350-501 Cisco Implementing and Operating Cisco Service Provider Network Core Technologies (350-501 SPCOR) Free Practice Exam Questions (2025 Updated)

MPLS LSP ping is a utility for locating faults within an MPLS network, specifically for Label Switched Paths (LSPs). It helps in verifying the LSPs in the MPLS network. The utility sends echo requests to the destination, and if the path is complete, echo replies are received. References := Cisco

The correct configuration for MPLS LDP synchronization with OSPF process 1 on router R1 is to use the command mpls ldp igp sync holddown 60 under the OSPF process configuration. This ensures that the MPLS LDP synchronization is enabled and held for 60 seconds with OSPF process 1, which helps prevent black holes in MPLS networks during the convergence process by ensuring that routes are not advertised until LDP is fully operational and labels have been exchanged between adjacent routers.

The command “show policy-map control-plane” is used to display the control plane policies applied on a Cisco device, including the statistics related to packets matched by the class-maps of the policy-map. In this context, it helps in troubleshooting by providing detailed insights into how different types of traffic are being processed and controlled as they pass through the control plane.

 The iosxr_command module in Ansible is used to issue commands on remote devices running Cisco IOS XR. This module allows network administrators to execute operational commands on Cisco routers and switches, which is essential for tasks such as retrieving information or applying configuration changes. It is a part of network automation using Ansible, which simplifies the management of network devices by automating repetitive tasks.

R1

key chain AUTH_ISIS

key 2

key-string C1sco!

exit

int range et0/0 , et1/0

isis authen key-chain AUTH_ISIS

ip isis

isis metric 15

Copy run start

R2

key chain AUTH_ISIS

key 2

key-string C1sco!

exit

int range et0/0 , et1/0

isis authen key-chain AUTH_ISIS

ip isis

isis metric 20

Copy run start

R3

key chain AUTH_ISIS

key 2

key-string C1sco!

exit

int range et0/0 , et1/0

isis authen key-chain AUTH_ISIS

ip isis

isis metric 25

Copy run start

To filter routes when redistributing OSPF into BGP, you should configure a route map and reference it with the redistribute command.

The route map allows you to apply filtering criteria to the routes being redistributed.

Example configuration:

router bgp 65000

redistribute ospf 1 route-map OSPF-TO-BGP

!

route-map OSPF-TO-BGP permit 10

match ip address prefix-list OSPF-TO-BGP-FILTER

!

ip prefix-list OSPF-TO-BGP-FILTER seq 10 deny 192.168.0.0/24

ip prefix-list OSPF-TO-BGP-FILTER seq 20 permit any

In the context of regular expressions, the caret (^) is used to indicate the start of a string. This is a fundamental concept in pattern matching using regular expressions, where ^ matches the position at the beginning of the string.

 The configuration in Option D is correct for implementing BGP selective prefix suppression according to the requirements. The “aggregate-address” command is used to configure the advertisement of the summarized route 10.16.0.0/21, and the “suppress-map” option allows for selective suppression of specific prefixes, in this case, 10.16.6.0/24. References: Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) - Cisco SPCOR Training & Certification

 The requirement is for R2 to delay sending BGP updates to R5 for multicast traffic by 30 seconds. This can be achieved by configuring the advertisement interval for IPv4 multicast traffic on R2, which controls the frequency of sending BGP updates for multicast routes. References := Cisco SPCOR

 The command “show mpls traffic-engineering tunnels” is used to quickly check the path of a TE (Traffic Engineering) tunnel in a Cisco MPLS core network. This command provides detailed information about each TE tunnel, including its current operational status, configuration details, and the specific path it is taking through the network. References: Implementing and Operating Cisco Service Provider Network Core Technologies source documents or study guide

Ansible is widely recognized as a robust network automation tool that facilitates provisioning, configuration, and management of network devices. It uses simple, human-readable YAML syntax for its playbooks, making it easy to define tasks and orchestrate workflows for automated network operations1.

https://www.cisco.com/c/en/us/p roducts/collateral/switches/nexus-9000-series-switches/guide-c07-734107.html

YANG (Yet Another Next Generation) is a data modeling language used primarily for the configuration and state data of network elements. It is closely associated with the NETCONF (Network Configuration Protocol) for which it models configuration data. YANG provides schemas that define how data is structured and transported by NETCONF operations. It also shapes the state data of network elements, allowing for a standardized format for representing the operational state of devices. References: YANG is defined in RFCs such as RFC 6020 and RFC 7950, which outline its role in NETCONF operations and its capabilities in modeling both configuration and state data.

The ISIS topology exhibit indicates that all four routers are configured as Level 1-2 routers, which means they can operate in both Level 1 and Level 2 IS-IS areas. This is evident from the net addresses that show a mix of area addresses, allowing for intra-area (Level 1) and inter-area (Level 2) routing. Additionally, R1 and R2 are Level 2 neighbors because they have different area addresses, allowing them to form Level 2 adjacencies and route between different areas.

In the given architecture, if each area is running its own Interior Gateway Protocol (IGP), Border Gateway Protocol (BGP) must be used to provide an end-to-end Multiprotocol Label Switching (MPLS) Label Switched Path (LSP). This ensures that data packets can traverse through the different IGP areas seamlessly, maintaining connectivity across the entire network.

 The control plane protocol used between Cisco SD-WAN routers and vSmart controllers is the Overlay Management Protocol (OMP). OMP is a proprietary protocol of Cisco SD-WAN that facilitates the exchange of routing, policy, and management information across the network. It operates within the secure environment provided by the Datagram Transport Layer Security (DTLS) or Transport Layer Security (TLS) control connection, ensuring that the communication between the routers and controllers is encrypted and authenticated1.

References := Cisco 300-415: Cisco SD-WAN vSmart-WAN Edge Router Control Plane Protocol

The BGPsec framework is designed to secure the AS path information in BGP updates. It uses digital signatures to validate the AS path and prevent unauthorized route manipulation. Here are the key points related to BGPsec:

Securing AS Path:

BGPsec ensures the integrity of the AS path by allowing routers to sign BGP updates using their private keys.

When a router originates a BGP route, it signs the AS path information with its private key.

Other routers can verify the signature using the corresponding public key.

This prevents malicious AS path modifications and ensures the authenticity of the advertised route.

Private Keys and Router Key Pair:

BGPsec relies on cryptographic keys for signing and verifying BGP updates.

Each router has a router key pair consisting of a private key and a corresponding public key.

The private key is kept confidential and is used for signing route updates.

The public key is distributed to other routers for verification.

Expiration Time:

Unlike regular BGP updates, BGPsec does not assign an expiration time (TTL) to route advertisements.

The absence of an expiration time ensures that the signed AS path remains valid until explicitly withdrawn.

In summary, BGPsec enhances BGP security by securing the AS path using digital signatures and private keys. It does not rely on IPsec tunnels for security1.

 When implementing Nonstop Routing (NSR) High Availability on an MPLS Provider Edge (PE) router, it’s important to consider that NSR generally consumes more memory and CPU resources than Nonstop Forwarding (NSF) because it needs to maintain a stateful switchover capability. Additionally, NSR requires routing protocol extensions to ensure that the state information is correctly synchronized between the active and standby routers, allowing for seamless failover without session loss. This ensures continuous packet forwarding even during a switchover event.

R1

R2

 The REST API command shown in the exhibit is a POST request to a specific URL, indicating that it is used to submit data to be processed to a specified resource. In this case, the resource is an XML file named “Descriptions.xml”. POST requests are used when submitting data to be processed by the resource identified by the URI. The nature of the process conducted on the submitted data depends on that particular URI. References: Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) - REST API section.