CiscoProfessional level350-401Page 6 of 7

350-401 exam dumps: questions 501 to 600 of 629

Page 6 of the free 350-401 question bank for the Implementing Cisco Enterprise Network Core Technologies exam. Questions 501 to 600 are listed below, the first 5 in full with answers and explanations. Back to page 1 for the exam overview and FAQ.

Question bank last updated February 2025

Start timed practice exam Questions 501 to 600

Free 350-401 practice questions

Questions 502 to 506 of 629

Pick an answer before you open the explanation. Each question also has its own page with a permalink.

350-401 Question 502

Select 3

A service provider is implementing an MPLS Layer 3 VPN for a customer with multiple sites. The customer requires routing information to remain isolated between their VPN and other customers' VPNs. Which two mechanisms are used in MPLS Layer 3 VPNs to ensure this isolation and proper routing?

A
Multiprotocol BGP (MP-BGP) to exchange VPN routing information
B
Route Distinguisher (RD) to uniquely identify overlapping routes in different VPNs
C
Label Distribution Protocol (LDP) to direct VPN traffic to the correct site
D
Route Target (RT) to control route import/export between VRFs
E
Interior Gateway Protocol (IGP) to propagate VPN routes within the MPLS network

Show answer and explanation

Correct answers: A, B, D

Explanation

MPLS Layer 3 VPNs rely on MP-BGP for advertising VPN-specific routes, RDs for ensuring unique identification of overlapping routes, and RTs for controlling import/export of routes between VRFs. These mechanisms collectively ensure routing isolation and correct traffic forwarding for multiple customer VPNs. LDP and IGPs are used in different contexts within the MPLS network but are not directly responsible for VPN route isolation.

A. Correct.
Correct. MP-BGP is the protocol used to distribute VPNv4 or VPNv6 routing information between PE routers while keeping VPNs isolated.
B. Correct.
Correct. RDs allow overlapping IP addresses in different VPNs to be uniquely identified, ensuring routing table isolation.
C. Incorrect.
Incorrect. LDP is used for label distribution but does not directly handle VPN traffic isolation or routing information exchange.
D. Correct.
Correct. RTs are used to control which routes are imported/exported between VRFs, enabling route segregation and policy enforcement.
E. Incorrect.
Incorrect. IGPs like OSPF or EIGRP are not used for propagating VPN-specific routes; MP-BGP handles this function in MPLS Layer 3 VPNs.

350-401 Question 503

Single answer

A service provider is deploying an MPLS Layer 3 VPN to provide secure connectivity between multiple customer sites. The provider uses MP-BGP to distribute VPN routing information. Which of the following is a key characteristic of MPLS Layer 3 VPNs that enables the segregation of customer traffic?

A
The use of VRFs (Virtual Routing and Forwarding) on the provider edge routers
B
The use of VLAN tags to differentiate customer traffic
C
The use of RSVP-TE tunnels to ensure traffic separation
D
The use of GRE tunnels for customer traffic encapsulation

Show answer and explanation

Correct answer: A

Explanation

MPLS Layer 3 VPNs achieve customer traffic segregation through the use of VRFs on PE routers. Each customer is assigned a unique VRF, which isolates their routing information from other customers. MP-BGP is used to exchange VPN route information between PE routers, and MPLS labels are used to forward packets through the provider's MPLS backbone. This ensures secure and efficient connectivity for each customer.

A. Correct.
Correct: VRFs are used on provider edge (PE) routers to maintain separate routing tables for each customer's traffic, ensuring traffic segregation and privacy.
B. Incorrect.
Incorrect: VLAN tags are commonly used in Layer 2 networks, not MPLS Layer 3 VPNs. MPLS Layer 3 VPNs rely on VRFs and MPLS labels for traffic segregation.
C. Incorrect.
Incorrect: RSVP-TE is a mechanism for traffic engineering and does not inherently provide the traffic segregation functionality required in MPLS Layer 3 VPNs.
D. Incorrect.
Incorrect: GRE tunnels are used for general tunneling purposes, but MPLS Layer 3 VPNs use MPLS labels and VRFs for traffic segregation.

350-401 Question 504

Select 3

An enterprise customer has multiple branch offices connected via a service provider MPLS Layer 3 VPN. The customer requires that traffic between branches is isolated from other customers using the same service provider network, while still allowing each branch to communicate directly with other branches. Which two characteristics of MPLS Layer 3 VPNs support this requirement?

A
Each customer's routing information is stored in a separate Virtual Routing and Forwarding (VRF) table.
B
The service provider uses MPLS labels to segregate traffic between different customers.
C
The customer must use the same IP addressing scheme as the service provider.
D
BGP is used to exchange VPN routing information between the provider edge (PE) routers.
E
Traffic between customer branches is encrypted using IPSec tunnels by default.

Show answer and explanation

Correct answers: A, B, D

Explanation

MPLS Layer 3 VPNs enable the service provider to isolate customer traffic by using VRF tables and MPLS labels, ensuring that traffic from one customer does not interfere with another. BGP is utilized to exchange routing information between PE routers, facilitating branch-to-branch communication. These mechanisms fulfill the requirements of traffic isolation and inter-branch communication without requiring the use of IPSec or IP scheme integration with the service provider.

