HP HPE7-A01 Practice Test 51
Question 500
A finance workstation must use a dedicated WAN uplink, but ordinary destination routing continues to choose the default provider. The change fails acceptance. What is the safest targeted restoration action?
- Restore the former tenant interface and VRF mappings if migration introduces unintended route exposure.
- Restore the prior reachable default route and remove the broken next-hop entry if the new path fails.
- Remove or revert the overly broad policy route and restore normal forwarding until its selectors are corrected.
- Reinstate the last correct specific route and withdraw the unintended prefix before broad routing changes.
Explanation
Correct Answer
C:Remove or revert the overly broad policy route and restore normal forwarding until its selectors are corrected. Policy routing can override ordinary destination-based decisions for explicitly matched traffic; overly broad matches cause path surprises. The focused rollback restores a known safe baseline before another change attempt. The decision applies to the described policy-based routing exception situation.
Incorrect Answers
A:Restore the former tenant interface and VRF mappings if migration introduces unintended route exposure. This instead concerns routing vrfs and tenant isolation. VRFs partition forwarding and routing instances; a VLAN alone is not an isolated routing domain when the gateway is misplaced. It would not safely roll back the relevant failed change. The immediate problem concerns policy-based routing exception.
B:Restore the prior reachable default route and remove the broken next-hop entry if the new path fails. This instead concerns static default route and next-hop reachability. A default route carries destinations with no more-specific match, but only a resolvable next hop and correct VRF can forward them. It would not safely roll back the relevant failed change. The immediate problem concerns policy-based routing exception.
D:Reinstate the last correct specific route and withdraw the unintended prefix before broad routing changes. This instead concerns longest prefix match over route metric. IP forwarding chooses the longest matching installed prefix before considering administrative preference or metric among equivalent candidates. It would not safely roll back the relevant failed change. The immediate problem concerns policy-based routing exception.
Question 501
A guest subnet is inadvertently redirected through a restricted tunnel because a broad policy-based routing match includes it. Before implementing a remedy, what should the engineer check first?
- Review interface-to-VRF membership, route tables and explicit route-leaking policies for the tenant.
- Review route policy match order, source and destination selectors, configured next hop and fallback behavior.
- Review the installed default route, next-hop resolution and reachable egress interface for the affected VRF.
- Review the destination address against all installed prefixes before comparing preference or metric within eligible routes.
Explanation
Correct Answer
B:Review route policy match order, source and destination selectors, configured next hop and fallback behavior. Policy routing can override ordinary destination-based decisions for explicitly matched traffic; overly broad matches cause path surprises. The evidence check isolates the relevant prerequisite before a disruptive change. The decision applies to the described policy-based routing exception situation.
Incorrect Answers
A:Review interface-to-VRF membership, route tables and explicit route-leaking policies for the tenant. This instead concerns routing vrfs and tenant isolation. VRFs partition forwarding and routing instances; a VLAN alone is not an isolated routing domain when the gateway is misplaced. It does not isolate the cause of the stated incident. The immediate problem concerns policy-based routing exception.
C:Review the installed default route, next-hop resolution and reachable egress interface for the affected VRF. This instead concerns static default route and next-hop reachability. A default route carries destinations with no more-specific match, but only a resolvable next hop and correct VRF can forward them. It does not isolate the cause of the stated incident. The immediate problem concerns policy-based routing exception.
D:Review the destination address against all installed prefixes before comparing preference or metric within eligible routes. This instead concerns longest prefix match over route metric. IP forwarding chooses the longest matching installed prefix before considering administrative preference or metric among equivalent candidates. It does not isolate the cause of the stated incident. The immediate problem concerns policy-based routing exception.
Question 502
A guest subnet is inadvertently redirected through a restricted tunnel because a broad policy-based routing match includes it. After the root cause is confirmed, which narrowly scoped configuration action should be selected?
- Enforce tightly scoped policy-based routing for authorized traffic while retaining correct ordinary routing for other hosts.
- Map routed interfaces to the correct supported VRF and permit only approved inter-VRF access.
- Deploy a valid approved default route pointing to a reachable upstream gateway in the correct VRF.
