Verified & Correct 350-501 Practice Test Reliable Source Dec 15, 2025 Updated
Free Cisco 350-501 Exam Files Downloaded Instantly
NEW QUESTION # 228
Refer to the exhibit.
What type of configuration is it?
- A. It is configuration that requires OSPF to also be running to have optimized Cisco MPLS TE tunnels.
- B. It is configuration that requires an explicit Cisco MPLS TE path to be configured for the tunnel to run.
- C. It is configuration that requires a dynamic Cisco MPLS TE path to be configured for the tunnel to run.
- D. It is configuration for the head-end router of a Cisco MPLS TE tunnel with segment routing.
Answer: D
NEW QUESTION # 229
A network operator with an employee ID 4531 26:504 must implement a PIM-SSM multicast configuration on the customer's network so that users in different domains are able to access and stream live traffic. The IGMP version must be enabled to support the SSM implementation. Which action must the engineer perform on R1 to complete the SSM implementation?
- A. Option D
- B. Option A
- C. Option C
- D. Option B
Answer: B
NEW QUESTION # 230
Drag and drop the functionalities from the left onto the correct target fields on the right.
Answer:
Explanation:
NEW QUESTION # 231
What is the primary capability of Inter-AS VPN?
- A. providing load balancing across multiple AS networks in the same VPN service
- B. providing end-to-end encryption for traffic passing through multiple AS networks
- C. providing end-to-end VPN services across multiple service-provider networks
- D. providing multicast support between different service-provider networks
Answer: C
Explanation:
Inter-AS VPN is primarily designed to extend VPN services across multiple Autonomous Systems (AS) or service provider networks. This capability is critical when customers require connectivity between geographically dispersed sites served by different service providers or ASes.
Key Features:
End-to-End Connectivity:
- Enables seamless VPN service for customers whose networks span multiple service providers.
- Supports Layer 3 VPNs using MPLS, ensuring consistent communication between sites.
Use Cases:
- Enterprises with global operations that rely on multiple ISPs to connect their branches.
- Service providers collaborating to deliver VPN services for mutual customers.
NEW QUESTION # 232
Refer to the exhibit:
What is the effect of this configuration?
- A. The two routers fail to form a neighbor relationship because their system IDs are different.
- B. The two routers fail to form a neighbor relationship because the authentication configuration is missing
- C. The two routers successfully form a neighbor relationship
- D. The two routers fail to form a neighbor relationship because they have different ISIS area types.
Answer: C
Explanation:
In ISIS, routers can form neighbor relationships even with different system IDs, provided they are configured to be in the same area and the authentication between them is correctly set up.
NEW QUESTION # 233
Refer to the exhibit. After a networking team configured this MPLS topology, the supervisor wants to view MPLS labels to verify the path that packets take from router R1 to router R7 The team already Issued an ICMP ping to verify connectivity between the devices. Which task must the team perform to allow the supervisor to view the label switch path?
- A. Implement MPLS LDP to assign labels to all the routes in the transit path.
- B. Configure MPLS LDP Sync to sync labels from the routing table to the MPLS forwarding table.
- C. Configure MPLS TE to display the labels in the stack between the head and tail-end routers
- D. Implement MPLS OAM to display the labels for each hop along the path
Answer: D
NEW QUESTION # 234
Refer to the exhibit. A junior engineer must update a group of scripts to use on a newly deployed subnet. However, one of the scripts is not documented or commented. What are the two effects of this script? (Choose two.)
- A. The script configures a loopback interface.
- B. The script calls a Telnet process to connect to a network device.
- C. The script configures a physical interface.
- D. The script stores output in the cli.txt file.
- E. The script stores output with leading or trailing spaces.
Answer: A,D
Explanation:
Configures a loopback interface:
The script includes the following commands in config_commands:
config_commands = ['int loop 0', 'ip addre 10.10.10.1 255.255.255.255', 'no sh'] This configures a loopback interface with IP address 10.10.10.1/32 and enables the interface (no shut).
Stores output in the cli.txt file:
The script writes the output of the show run command into a file named cli.txt:
file = open('cli.txt', 'w')
file.write(output)
file.close()
NEW QUESTION # 235
Refer to the exhibit.
The network engineer is performing end-to-end MPLS path testing with these conditions:
* Users must perform MPLS OAM for all available same-cost paths from R1 to R4.
* Traceroute operations must return all of the next-hop IP details.
Which configuration meets these requirements?
- A. traceroute mpls multipath ipv4 10.10.10.4 255.255.255.255
- B. traceroute mpls multipath ipv4 10.10.10.4 255.255.255.255 verbose
- C. traceroute mpls ipv4 10.10.10.4 255.255.255.255 verbose
- D. traceroute mpls ipv4 10.10.10.4 255.255.255.255 source 10.10.10.1
Answer: B
Explanation:
Using verbose knob in above command will list all the hops as below: R1#traceroute mpls multipath ipv4 10.1.5.5 255.255.255.255 verbose https://www.cisco.com/c/en/us/support/docs/multiprotocol-label-switching-mpls/multiprotocol-label-switching-mpls/200097-MPLS-LSP-Multipath-Trace.html
NEW QUESTION # 236
Which configuration enables BGP FlowSpec client function and installation of policies on all local interfaces?
A)
B)
C)
D)
- A. Option D
- B. Option C
- C. Option A
- D. Option B
Answer: B
NEW QUESTION # 237
Drag and Drop Question
Drag and drop the message types from the left onto the target field of the message originator on the right.
Answer:
Explanation:
NEW QUESTION # 238
Refer to the exhibit:
Assume all other configurations are correct and the network is otherwise operating normally. Which conclusion can you draw about the neighbor relationship between routers R1 and R2?
- A. The neighbor relationship is up
- B. The neighbor relationship will be up only if the two devices have activated the correct neighbor relationships under the IPv4 address family
- C. The neighbor relationship is down because R1 believes R2 is in AS 65012.
- D. The neighbor relationship is down because the loco I-as value for R2 is missing in the R1 neighbor statement
Answer: C
NEW QUESTION # 239
Refer to the exhibit. What is the purpose of this JSON script?
- A. It updates a user authentication record.
- B. It deletes a user's authentication record.
- C. It confirms a user's login credentials.
- D. It changes the existing password.
Answer: B
NEW QUESTION # 240
Refer to the exhibit.
The network engineer who manages ASN 65001 must configure a BGP routing policy on GW-XR1 with these requirements:
* Advertise locally-originated routes and /24 prefixes assigned within the 198.18.0.0/15 range. All other prefixes must be dropped.
* Reachability to 198.18.100.0/24 must be preferred via the EDGE-1 connection.
* Reachability to 198.19.100.0/24 must be preferred via the EDGE-2 connection.
Which configuration must the network engineer implement on GW-XR1?
- A.