A. Correct.
Correct: VRF tables ensure routing information is isolated for each customer, providing traffic segregation.
B. Correct.
Correct: MPLS labels are used by the service provider to segregate and forward traffic uniquely for each customer.
C. Incorrect.
Incorrect: MPLS Layer 3 VPNs do not require customers to use the same IP addressing scheme as the service provider. Customers can maintain their own addressing.
D. Correct.
Correct: BGP is used to exchange VPN routing information between PE routers, ensuring that branch offices can communicate.
E. Incorrect.
Incorrect: MPLS Layer 3 VPNs do not rely on IPSec for traffic encryption by default. Traffic isolation is achieved using MPLS labels and VRFs.

350-401 Question 505

Select 3

A service provider is implementing MPLS Layer 3 VPN to provide connectivity between two customer sites. The provider wants to ensure traffic separation between customers and allow for overlapping IP address spaces. Which mechanisms in MPLS Layer 3 VPN ensure these requirements are met?

A
Route Distinguishers (RDs)
B
Route Targets (RTs)
C
Label Distribution Protocol (LDP)
D
Multiprotocol BGP (MP-BGP)
E
Provider Edge (PE) routers enabling OSPF between customer sites

Show answer and explanation

Correct answers: A, B, D

Explanation

MPLS Layer 3 VPN achieves traffic separation and support for overlapping IP address spaces by leveraging Route Distinguishers (RDs) to make prefixes unique, Route Targets (RTs) to control route distribution between VRFs, and Multiprotocol BGP (MP-BGP) to exchange VPNv4 routes between PE routers. While LDP is essential for label switching in the MPLS core, it does not directly address these specific requirements. Similarly, enabling OSPF between customer sites is not necessary in MPLS Layer 3 VPN, as the PE routers use VRFs and MPLS protocols for traffic isolation.

A. Correct.
Route Distinguishers (RDs) are used to make identical IP address prefixes unique in the MPLS VPN environment, ensuring traffic separation for overlapping IP spaces.
B. Correct.
Route Targets (RTs) are used to control the import and export of routes between VRFs, which is critical for maintaining traffic separation in MPLS Layer 3 VPNs.
C. Incorrect.
Label Distribution Protocol (LDP) is used for label switching in the MPLS core, but it does not directly address traffic separation or overlapping IP spaces.
D. Correct.
Multiprotocol BGP (MP-BGP) is used to exchange VPNv4 routes between PE routers, ensuring proper route propagation for each VPN and enabling traffic separation.
E. Incorrect.
Provider Edge (PE) routers do not require enabling OSPF between customer sites; instead, they use VRFs and MPLS protocols to maintain separation.

350-401 Question 506

Single answer

A service provider is tasked with deploying an MPLS Layer 3 VPN to interconnect multiple customer sites. The service provider needs to ensure that customer traffic is isolated while allowing for overlapping IP address spaces between different customers. Which component of the MPLS Layer 3 VPN architecture is responsible for maintaining this isolation?

A
Route Distinguisher (RD)
B
Route Target (RT)
C
VRF (Virtual Routing and Forwarding)
D
Label Distribution Protocol (LDP)

Show answer and explanation

Correct answer: C

Explanation

In MPLS Layer 3 VPNs, VRFs are a fundamental component that provide customer traffic isolation by maintaining separate routing tables for each customer. This logical separation allows multiple customers to use overlapping IP address spaces without interference. While other components like Route Distinguisher (RD) and Route Target (RT) play important roles in route identification and route policy control, VRFs are specifically responsible for traffic isolation.

A. Incorrect.
Route Distinguisher (RD) is used to make routes globally unique by appending a unique identifier to the customer's IP prefix, but it does not directly handle traffic isolation.
B. Incorrect.
Route Target (RT) is used to control the import and export of routes between VRFs but does not provide traffic isolation by itself.
C. Correct.
VRF (Virtual Routing and Forwarding) is the correct answer. VRFs allow for the segregation of routing tables on a per-customer basis, ensuring traffic isolation and enabling support for overlapping IP address spaces.
D. Incorrect.
Label Distribution Protocol (LDP) is used for label distribution in the MPLS domain but does not handle the logical isolation of customer traffic.

Timed practice exam

Take a 350-401 practice test under exam conditions

75 questions in 120 minutes, drawn from this bank, with a score report and a per-question review when you finish.

Start timed exam

350-401 practice questions 501 to 600 of 629

Every question has a page with the answer and explanation. Numbers are stable, so you can bookmark or share them. The bank is split into 7 pages of up to 100 questions.

More Cisco exam dumps

All Cisco exams

300-435321 questions

Cisco ENAUTO exam dumps

Automating Cisco Enterprise Solutions

200-301503 questions

Cisco CCNA exam dumps

Cisco Certified Network Associate

100-160264 questions

Cisco CCST Cybersecurity exam dumps

Cisco Certified Support Technician (CCST) Cybersecurity

100-140389 questions

Cisco CCST IT Support exam dumps

Cisco Certified Support Technician (CCST) IT Support

100-150294 questions

Cisco CCST Networking exam dumps

Cisco Certified Support Technician (CCST) Networking

200-201403 questions

Cisco CyberOps Associate (CBROPS) exam dumps

Cisco Cybersecurity Associate

200-901203 questions

Cisco DevNet Associate (DEVASC) exam dumps

Cisco DevNet Associate

300-215228 questions

Cisco CBRFIR (Forensic Analysis and Incident Response) exam dumps

Conducting Forensic Analysis and Incident Response Using Cisco Technologies for Cybersecurity