- Eliminate or correct the erroneous more-specific route while preserving intended routing preference among equal-prefix candidates.
Explanation
Correct Answer
A:Enforce tightly scoped policy-based routing for authorized traffic while retaining correct ordinary routing for other hosts. Policy routing can override ordinary destination-based decisions for explicitly matched traffic; overly broad matches cause path surprises. The proposed configuration targets the stated dependency without broadening unrelated access. The decision applies to the described policy-based routing exception situation.
Incorrect Answers
B:Map routed interfaces to the correct supported VRF and permit only approved inter-VRF access. This instead concerns routing vrfs and tenant isolation. VRFs partition forwarding and routing instances; a VLAN alone is not an isolated routing domain when the gateway is misplaced. It would not implement the specifically required change. The immediate problem concerns policy-based routing exception.
C:Deploy a valid approved default route pointing to a reachable upstream gateway in the correct VRF. This instead concerns static default route and next-hop reachability. A default route carries destinations with no more-specific match, but only a resolvable next hop and correct VRF can forward them. It would not implement the specifically required change. The immediate problem concerns policy-based routing exception.
D:Eliminate or correct the erroneous more-specific route while preserving intended routing preference among equal-prefix candidates. This instead concerns longest prefix match over route metric. IP forwarding chooses the longest matching installed prefix before considering administrative preference or metric among equivalent candidates. It would not implement the specifically required change. The immediate problem concerns policy-based routing exception.
Question 503
A guest subnet is inadvertently redirected through a restricted tunnel because a broad policy-based routing match includes it. The review requires TWO complementary actions: one diagnostic check and one controlled configuration remedy. Select TWO actions that together meet those requirements.
- Review interface-to-VRF membership, route tables and explicit route-leaking policies for the tenant.
- Review route policy match order, source and destination selectors, configured next hop and fallback behavior.
- Deploy a valid approved default route pointing to a reachable upstream gateway in the correct VRF.
- Enforce tightly scoped policy-based routing for authorized traffic while retaining correct ordinary routing for other hosts.
Explanation
Correct Answers
B:Review route policy match order, source and destination selectors, configured next hop and fallback behavior. Policy routing can override ordinary destination-based decisions for explicitly matched traffic; overly broad matches cause path surprises. This is the required diagnosis or controlled remedy; the other keyed action supplies the complementary role. The decision applies to the described policy-based routing exception situation.
D:Enforce tightly scoped policy-based routing for authorized traffic while retaining correct ordinary routing for other hosts. Policy routing can override ordinary destination-based decisions for explicitly matched traffic; overly broad matches cause path surprises. This is the required diagnosis or controlled remedy; the other keyed action supplies the complementary role. The decision applies to the described policy-based routing exception situation.
Incorrect Answers
A:Review interface-to-VRF membership, route tables and explicit route-leaking policies for the tenant. This instead concerns routing vrfs and tenant isolation. VRFs partition forwarding and routing instances; a VLAN alone is not an isolated routing domain when the gateway is misplaced. It is not one of the requested paired diagnosis and configuration actions. The immediate problem concerns policy-based routing exception.
C:Deploy a valid approved default route pointing to a reachable upstream gateway in the correct VRF. This instead concerns static default route and next-hop reachability. A default route carries destinations with no more-specific match, but only a resolvable next hop and correct VRF can forward them. It is not one of the requested paired diagnosis and configuration actions. The immediate problem concerns policy-based routing exception.
Question 504
A guest subnet is inadvertently redirected through a restricted tunnel because a broad policy-based routing match includes it. If the revised setting disrupts users, which controlled rollback would be most relevant?
- Reinstate the former tenant interface and VRF mappings if migration introduces unintended route exposure.
- Reinstate the prior reachable default route and remove the broken next-hop entry if the new path fails.
- Eliminate or revert the overly broad policy route and restore normal forwarding until its selectors are corrected.
- Restore the last correct specific route and withdraw the unintended prefix before broad routing changes.
Explanation
Correct Answer
C:Eliminate or revert the overly broad policy route and restore normal forwarding until its selectors are corrected. Policy routing can override ordinary destination-based decisions for explicitly matched traffic; overly broad matches cause path surprises. The focused rollback restores a known safe baseline before another change attempt. The decision applies to the described policy-based routing exception situation.
