cert
cert-1
cert-2

Pass Cisco 350-501 Exam in First Attempt Guaranteed!

Get 100% Latest Exam Questions, Accurate & Verified Answers to Pass the Actual Exam!
30 Days Free Updates, Instant Download!

cert-5
cert-6
350-501 Exam - Verified By Experts
350-501 Premium Bundle
$29.98

350-501 Premium Bundle

$79.99
$109.97
  • Premium File 528 Questions & Answers. Last update: Nov 02, 2026
  • Training Course 253 Video Lectures
  • Study Guide 1160 Pages
 
$109.97
$79.99
accept 18 downloads in last 7 days
block-screenshots
Purchase Cisco 350-501 Exam Training Products Individually
Cisco 350-501 Premium File
Premium File 528 Q&A
$76.99$69.99
Cisco 350-501 Video Training Course
Training Course 253 Lectures
$21.99 $19.99
Cisco 350-501 PDF Study Guide
Study Guide 1160 Pages
$21.99 $19.99
Cisco 350-501 Practice Test 53

Question 520

For an original SPCOR service-provider engineering scenario, consider: A metro PE strips the customer's inner VLAN tag when applying a service VLAN, so two different customer services are merged on an uplink. Select TWO complementary steps: the targeted correction and its strongest prechange validation.

  1. Check: Capture ingress and egress Ethernet frames including TPID, tag stack and VLAN IDs for two isolated customers.
  2. Check: Inspect IGMPv3 source lists or MLD reports, snooping table, receiver membership and forwarded multicast stream source identities.
  3. Change: Configure the supported mVPN multicast control-plane and provider transport distribution according to receiver membership and traffic scale.
  4. Change: Configure consistent service and customer VLAN tag handling with explicit encapsulation and correct cross-PE mapping.
  5. Remove every customer C-tag at the carrier boundary and assume an outer shared S-tag preserves all separate customer VLANs.

Explanation

Correct Answer

A:

IEEE 802.1ad provider bridging adds a service tag outside customer VLAN tags, and tag roles must remain consistent through the carrier network. Required intervention: Configure consistent service and customer VLAN tag handling with explicit encapsulation and correct cross-PE mapping.

D:

IEEE 802.1ad provider bridging adds a service tag outside customer VLAN tags, and tag roles must remain consistent through the carrier network. Evidence: Capture ingress and egress Ethernet frames including TPID, tag stack and VLAN IDs for two isolated customers.

Incorrect Answers

B:

Check: Inspect IGMPv3 source lists or MLD reports, snooping table, receiver membership and forwarded multicast stream source identities. IEEE 802.1ad provider bridging adds a service tag outside customer VLAN tags, and tag roles must remain consistent through the carrier network.

C:

Change: Configure the supported mVPN multicast control-plane and provider transport distribution according to receiver membership and traffic scale. A metro PE strips the customer's inner VLAN tag when applying a service VLAN, so two different customer services are merged on an uplink.

E:

For this select two assessment, the shortcut changes or bypasses the necessary routing, service or operational boundary rather than correcting it. IEEE 802.1ad provider bridging adds a service tag outside customer VLAN tags, and tag roles must remain consistent through the carrier network.

Question 521

A service provider network engineer is reviewing this backbone or customer-service scenario: A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic. A proposed shortcut is: Remove every customer C-tag at the carrier boundary and assume an outer shared S-tag preserves all separate customer VLANs. What should the service provider engineer recommend as the narrowly scoped correction? Select ONE best answer.

  1. Classify at the chosen trust point and apply appropriate bounded priority, policing, shaping and congestion avoidance according to SLA and measured flow behavior.
  2. Remove every customer C-tag at the carrier boundary and assume an outer shared S-tag preserves all separate customer VLANs.
  3. Select the supported Inter-AS VPN option and validate labeled VPN route exchange, route targets and transport next-hop resolution at each boundary.
  4. Configure consistent service and customer VLAN tag handling with explicit encapsulation and correct cross-PE mapping.

Explanation

Correct Answer

D:

This targeted action addresses the observed service-provider control or forwarding gap without discarding necessary controls. Applied case: A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic.

Incorrect Answers

A:

This option addresses a different service provider engineering topic (QoS classification marking policing shaping and WRED) rather than the documented Provider bridging 802.1ad Q-in-Q and VLAN boundaries decision.

B:

IEEE 802.1ad provider bridging adds a service tag outside customer VLAN tags, and tag roles must remain consistent through the carrier network. Applied case: A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic.

C:

Select the supported Inter-AS VPN option and validate labeled VPN route exchange, route targets and transport next-hop resolution at each boundary. A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic.

