Free 350-501 Exam Braindumps
Implementing and Operating Cisco Service Provider Network Core Technologies (SPCOR) Questions 249–256 (page: 33)

Updated On: 28-Apr-2026
View Related Case Study

A network operator needs to implement PIM-SSM multicast configuration on a customer's network so that users in different domains are able to access and stream live traffic. Which two actions must the engineer perform on the network to make the streaming work? (Choose two.)

  1. Enable IGMP version 3 at the interface level.
  2. Enable PIM dense mode on the device.
  3. Enable PIM sparse mode on the device.
  4. Enable IGMP version 2 at the interface level.
  5. Configure at least one MSDP peer on the network.

Answer(s): A,C



View Related Case Study

Which protocol is used for communication between the PCE and PCC?

  1. POP
  2. CEF
  3. PCEP
  4. ICMP

Answer(s): C



View Related Case Study

A network engineer is configuring RIP as the routing protocol between multiple PEs and CEs. The engineer must avoid advertising the same routes back to their sources. Which action should be performed on the routers to accomplish this task?

  1. Define the site of origin on each interface.
  2. Configure a different route distinguisher for each prefix.
  3. Define VRFs on each device to separate the traffic.
  4. Enable bidirectional forwarding detection on each device.

Answer(s): A



View Related Case Study

A network engineer is deploying VPLS configuration between multiple PE routers so that customer's remote offices have end-to-end LAN connectivity. Which additional configuration should the engineer perform on the PE routers to enable the virtual switch instance?

  1. l2 vfi ciscotest manual
    vpn id 100
    neighbor 192.168.2.2 encapsulation mpls
    neighbor 192.168.3.3 encapsulation mpls
  2. interface GigEthernet
    switchport mode trunk
    switchport trunk encap dot1q
    switchport trunk allow vlan 2-10
  3. interface Vlan 5
    xconnect vfi ciscotest
  4. interface Vlan 100
    xconnect vfi ciscotest
    ip address 192.168.1.1 255.255.255

Answer(s): A



View Related Case Study

The network-engineering team of a service provider is integrating several recently acquired networks into a more scalable common Unified MPLS architecture. The new network architecture will support end-to-end VPNv4 and VPNv6 services with these requirements:

The IGP of the core layer is IS-IS in Area 0.

The IGP of the aggregation layers is OSPF in Area 0.

The LDP protocol is used to distribute label bindings within each IGP domain.

Which task must the network engineer perform when implementing this new architecture?

  1. Configure a BGP session between the ABR routers of each IGP domain to exchange VPNv4 or VPNv6 prefixes.
  2. Configure mutual redistribution of each IGP domain's loopback prefix to provide end-to-end LDP LSP.
  3. Configure the ABR in each IGP domain to preserve next-hop information on all VPNv4 and VPNv6 prefixes advertised by the PE.
  4. Configure BGP-LU between ABR routers of each IGP domain to carry MPLS label information in NLRI.

Answer(s): D



View Related Case Study

A network engineer must enable multicast on the network to support a new series of webcasts. The PIM protocol has been enabled on the LAN side, with PIM and MSDP capabilities on edge router R1. The multicast source has been configured with IP address FF3A::121, and IP protocol 58 has been enabled and successfully tested in the network. Due to the limitations of some devices on the network, the data flow should take the most efficient path. Which task must the engineer perform to achieve the goal?

  1. Enable PMI BSR on R1.
  2. Implement Anycast RP on R1.
  3. Enable PIM-SSM across the network.
  4. Implement PIM-SM in the LAN.

Answer(s): C

Explanation:

PIM-SSM (Protocol Independent Multicast - Source-Specific Multicast) provides the most efficient path for multicast data flow by eliminating the need for shared trees and Rendezvous Points (RPs). It allows receivers to explicitly request traffic from a specific source, such as the multicast source at IP address FF3A::121, using IGMPv3 or MLDv2. This ensures minimal overhead and the most direct routing for multicast traffic, meeting the requirement for efficient data flow while accommodating device limitations in the network.



View Related Case Study

How do PE routers operate with the MDT in a multicast VPN?

