What topics are covered in the 350-501 SPCOR exam?

The 350-501 exam covers implementing and operating Cisco Service Provider core technologies including routing, MPLS, segment routing, network services, and infrastructure security. It also includes configuration and troubleshooting of BGP, OSPF, IS-IS, and service provider specific features like VPN technologies and QoS.

How long is the 350-501 exam and how many questions are on it?

The 350-501 exam is 120 minutes long and contains approximately 60-70 multiple-choice and drag-and-drop questions. You need a score of approximately 825 out of 1000 to pass the exam.

What is the difference between 350-501 and other Cisco routing exams?

The 350-501 SPCOR exam is specifically designed for service provider environments and focuses on large-scale network operations, carrier-grade technologies, and service provider specific implementations. Other Cisco exams like the CCNA Routing and Switching focus more on enterprise networks rather than service provider infrastructure.

What hands-on skills should I practice for the 350-501 exam?

You should practice configuring and troubleshooting BGP, OSPF, IS-IS, MPLS, segment routing, VRFs, and VPN technologies in a lab environment. Hands-on experience with Cisco IOS XE and IOS XR platforms is particularly important for service provider scenarios.

Is the 350-501 exam required for any Cisco certifications?

Yes, the 350-501 SPCOR exam is a core requirement for the Cisco Certified Specialist - Service Provider Core Technologies certification. It is also one of two concentration exams you can choose for the Cisco Certified Internetwork Expert (CCIE) Service Provider certification track.

Free Cisco 350-501 Exam Questions

Q1 MultipleChoice

A network operator working for a telecommunication company with an employee Id: 4065 96080 it trying to implement BFD configuration on an existing network of Cisco devices Which task must the engineer perform to enable BFD on the interfaces?

ADisable Cisco Express Forwarding on the interfaces

BDisable SSO on the interfaces

CRemove any static routes that point to the interfaces

DRemove the log option from any ACLs on the interfaces.

Correct Answer: D

Q2 MultipleChoice

Refer to the exhibit.

Refer to the exhibit. The enterprise is running BGP between sites to provide connectivity to users across the company's geographic regions. A network engineer must update the configuration so that the operations team can confirm that BGP prefixes that are received on each router originated from the correct autonomous system.

Which configuration must the engineer apply?

Abgp bestpath prefix-validate disable

Bbgp rpki server tcp 192.168.1.2 port 1029 refresh 500

Cbgp bestpath prefix-validate allow-invalid

Dbgp synchronization

Correct Answer: C

Q3 MultipleChoice

An engineer is implementing MPLS to monitor within the MPLS domain. Which must the engineer perform to prevent packets from being forwarded beyond the service provider domain when the LSP is down?

AOption A

BOption B

COption C

DOption D

Correct Answer: D

Explanation:

To prevent packets from being forwarded beyond the service provider domain when the Label Switched Path (LSP) is down, the engineer must configure a private IP address as the destination address of the headend router of Cisco MPLS Traffic Engineering (TE). This ensures that if the LSP fails, the packets will not be routable over the public internet, thus containing them within the service provider's network.

Q4 MultipleChoice

What is the characteristic of the Tl-LFA?

AIt guarantees a loop-free path for all interfaces in the OSPf- super backbone .

BIt applies on each area and instance and makes all the interfaces inherit the configuration

CIt guarantees a loop-free path for all areas configured m OSPF

DIt applies only on the instance and makes at the interfaces inherit the configuration

Correct Answer: C

Explanation:

TI-LFA, or Topology Independent Loop-Free Alternate, is a fast-reroute mechanism that provides protection against link or node failures in a network. It guarantees a loop-free alternate path for all areas configured in OSPF, ensuring traffic can be quickly rerouted in case of a failure. This characteristic is crucial for maintaining network stability and avoiding traffic loops, which can lead to packet loss and network congestion.

Q5 MultipleChoice

Refer to the exihibit.

Refer to the exhbit. ISP A has a BGP peering with ISP C with the maximum-prefix 150 configuration on R1. After a recent security breach on the ISP A network, a network engineer has been asked to enable a lightweight security mechanism to protect the R1 CPU and BGP membership from spoofing attacks. Which solution must ISP A implement?

AConfigure bgp maxas-limit 1 in the IPv4 address family urateUhe global BGP configuration.

BConfigure neighbor 10.163.83.54 enable-connected-check under the BGP IPv4 address family.

CConfigure neighbor 10.163.83.55 password Cisco under the global BGP IPv4 address family.

DConfigure neighbor 10.163.83.55 ttl-stcurity hops 2 under the global BGP configuration.

Correct Answer: D

Explanation:

The Time to Live (TTL) security mechanism is a lightweight security feature that can protect against CPU and memory resource exhaustion due to a denial-of-service (DoS) attack. It works by setting a limit on the number of hops (TTL value) that BGP packets can traverse. By configuringneighbor 10.163.83.55 ttl-security hops 2, ISP A ensures that BGP packets received from ISP C must have a TTL value of at least 254 when they reach R1, as BGP packets decrement the TTL by 1 with each hop. This effectively prevents spoofing attacks from outside the directly connected network because any packets spoofed from further away would have a TTL that drops below the threshold before reaching R1.

350-501 Exam Questions & Answers

Sample 350-501 Questions

Frequently Asked Questions

Pass 350-501 First Time