Incorrect Answers
A:Reinstate the former tenant interface and VRF mappings if migration introduces unintended route exposure. This instead concerns routing vrfs and tenant isolation. VRFs partition forwarding and routing instances; a VLAN alone is not an isolated routing domain when the gateway is misplaced. It would not safely roll back the relevant failed change. The immediate problem concerns policy-based routing exception.
B:Reinstate the prior reachable default route and remove the broken next-hop entry if the new path fails. This instead concerns static default route and next-hop reachability. A default route carries destinations with no more-specific match, but only a resolvable next hop and correct VRF can forward them. It would not safely roll back the relevant failed change. The immediate problem concerns policy-based routing exception.
D:Restore the last correct specific route and withdraw the unintended prefix before broad routing changes. This instead concerns longest prefix match over route metric. IP forwarding chooses the longest matching installed prefix before considering administrative preference or metric among equivalent candidates. It would not safely roll back the relevant failed change. The immediate problem concerns policy-based routing exception.
Question 505
Two customer departments share a switch but one VLAN learns routes from another department after a misconfigured VRF assignment. Which investigation would best isolate the immediate network dependency?
- Inspect the installed default route, next-hop resolution and reachable egress interface for the affected VRF.
- Inspect the destination address against all installed prefixes before comparing preference or metric within eligible routes.
- Inspect interface-to-VRF membership, route tables and explicit route-leaking policies for the tenant.
- Inspect OSPF interface area, hello/dead timers, network type and neighbor state on both peers.
Explanation
Correct Answer
C:Inspect interface-to-VRF membership, route tables and explicit route-leaking policies for the tenant. VRFs partition forwarding and routing instances; a VLAN alone is not an isolated routing domain when the gateway is misplaced. The evidence check isolates the relevant prerequisite before a disruptive change. The decision applies to the described routing vrfs and tenant isolation situation.
Incorrect Answers
A:Inspect the installed default route, next-hop resolution and reachable egress interface for the affected VRF. This instead concerns static default route and next-hop reachability. A default route carries destinations with no more-specific match, but only a resolvable next hop and correct VRF can forward them. It does not isolate the cause of the stated incident. The immediate problem concerns routing vrfs and tenant isolation.
B:Inspect the destination address against all installed prefixes before comparing preference or metric within eligible routes. This instead concerns longest prefix match over route metric. IP forwarding chooses the longest matching installed prefix before considering administrative preference or metric among equivalent candidates. It does not isolate the cause of the stated incident. The immediate problem concerns routing vrfs and tenant isolation.
D:Inspect OSPF interface area, hello/dead timers, network type and neighbor state on both peers. This instead concerns ospf area and neighbor state. OSPF neighbors must agree on core adjacency properties; Ethernet link status and matching IP ranges alone are insufficient. It does not isolate the cause of the stated incident. The immediate problem concerns routing vrfs and tenant isolation.
Question 506
Two customer departments share a switch but one VLAN learns routes from another department after a misconfigured VRF assignment. Which specific corrective design step best meets the stated campus requirement?
- Install a valid approved default route pointing to a reachable upstream gateway in the correct VRF.
- Assign routed interfaces to the correct supported VRF and permit only approved inter-VRF access.
- Remove or correct the erroneous more-specific route while preserving intended routing preference among equal-prefix candidates.
- Align the intended OSPF area and compatible adjacency parameters without changing unrelated routing peers.
Explanation
Correct Answer
B:Assign routed interfaces to the correct supported VRF and permit only approved inter-VRF access. VRFs partition forwarding and routing instances; a VLAN alone is not an isolated routing domain when the gateway is misplaced. The proposed configuration targets the stated dependency without broadening unrelated access. The decision applies to the described routing vrfs and tenant isolation situation.
Incorrect Answers
A:Install a valid approved default route pointing to a reachable upstream gateway in the correct VRF. This instead concerns static default route and next-hop reachability. A default route carries destinations with no more-specific match, but only a resolvable next hop and correct VRF can forward them. It would not implement the specifically required change. The immediate problem concerns routing vrfs and tenant isolation.
