350-501 Cisco Implementing and Operating Cisco Service Provider Network Core Technologies (350-501 SPCOR) Free Practice Exam Questions (2025 Updated)

The configuration snippet shows a BGP router with AS number 65001. It has a neighbor at IP address 10.10.10.1 with remote AS number 4282, and there is an outbound distribute-list applied to this neighbor relationship (distribute-list 1 out).

The distribute list refers to access list 1, which permits any route with an AS path that starts with the local ASN (permit ^$). This means that only local routes will be advertised to the neighbor at IP address 10.10.10.1; routes from other Autonomous Systems (ASNs) will not be advertised because they would have an AS path starting with another ASN.

: In this scenario, E-LINE pseudowires are suitable because they create a point-to-point Ethernet connection between the two sites. E-LINE pseudowires are commonly used for point-to-point Ethernet services.

To ensure that a router advertises only networks with a prefix mask length less than or equal to 21 to its BGP neighbor, the correct configuration is Option A. This involves applying a prefix list that permits updates for networks with the specified prefix length. The prefix list acts as a filter for outgoing route advertisements in BGP, ensuring that only routes that match the criteria are advertised to the neighbor.

The core component of MDT that describes the data streamed to a collector is the encoder. In the context of Microsoft Deployment Toolkit (MDT), the encoder is not explicitly mentioned; however, the concept aligns with the process of creating and capturing images of operating systems, which involves encoding or compiling the necessary data into a deployable image.

 The TTL security mechanism is used to protect a router from receiving BGP sessions that are not originated from the expected peer. It drops incoming TCP segments whose TTL value is not equal to or greater than the expected minimum value, thus helping in preventing DoS attacks that could be initiated from an unauthorized source pretending to be a legitimate BGP peer. References := Implementing and Operating Cisco Service Provider Network Core Technologies

The difference between SNMP (Simple Network Management Protocol) and model-driven telemetry lies in their data delivery mechanisms. Telemetry allows for modeled network data to be pushed to network administrators on an as-needed basis, providing real-time insights into network performance and health. On the other hand, SNMP typically relies on polling mechanisms where network administrators request data at specific intervals. References: Implementing and Operating Cisco Service Provider Network Core Technologies source documents or study guide

The configuration in Option C correctly sets up the interfaces for VLAN tag translation. On interface GigabitEthernet2, the command rewrite ingress tag translate 1-to-1 dot1q 21 changes the incoming VLAN tag from 12 to 21. Conversely, on interface GigabitEthernet3, the command rewrite egress tag translate 1-to-1 dot1q 12 changes the outgoing VLAN tag from 21 to 12. This setup ensures that traffic flowing from R1 to R2 and vice versa has the correct VLAN tags as required.

 BSR (Bootstrap Router) is used in PIM-SM networks to automate the distribution of group-to-RP mappings. In this scenario where devices need to dynamically learn about Rendezvous Points (RPs), BSR would be appropriate as it allows routers to automatically discover RP candidates and convey that information throughout the PIM domain. References := Cisco

The RPL script in the image is used to filter BGP routes based on the AS path. The script includes a condition that checks if the AS path contains ‘7077’ using a regular expression (ios-regex ‘777$’). If this condition is met, the route is passed; otherwise, it would be denied by default. Therefore, this script allows routes from AS 7077 and denies others.

References := For specific references, please consult the Implementing and Operating Cisco Service Provider Network Core Technologies source book or study guide, as I am unable to provide direct links or access content from external websites.

 In IS-IS, Level 2 peers must have matching authentication settings to ensure security and integrity of the routing domain. The hello timer setting must also match to ensure that the peers can maintain a consistent adjacency state. Mismatched hello timers could lead to adjacency flaps or failure to form an adjacency.

The correct command to authenticate the OSPF neighbor between PE-A and PE-B using MD5 is found in Option A. In this option, the command ip ospf message-digest-key 1 md5 44578611 is used to configure OSPF MD5 authentication on an interface with the key ID as 1 and key string as 44578611. The second command ip ospf authentication key-chain 44578611 is used to enable OSPF authentication on an interface and associate it with a specific key chain. References := Cisco - Implementing and Operating Cisco Service Provider Network Core Technologies

 MPLS LDP (Label Distribution Protocol) is used for label distribution in MPLS networks. When making changes to the LDP configuration, it’s essential to ensure that the changes do not disrupt existing LDP sessions. In this scenario, the network administrator implemented MPLS LDP changes on the PE-A LSR (Label Switching Router) device, and the goal is to prevent any disruption to LDP peers.

The MPLS LDP Non-Stop Routing (NSR) feature allows LDP sessions to survive control-plane switchover events without interruption. When NSR is enabled, the LDP session state information is synchronized between the active and standby control planes. If the active control plane fails, the standby control plane takes over seamlessly, and LDP sessions continue without interruption.

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/msp/configuration/xe-3s/mp-ha-xe-3s-book/mp-nsr-ldp-supp.pdf

When implementing LDP NSF (Nonstop Forwarding) on the network, an engineer must perform the following tasks:

Implement direct connections for LDP peers: This ensures that LDP sessions can be reestablished quickly after a switchover.

Enable NSF for the link-state routing protocol in use on the network: This allows the routing protocol to maintain its state during a switchover, ensuring seamless operation.

For example, if OSPF is the link-state routing protocol, enabling NSF for OSPF ensures that OSPF adjacencies are maintained during a switchover

In the context of configuring L2VPN over MPLS, the xconnect statement is essential. It specifies the peer router and virtual circuit ID, creating the connection between two customer edge routers over the service provider’s MPLS network. Without the xconnect statement, there’s no association between the attachment circuits and pseudowire, leading to the failure of the L2VPN service.

 Transport Layer Security (TLS) is essential for securing RESTCONF communications on network devices. TLS provides a secure channel with encryption, ensuring that the data exchanged between the client and server remains private and integral. For RESTCONF to utilize TLS, it requires proper certificates for authentication. These certificates confirm the identity of the devices involved in the communication, preventing man-in-the-middle attacks and unauthorized access2.

References := Programmability Configuration Guide, Cisco IOS XE Amsterdam 17.1.x - RESTCONF Protocol2.

SNMPv3 is the most secure version of SNMP, providing both security and remote configuration capabilities. The current configuration in the exhibit shows SNMP version 2c, which is less secure. SNMPv3 introduces security features such as authentication, privacy (encryption), and access control to address the vulnerabilities associated with earlier versions of SNMP. By re-configuring to use SNMPv3, the network administrator can enhance the security for SNMP for this configuration. References: Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) - Cisco SPCOR Training & Certification

 The issue described involves packets being dropped when sent from the application server to the access site. Since OSPF and BGP peerings are confirmed to be operational, the problem likely lies within the route advertisement. Allowing 172.16.20.1 in the BGP advertisement on R3 by adjusting the route-map will likely resolve the issue, ensuring that traffic destined for 172.16.20.1 is not being inadvertently filtered or blocked.