Question 522

A Cisco service provider design review finds: A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic. The team proposes: Configure consistent service and customer VLAN tag handling with explicit encapsulation and correct cross-PE mapping. Which engineering principle most strongly supports the recommended response? Select ONE best answer.

  1. IEEE 802.1ad provider bridging adds a service tag outside customer VLAN tags, and tag roles must remain consistent through the carrier network.
  2. MVPN extends multicast services through customer VPN contexts, using signaling and core replication trees distinct from ordinary unicast VPN route exchange.
  3. Inter-AS L3VPN designs extend VPN signaling across AS boundaries with option-specific control-plane and label requirements; route visibility does not alone prove data-plane continuity.
  4. E-Line is point-to-point, E-LAN is multipoint and E-Tree distinguishes root and leaf connectivity, requiring deliberate forwarding restrictions.

Explanation

Correct Answer

A:

Demonstrable success requires: Each customer's original VLAN identity is preserved or intentionally translated and service isolation remains intact across the provider. Applied case: A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic.

Incorrect Answers

B:

MVPN extends multicast services through customer VPN contexts, using signaling and core replication trees distinct from ordinary unicast VPN route exchange. A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic.

C:

Inter-AS L3VPN designs extend VPN signaling across AS boundaries with option-specific control-plane and label requirements; route visibility does not alone prove data-plane continuity. A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic.

D:

E-Line is point-to-point, E-LAN is multipoint and E-Tree distinguishes root and leaf connectivity, requiring deliberate forwarding restrictions. A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic.

Question 523

The service provider operations team has not yet approved a change. Current evidence indicates: A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic. Which evidence best tests the technical diagnosis before approving a disruptive change? Select ONE best answer.

  1. Check EVPN address-family advertisements, route types, Ethernet segment and EVI context, route targets and remote forwarding database.
  2. Capture ingress and egress Ethernet frames including TPID, tag stack and VLAN IDs for two isolated customers.
  3. Compare ESI advertisements, DF election, MAC mobility sequence and traffic behavior before and after one PE uplink failure.
  4. Check labeled route handoff, VRF or transport separation, next-hop reachability and a representative downstream customer LSP.

Explanation

Correct Answer

B:

IEEE 802.1ad provider bridging adds a service tag outside customer VLAN tags, and tag roles must remain consistent through the carrier network. This check tests the actual routing, transport or service boundary before an operationally risky response.

Incorrect Answers

A:

Check EVPN address-family advertisements, route types, Ethernet segment and EVI context, route targets and remote forwarding database. A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic.

C:

This option addresses a different service provider engineering topic (EVPN multihoming Ethernet segment and split horizon) rather than the documented Provider bridging 802.1ad Q-in-Q and VLAN boundaries decision.

D:

Check labeled route handoff, VRF or transport separation, next-hop reachability and a representative downstream customer LSP. A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic.

Question 524

A candidate correction has been tested and the platform team requires a post-change acceptance check. Original problem: A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic. The carrier operations owner needs positive and negative tests showing existing customer services remain available. Which acceptance result demonstrates correct service provider forwarding and control behavior without disrupting authorized workflows? Select ONE best answer.

  1. Customers reach only approved shared services and internet egress while peer-to-peer tenant access remains restricted.
  2. The ring remains loop-free at steady state and service recovers through the allowed protection topology with traceable alarms.
  3. Intended subscribers receive the selected source and nonmembers do not trigger unwanted flood or RP dependence.
  4. Each customer's original VLAN identity is preserved or intentionally translated and service isolation remains intact across the provider.

Explanation

Correct Answer

D:

IEEE 802.1ad provider bridging adds a service tag outside customer VLAN tags, and tag roles must remain consistent through the carrier network. The approved implementation step was: Configure consistent service and customer VLAN tag handling with explicit encapsulation and correct cross-PE mapping.

Incorrect Answers

A:

Customers reach only approved shared services and internet egress while peer-to-peer tenant access remains restricted. A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic.

B:

The ring remains loop-free at steady state and service recovers through the allowed protection topology with traceable alarms. A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic.

C:

Intended subscribers receive the selected source and nonmembers do not trigger unwanted flood or RP dependence. A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic.

Question 525

An implementation sign-off request identifies the following problem: A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic. Which paired technical change and validation should close the implementation review? Select ONE best answer.