C:Remove or correct the erroneous more-specific route while preserving intended routing preference among equal-prefix candidates. This instead concerns longest prefix match over route metric. IP forwarding chooses the longest matching installed prefix before considering administrative preference or metric among equivalent candidates. It would not implement the specifically required change. The immediate problem concerns routing vrfs and tenant isolation.
D:Align the intended OSPF area and compatible adjacency parameters without changing unrelated routing peers. This instead concerns ospf area and neighbor state. OSPF neighbors must agree on core adjacency properties; Ethernet link status and matching IP ranges alone are insufficient. It would not implement the specifically required change. The immediate problem concerns routing vrfs and tenant isolation.
Question 507
Two customer departments share a switch but one VLAN learns routes from another department after a misconfigured VRF assignment. Following a targeted change, which acceptance test would most directly demonstrate success?
- Verify each tenant route table is isolated and only intentional cross-VRF traffic is reachable.
- Verify the active routing table and successful permitted traffic to a remote destination outside connected prefixes.
- Verify a lookup for the exact affected destination selects the intended longest matching prefix.
- Confirm neighbor state reaches Full and the expected link-state advertisements and routes appear.
Explanation
Correct Answer
A:Verify each tenant route table is isolated and only intentional cross-VRF traffic is reachable. VRFs partition forwarding and routing instances; a VLAN alone is not an isolated routing domain when the gateway is misplaced. The result tests actual working behavior, not merely a saved configuration. The decision applies to the described routing vrfs and tenant isolation situation.
Incorrect Answers
B:Verify the active routing table and successful permitted traffic to a remote destination outside connected prefixes. This instead concerns static default route and next-hop reachability. A default route carries destinations with no more-specific match, but only a resolvable next hop and correct VRF can forward them. It would not establish that this function actually works. The immediate problem concerns routing vrfs and tenant isolation.
C:Verify a lookup for the exact affected destination selects the intended longest matching prefix. This instead concerns longest prefix match over route metric. IP forwarding chooses the longest matching installed prefix before considering administrative preference or metric among equivalent candidates. It would not establish that this function actually works. The immediate problem concerns routing vrfs and tenant isolation.
D:Confirm neighbor state reaches Full and the expected link-state advertisements and routes appear. This instead concerns ospf area and neighbor state. OSPF neighbors must agree on core adjacency properties; Ethernet link status and matching IP ranges alone are insufficient. It would not establish that this function actually works. The immediate problem concerns routing vrfs and tenant isolation.
Question 508
Two customer departments share a switch but one VLAN learns routes from another department after a misconfigured VRF assignment. The change fails acceptance. What is the safest targeted restoration action?
- Restore the prior reachable default route and remove the broken next-hop entry if the new path fails.
- Reinstate the last correct specific route and withdraw the unintended prefix before broad routing changes.
- Restore prior supported OSPF interface parameters on the affected link while investigating incompatibility.
- Restore the former tenant interface and VRF mappings if migration introduces unintended route exposure.
Explanation
Correct Answer
D:Restore the former tenant interface and VRF mappings if migration introduces unintended route exposure. VRFs partition forwarding and routing instances; a VLAN alone is not an isolated routing domain when the gateway is misplaced. The focused rollback restores a known safe baseline before another change attempt. The decision applies to the described routing vrfs and tenant isolation situation.
Incorrect Answers
A:Restore the prior reachable default route and remove the broken next-hop entry if the new path fails. This instead concerns static default route and next-hop reachability. A default route carries destinations with no more-specific match, but only a resolvable next hop and correct VRF can forward them. It would not safely roll back the relevant failed change. The immediate problem concerns routing vrfs and tenant isolation.
B:Reinstate the last correct specific route and withdraw the unintended prefix before broad routing changes. This instead concerns longest prefix match over route metric. IP forwarding chooses the longest matching installed prefix before considering administrative preference or metric among equivalent candidates. It would not safely roll back the relevant failed change. The immediate problem concerns routing vrfs and tenant isolation.
