: A provider wants SRv6 steering but assumes that a classic MPLS node SID and an IPv6 segment endpoint have identical forwarding and encapsulation behavior.
C:Check: Test spoofed and valid sources, check BGP blackhole policy scope and verify MACsec session status and counters on supported links. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
E:Change: Restrict and police packets destined to the routing control plane, and coordinate authenticated neighbor sessions and supported TTL-security settings. Segment routing encodes forwarding instructions as segments; SR-MPLS labels and SRv6 IPv6 segment identifiers use different data-plane representations.