  1. Change: Configure consistent service and customer VLAN tag handling with explicit encapsulation and correct cross-PE mapping. Verify: Capture ingress and egress Ethernet frames including TPID, tag stack and VLAN IDs for two isolated customers.
  2. Change: Use matching IGMP or MLD listener protocols and supported source-filtering behavior on the appropriate IPv4 or IPv6 access segment. Verify: Inspect IGMPv3 source lists or MLD reports, snooping table, receiver membership and forwarded multicast stream source identities.
  3. Change: Define separate VRFs with correct route distinguishers and coordinated route-target import and export policies and confirm PE-to-PE labeled reachability. Verify: Examine VRF route tables, RD, RT extended communities, MP-BGP updates and the transport plus VPN label stack.
  4. Change: Build selective route leaking or shared-service VRF connectivity with scoped route targets and explicit security controls for shared and internet paths. Verify: Compare imported RT lists, VRF next hops, shared service return routing and firewall policy using two customer tenants.

Explanation

Correct Answer

A:

IEEE 802.1ad provider bridging adds a service tag outside customer VLAN tags, and tag roles must remain consistent through the carrier network. The change is successful only when: Each customer's original VLAN identity is preserved or intentionally translated and service isolation remains intact across the provider.

Incorrect Answers

B:

Change: Use matching IGMP or MLD listener protocols and supported source-filtering behavior on the appropriate IPv4 or IPv6 access segment. A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic.

C:

Change: Define separate VRFs with correct route distinguishers and coordinated route-target import and export policies and confirm PE-to-PE labeled reachability. A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic.

D:

Change: Build selective route leaking or shared-service VRF connectivity with scoped route targets and explicit security controls for shared and internet paths. A wholesale network uses one outer S-tag per subscriber but a new customer VLAN is assigned a conflicting service identifier and leaks broadcast traffic.

Question 526

A service provider network engineer is reviewing this backbone or customer-service scenario: A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active. A proposed shortcut is: Open every ring link simultaneously for redundancy and assume switches will never loop Ethernet broadcast traffic. What should the service provider engineer recommend as the narrowly scoped correction? Select ONE best answer.

  1. Configure a consistent Ethernet Segment Identifier and supported designated-forwarder or split-horizon behavior for the multihoming model.
  2. Enable supported ring protection and Ethernet OAM mechanisms to enforce a loop-free normal state and verify service continuity after failure.
  3. Open every ring link simultaneously for redundancy and assume switches will never loop Ethernet broadcast traffic.
  4. Match multicast routing mode and receiver source selection, then verify PIM RPF and RP or source-tree behavior for the chosen model.

Explanation

Correct Answer

B:

This targeted action addresses the observed service-provider control or forwarding gap without discarding necessary controls. Applied case: A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active.

Incorrect Answers

A:

Configure a consistent Ethernet Segment Identifier and supported designated-forwarder or split-horizon behavior for the multihoming model. A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active.

C:

G.8032 Ethernet Ring Protection controls blocked and active ring links, while Ethernet OAM provides fault detection and service continuity evidence. For this best change assessment, the shortcut changes or bypasses the necessary routing, service or operational boundary rather than correcting it.

D:

Match multicast routing mode and receiver source selection, then verify PIM RPF and RP or source-tree behavior for the chosen model. A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active.

Question 527

A Cisco service provider design review finds: A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active. The team proposes: Enable supported ring protection and Ethernet OAM mechanisms to enforce a loop-free normal state and verify service continuity after failure. Which engineering principle most strongly supports the recommended response? Select ONE best answer.

  1. EVPN multihoming coordinates PE participation through Ethernet segment routes and forwarder election to prevent loops and maintain reachability.
  2. Inter-AS L3VPN designs extend VPN signaling across AS boundaries with option-specific control-plane and label requirements; route visibility does not alone prove data-plane continuity.
  3. Carrier supporting carrier lets a provider transport another carrier's VPN or MPLS reachability without needing full visibility into every downstream end-customer route.
  4. G.8032 Ethernet Ring Protection controls blocked and active ring links, while Ethernet OAM provides fault detection and service continuity evidence.

Explanation

Correct Answer

D:

Demonstrable success requires: The ring remains loop-free at steady state and service recovers through the allowed protection topology with traceable alarms. Applied case: A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active.

Incorrect Answers

A:

EVPN multihoming coordinates PE participation through Ethernet segment routes and forwarder election to prevent loops and maintain reachability. A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active.

B:

Inter-AS L3VPN designs extend VPN signaling across AS boundaries with option-specific control-plane and label requirements; route visibility does not alone prove data-plane continuity. A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active.

C:

Carrier supporting carrier lets a provider transport another carrier's VPN or MPLS reachability without needing full visibility into every downstream end-customer route. A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active.