C:Restore prior supported OSPF interface parameters on the affected link while investigating incompatibility. This instead concerns ospf area and neighbor state. OSPF neighbors must agree on core adjacency properties; Ethernet link status and matching IP ranges alone are insufficient. It would not safely roll back the relevant failed change. The immediate problem concerns routing vrfs and tenant isolation.
Question 509
A service provider adds a routed interface to the default VRF rather than its tenant VRF and loses intended segmentation. Before implementing a remedy, what should the engineer check first?
- Review the installed default route, next-hop resolution and reachable egress interface for the affected VRF.
- Review the destination address against all installed prefixes before comparing preference or metric within eligible routes.
- Review interface-to-VRF membership, route tables and explicit route-leaking policies for the tenant.
- Review OSPF interface area, hello/dead timers, network type and neighbor state on both peers.
Explanation
Correct Answer
C:Review interface-to-VRF membership, route tables and explicit route-leaking policies for the tenant. VRFs partition forwarding and routing instances; a VLAN alone is not an isolated routing domain when the gateway is misplaced. The evidence check isolates the relevant prerequisite before a disruptive change. The decision applies to the described routing vrfs and tenant isolation situation.
Incorrect Answers
A:Review the installed default route, next-hop resolution and reachable egress interface for the affected VRF. This instead concerns static default route and next-hop reachability. A default route carries destinations with no more-specific match, but only a resolvable next hop and correct VRF can forward them. It does not isolate the cause of the stated incident. The immediate problem concerns routing vrfs and tenant isolation.
B:Review the destination address against all installed prefixes before comparing preference or metric within eligible routes. This instead concerns longest prefix match over route metric. IP forwarding chooses the longest matching installed prefix before considering administrative preference or metric among equivalent candidates. It does not isolate the cause of the stated incident. The immediate problem concerns routing vrfs and tenant isolation.
D:Review OSPF interface area, hello/dead timers, network type and neighbor state on both peers. This instead concerns ospf area and neighbor state. OSPF neighbors must agree on core adjacency properties; Ethernet link status and matching IP ranges alone are insufficient. It does not isolate the cause of the stated incident. The immediate problem concerns routing vrfs and tenant isolation.
Question 510
A service provider adds a routed interface to the default VRF rather than its tenant VRF and loses intended segmentation. The review requires TWO complementary actions: one diagnostic check and one controlled configuration remedy. Select TWO actions that together meet those requirements.
- Review the installed default route, next-hop resolution and reachable egress interface for the affected VRF.
- Review interface-to-VRF membership, route tables and explicit route-leaking policies for the tenant.
- Eliminate or correct the erroneous more-specific route while preserving intended routing preference among equal-prefix candidates.
- Map routed interfaces to the correct supported VRF and permit only approved inter-VRF access.
Explanation
Correct Answers
B:Review interface-to-VRF membership, route tables and explicit route-leaking policies for the tenant. VRFs partition forwarding and routing instances; a VLAN alone is not an isolated routing domain when the gateway is misplaced. This is the required diagnosis or controlled remedy; the other keyed action supplies the complementary role. The decision applies to the described routing vrfs and tenant isolation situation.
D:Map routed interfaces to the correct supported VRF and permit only approved inter-VRF access. VRFs partition forwarding and routing instances; a VLAN alone is not an isolated routing domain when the gateway is misplaced. This is the required diagnosis or controlled remedy; the other keyed action supplies the complementary role. The decision applies to the described routing vrfs and tenant isolation situation.
Incorrect Answers
A:Review the installed default route, next-hop resolution and reachable egress interface for the affected VRF. This instead concerns static default route and next-hop reachability. A default route carries destinations with no more-specific match, but only a resolvable next hop and correct VRF can forward them. It is not one of the requested paired diagnosis and configuration actions. The immediate problem concerns routing vrfs and tenant isolation.
C:Eliminate or correct the erroneous more-specific route while preserving intended routing preference among equal-prefix candidates. This instead concerns longest prefix match over route metric. IP forwarding chooses the longest matching installed prefix before considering administrative preference or metric among equivalent candidates. It is not one of the requested paired diagnosis and configuration actions. The immediate problem concerns routing vrfs and tenant isolation.