  1. When the source PE router establishes adjacency using PIM SM mode in the default MDT, the receiving PE requests information about the source PE for BGP advertisement.
  2. The default MDT uses PIM sparse mode and PIM establishes adjacency over the shortest path tree toward the destination PE router.
  3. When the sending PE router recognizes that multicast data has exceeded the bandwidth threshold, it creates a data MDT and sends a UDP message to all routers using the default MDT.
  4. After the default MDT and BGP VPNv4 neighbor is configured, a different PE neighbor in the IPv6 MDT address family Is configured automatically for migrating to MDT SAFI.

Answer(s): C

Explanation:

In a multicast VPN (MVPN), Multicast Distribution Trees (MDTs) are used to transport multicast traffic between PE routers. The default MDT is always active and is used for control traffic and low-bandwidth multicast traffic. When multicast traffic exceeds a certain bandwidth threshold, the sending PE router creates a data MDT for that specific multicast stream. It then sends a UDP message to notify other PE routers of the new data MDT using the default MDT. This optimizes multicast traffic flow by using dedicated data MDTs for high- bandwidth traffic, reducing unnecessary load on the default MDT.



View Related Case Study

A network engineer must implement an ACL-based solution to mitigate availability issues on a web service that

is hosted on a server at IP address 172.16.15.18/23. Access to the web server should be allowed over HTTP from RFC 1918 addresses only. The network architect has already enabled PMTUD in the network. Which ACL configuration must the engineer implement to complete the task?

  1. access-list 199 deny ip any host 172.16.15.18 tcp-fragments access-list 199 permit tcp 10.0.0.0 255.255.255.255 172.16.15.18 0.254.0.255 eq 80 access-list 199 permit tcp 172.16.0.0 0.0.255.255 172.16.15.18 0.0.254.255 eq 80 access-list 199 permit tcp 192.168.0.0 0.0.0.255 172.16.15.18 0.0.254.255 eq 80 access-list 199 deny ip any any
  2. access-list 199 deny tcp any host 172.16.15.18 http-fragments access-list 199 permit 16 10.10.0.0 0.255.255.255 172.16.15.18 0.0.2.253 eq 80 access-list 199 permit 16 172.16.0.0 0.0.255.255 172.16.15.18 0.0.2.253 eq 80 access-list 199 permit 16 192.168.0.0 0.0.0.255 172.16.15.18 0.0.2.253 eq 80 access-list 199 deny tcp any any
  3. access-list 198 deny ip any host 172.16.15.18 ip-fragments access-list 198 permit 18 10.10.0.0 255.255.255.0 172.16.15.18 255.255.254.0 access-list 198 permit 18 172.16.0.0 255.255.0.0 172.16.15.18 255.255.254.0 access-list 198 permit 18 192.168.0.0 255.255.255.0 172.16.15.18 255.255.254.0 access-list 198 deny tcp any any
  4. access-list 198 deny ip any host 172.16.15.18 fragments
    access-list 198 permit 6 10.0.0.0 0.255.255.255 172.16.15.18 0.0.1.255 eq 80 access-list 198 permit 6 172.16.0.0 0.0.255.255 172.16.15.18 0.0.1.255 eq 80 access-list 198 permit 6 192.168.0.0 0.0.0.255 172.16.15.18 0.0.1.255 eq 80 access-list 198 deny ip any any

Answer(s): D

Explanation:

The correct ACL ensures that:
1. Fragmented packets destined for the web server are denied (deny ip any host 172.16.15.18 fragments) to avoid potential attack vectors that exploit fragmented traffic.
2. Only HTTP traffic (TCP port 80) from RFC 1918 private IP ranges (10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16) is permitted to the web server at 172.16.15.18/23. This is achieved using permit 6 (protocol 6 for TCP) with the correct source and destination masks.
3. All other traffic is denied by the final deny ip any any statement.
This configuration aligns with the requirement to allow access to the web service over HTTP only from RFC 1918 addresses while denying any other traffic, including fragmented packets.



Viewing page 33 of 66
Viewing questions 257 - 264 out of 515 questions


Post your Comments and Discuss Cisco 350-501 exam prep with other Community members:

AI Tutor AI Tutor 👋 I’m here to help!