Free 350-501 Exam Braindumps
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) Questions 137–144 (page: 19)

Updated On: 28-Apr-2026
View Related Case Study



Refer to the exhibit. Router R13 is operating in Level 1 /Level 2 mode. A network engineer with an employee ID 5232:18:872 must change the IS-IS cost of the route IP address 10.212.124.1 to 90. The metric update must be carried over in TVL 128. Which configuration must be implemented to complete the task?

  1. isis metric 90 under interface Gi1/1/1 on R12
  2. metric-style isis wide 90 under interface loopback1 on R13
  3. metric cost 90 under interface Gi1/1/1 on R12
  4. isis metric 80 under interface loopback1 on R13

Answer(s): A

Explanation:

To change the IS-IS path cost seen by the neighbor for reaching 10.212.124.1, you adjust the outgoing interface cost on the advertising/forwarding side toward that neighbor. Setting the IS-IS interface metric to 90 on R12's link toward R13 updates the computed route metric, and with wide metrics in use the value is carried in TLV 128.



View Related Case Study



Refer to the exhibit. OSPF is running in the given network. R1 was previously running EIGRP on a standalone network, and a network engineer just migrated it to OSPF. The R1 peering with R2 has come up. Which additional action must the engineer take so that R2 receives routes from Area 1 and Area 0 but it is prevented from receiving routes from Area 2?

  1. Implement a route map that matches R1's next-hop address, and then attach the route map to an outbound distribute list on R2.
  2. Implement a route map that matches R2's interface to R3 and R4, and then attach the route map to an inbound distribute list on R2.
  3. Implement a route map that matches the routes in an ACL from Area 2, and then attach the route map to an inbound distribute list on R2.
  4. Implement a route map that matches the routes from Area 2 in a prefix list, and then attach the route map to an outbound distribute list on R2.

Answer(s): C

Explanation:

To stop R2 from installing routes learned from Area 2 while still allowing routes from Area 0 and Area 1, the correct method is to filter OSPF routes on R2 as they are learned. This is done with an inbound distribute-list that references a route map which matches the specific prefixes originating from Area 2 using an access control list.



View Related Case Study



Refer to the exhibit. CE1 and CE2 reside in AS 65516 and access the internet through PE1, which resides in AS 65517. The PE-CE routing protocol is BGP, and CE1 and CE2 have an established iBGP peering. A network engineer must implement a route map on CE1 so that it becomes the preferred entry point for traffic from PE1. Which action must the engineer take to meet the requirement?

  1. Apply a route map on CE1 in the inbound direction from PE1 that sets the local preference to a value less than 100.
  2. Apply a route map on CE1 in the outbound direction to PE1 that sets the MED to a lower value than the MED on the link from PE1 to CE2.
  3. Apply a route map on CE1 in the inbound direction from PE1 that sets the weight to a value greater than 32768.
  4. Apply a route map on CE1 in the outbound direction to PE1 that prepends AS 65516 twice to the AS path.

Answer(s): B

Explanation:

To make CE1 the preferred entry point for traffic coming from the directly connected provider router, CE1 must influence the provider's best-path choice between the two customer links. The attribute intended for this purpose is MED, which is compared by the neighboring AS to pick the better entry when multiple links exist to the same customer AS. Setting a lower MED on advertisements from CE1 toward PE1 makes PE1 prefer CE1 over CE2 for inbound traffic.



View Related Case Study



Refer to the exhibit. Company A is running OSPF within its network, comprised of routers R2, R3, R4, and R5 and consisting of two areas. Company A just acquired Company B, which uses EIGRP on its own R1. R1 has several routes in its routing table. The network engineering team at Company A needs access to the Company B network to manage network devices there, but each company will otherwise operate independently. R2 will serve as the ASBR between the two networks. Which action must the team take to reduce the number of EIGRP routes received on R2 and include only the necessary routes in the routing table?

  1. Implement an offset list on R1 for the necessary networks.
  2. Apply an inbound distribute list on R2 with a route map that permits only the necessary networks.
  3. Attach an access list to the R2 interface connected to R1 that denies all traffic except for the necessary engineering team traffic.
  4. Apply an outbound distribute list on R3 and R4 to filter unnecessary intra-area routes from reaching the rest of the OSPF domain.