Question 528

The service provider operations team has not yet approved a change. Current evidence indicates: A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active. Which evidence best tests the technical diagnosis before approving a disruptive change? Select ONE best answer.

  1. Inspect IGMPv3 source lists or MLD reports, snooping table, receiver membership and forwarded multicast stream source identities.
  2. Check labeled route handoff, VRF or transport separation, next-hop reachability and a representative downstream customer LSP.
  3. Inspect (*,G) and (S,G) state, RP mapping, RPF interface and actual receiver joins under a test stream.
  4. Inspect ring protection state, OAM continuity-check results, link-failure events and convergence on one forced-ring break.

Explanation

Correct Answer

D:

G.8032 Ethernet Ring Protection controls blocked and active ring links, while Ethernet OAM provides fault detection and service continuity evidence. Applied case: A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active.

Incorrect Answers

A:

Inspect IGMPv3 source lists or MLD reports, snooping table, receiver membership and forwarded multicast stream source identities. A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active.

B:

Check labeled route handoff, VRF or transport separation, next-hop reachability and a representative downstream customer LSP. A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active.

C:

Inspect (*,G) and (S,G) state, RP mapping, RPF interface and actual receiver joins under a test stream. A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active.

Question 529

A candidate correction has been tested and the platform team requires a post-change acceptance check. Original problem: A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active. The carrier operations owner needs positive and negative tests showing existing customer services remain available. Which acceptance result demonstrates correct service provider forwarding and control behavior without disrupting authorized workflows? Select ONE best answer.

  1. High-priority services meet policy while excess traffic is bounded and ordinary customer classes retain their contracted forwarding share.
  2. The dual-homed customer retains connectivity with correct single-copy flooding and no persistent Layer-2 forwarding loops.
  3. The ring remains loop-free at steady state and service recovers through the allowed protection topology with traceable alarms.
  4. Each customer reaches only its own remote sites despite overlapping addresses and the expected VPN routes import correctly.

Explanation

Correct Answer

C:

G.8032 Ethernet Ring Protection controls blocked and active ring links, while Ethernet OAM provides fault detection and service continuity evidence. The result must be validated using the documented device, service or access context.

Incorrect Answers

A:

This option addresses a different service provider engineering topic (QoS classification marking policing shaping and WRED) rather than the documented G.8032 ring and Ethernet OAM fault isolation decision.

B:

The dual-homed customer retains connectivity with correct single-copy flooding and no persistent Layer-2 forwarding loops. A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active.

D:

Each customer reaches only its own remote sites despite overlapping addresses and the expected VPN routes import correctly. A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active.

Question 530

For an original SPCOR service-provider engineering scenario, consider: A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active. Select TWO complementary steps: the targeted correction and its strongest prechange validation.

  1. Check: Inspect customer PIM state, mVPN BGP or tree signaling, receiver joins, replication counters and stream reachability between PEs.
  2. Change: Match ingress encapsulation, symmetric tag rewrite and EVC service instances to the contracted UNI format end to end.
  3. Check: Inspect ring protection state, OAM continuity-check results, link-failure events and convergence on one forced-ring break.
  4. Open every ring link simultaneously for redundancy and assume switches will never loop Ethernet broadcast traffic.
  5. Change: Enable supported ring protection and Ethernet OAM mechanisms to enforce a loop-free normal state and verify service continuity after failure.

Explanation

Correct Answer

C:

G.8032 Ethernet Ring Protection controls blocked and active ring links, while Ethernet OAM provides fault detection and service continuity evidence. Required intervention: Enable supported ring protection and Ethernet OAM mechanisms to enforce a loop-free normal state and verify service continuity after failure.

E:

G.8032 Ethernet Ring Protection controls blocked and active ring links, while Ethernet OAM provides fault detection and service continuity evidence. Evidence: Inspect ring protection state, OAM continuity-check results, link-failure events and convergence on one forced-ring break.

Incorrect Answers

A:

Check: Inspect customer PIM state, mVPN BGP or tree signaling, receiver joins, replication counters and stream reachability between PEs. A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active.

B:

Change: Match ingress encapsulation, symmetric tag rewrite and EVC service instances to the contracted UNI format end to end. A carrier Ethernet ring forms an accidental loop because the ring protection link is unblocked while every ring segment is active.

D:

For this select two assessment, the shortcut changes or bypasses the necessary routing, service or operational boundary rather than correcting it. G.8032 Ethernet Ring Protection controls blocked and active ring links, while Ethernet OAM provides fault detection and service continuity evidence.

Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) (350-501) Practice Tests