Answer(s): B

Explanation:

To reduce the number of EIGRP routes that R2 installs while still learning only the prefixes needed to manage Company B, the team should filter routes as they are learned from R1. An inbound distribute list on R2 using a route map can explicitly permit only the required EIGRP prefixes, preventing all other EIGRP routes from entering R2's routing table.



View Related Case Study

What is the purpose of DS-Lite technology?

  1. It allows network administrators to transition a network to IPv6 while maintaining IPv4 support.
  2. It enables networks to pass encapsulated IPv4-in-IPv6 traffic over the ISP backbone.
  3. It allows network administrators to implement shared IPv4 addresses between the ISP and its customers.
  4. It allows an ISP to service IPv6 networks over an IPv4-enabled ISP backbone.

Answer(s): B

Explanation:

Dual-Stack Lite enables IPv4 packets from customer networks to be encapsulated inside IPv6 and transported across an IPv6-only ISP backbone. The IPv4 traffic is tunneled to a carrier-grade NAT device in the provider network, allowing continued IPv4 connectivity without requiring native IPv4 support throughout the ISP core.



View Related Case Study



Refer to the exhibit. The enterprise is running BGP between sites to provide connectivity to users across the company's geographic regions. A network engineer must update the configuration so that the operations team can confirm that BGP prefixes that are received on each router originated from the correct autonomous system.
Which configuration must the engineer apply?

  1. bgp bestpath prefix-validate disable
  2. bgp bestpath prefix-validate allow-invalid
  3. bgp synchronization
  4. bgp rpki server tcp 192.168.1.2 port 1029 refresh 500

Answer(s): D

Explanation:

To confirm that received BGP prefixes originated from the correct autonomous system, the network must validate route origin using RPKI (Route Origin Validation). Configuring an RPKI cache server allows the routers to verify the prefix-to-origin-AS authorization information and mark routes as valid/invalid based on that validation.



View Related Case Study



Refer to the exhibit. The company is running IS-IS in its core. A network engineer must segment the network into two areas to isolate departments. However, some networks must be shared from area 2 to area 1, so the engineer has decided to implement route filtering between devices. Which action must the engineer take so that the correct networks are shared between IS-IS areas?

  1. Implement a route map and attach it to a distribute list on RD to filter inbound routes from RE.
  2. Implement route-tagging on RB and RD to identify and allow only the routes that should be shared from area 2.
  3. Apply an ACL on RE to deny unnecessary routes from exiting the interface toward RD.
  4. Set a unique area ID on each router to fully segment the network.

Answer(s): B

Explanation:

IS-IS inter-area control is typically handled on the L1/L2 boundary by selectively leaking routes between areas.
Route tagging allows the engineer to mark the specific prefixes that are permitted to be shared from area 2 and then filter based on those tags when advertising into area 1, ensuring only the intended networks are leaked between IS-IS areas.



View Related Case Study



Refer to the exhibit. Routers R1 and R2 are connected over the internet, with the connection passing over four different autonomous systems. The company must mitigate potential DDoS attacks and protect the CPUs of the routers. A network engineer must secure all external connections on edge router R1 based on RFC 5082. R2 has already been secured. Which task should the engineer perform on R1 to achieve the goal?

  1. Configure neighbor 182.12.91.5 ttl-security hops 4 under the BGP configuration.
  2. Configure ip neighbor 182.12.91.5 bgp multihop-ttl 4 under the global configuration.
  3. Configure ip neighbor 182.12.91.5 ttl 4 under the global configuration.
  4. Configure neighbor 182.12.91.5 bgp-ttl 4 under the BGP configuration.

Answer(s): A

Explanation:

RFC 5082 defines BGP TTL Security (GTSM), which protects router CPUs by accepting BGP packets only if their TTL indicates they originated within an expected hop count. Because the peers are separated by four autonomous systems, configuring TTL security with a hop count of 4 on R1 enforces that validation on the external BGP session.



Viewing page 19 of 66
Viewing questions 145 - 152 out of 515 questions


Post your Comments and Discuss Cisco 350-501 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!