- B.

- C.

- D.

Answer: B
Explanation:
https://community.cisco.com/t5/mpls/cisco-xr-rpl-destination-vs-destination-prefix/td-p/4587693
NEW QUESTION # 241
Refer to the exhibit. A network administrator is implementing IGMP to enable multicast feed transmission to the receiver.
Which configuration must the administrator deploy on GW1 to permit IGMP Joins only to the assigned (S, G) feed?
config t
- A. access-list 100 permit igmp host 0.0.0.0 host 239.10.10.10
access-list 100 deny igmp any any
interface GigabitEthernet1
ip igmp access-group 100
ip igmp version 2
end
config t - B. access-list 100 permit igmp host 0.0.0.0 host 239.10.10.10
access-list 100 permit igmp host 172.20.20.3 host 239.10.10.10
access-list 100 deny igmp any any
interface GigabitEthernet1
ip igmp access-group 100
ip igmp version 3
end
config t - C. access-list 100 permit igmp host 0.0.0.0 host 239.10.10.10
access-list 100 permit igmp host 172.20.20.3 host 239.10.10.10
access-list 100 deny igmp any any
interface GigabitEthernet1
ip igmp access-group 100
ip igmp version 2
end - D. access-list 100 permit igmp host 0.0.0.0 host 239.10.10.10
access-list 100 deny igmp any any
interface GigabitEthernet1
ip igmp access-group 100
ip igmp version 3
end
config t
Answer: B
Explanation:
NEW QUESTION # 242
Refer to the exhibit.
A network administrator implemented MPLS LDP changes on PE-A LSR device. The engineer must ensure there are no LDP peer are fully operational. Which LDP feature must the engineer apply to the existing configuration to eliminate the problem?
- A. Disable IP CEF on routers LDP and enable
- B. Configure MPLS LDP IGP synchronization on the network.
- C. Configure MPLS LDP NSR for all LDP sessions.
- D. Enable LDP session protection under the routing protocol.
Answer: C
Explanation:
Explanation
https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/msp/configuration/xe-3s/mp-ha-xe-3s-book/mp-nsr-ldp-supp.
NEW QUESTION # 243
A network engineer must collect traffic statistics for an internal LAN toward the internet The sample must include the source and destination IP addresses, the destination ports, the total number of bytes from each flow using a 64-bit counter, and all transport flag information. Because of CPU limits, the flow collector processes samples that are a maximum of 20 seconds long. Which two configurations must the network engineer apply to the router? (Choose two.)

- A. Option D
- B. Option C
- C. Option B
- D. Option A
- E. Option E
Answer: C,E
NEW QUESTION # 244
Which two actions describe ISP delegation to PCE servers? (Choose two)
- A. removing TE re-optimization timer timeouts
- B. entering the mpls traffic-eng reoptimize command
- C. changing the precedence of any of the PCE servers
- D. adding a new PCE server with lower precedence than the primary PCE
- E. adding a new PCE server with higher precedence than the primary PCE
Answer: D,E
NEW QUESTION # 245
An engineer is implementing a router redistribution within BGP. The route map must be configured to permit all unmatched routes. Which action must the engineer perform to complete this task?
- A. Option D
- B. Option C
- C. Option A
- D. Option B
Answer: B
Explanation:
The task requires the engineer to configure a route map that permits all unmatched routes during router redistribution within BGP. The correct action is to remove the implicit deny entry at the end of the route map, as indicated in Option C. By default, route maps have an implicit deny at the end, meaning that if a route doesn't match any of the permit or deny statements in the route map, it will be denied. Removing this implicit deny entry ensures that all unmatched routes are permitted. References := Implementing and Operating Cisco Service Provider Network Core Technologies
NEW QUESTION # 246
Refer to the exhibit. A regional company is implementing a network-health monitoring solution on their Cisco ISR routers to monitor network performance metrics and gather real time data. The router R1 Ethernet interface, GigabitEthemet0/0, is assigned IP address 192.168.1.1/24, and basic IP addressing and connectivity to the data-collection server have already been configured.
A network engineer must update R1 to ensure secure and reliable data transmission to the monitoring server, which is located at IP address 192.168.50.50 on port 50051. To achieve secure communication, the configuration must comply with RPC 5246, and to ensure reliable data transmission, it must follow RFC 793. Which command must the engineer execute to configure data collection?
- A. gnmi dialout address 192.168.50.50 port 50051
- B. grpc dialout address 192.168.50.50 port 50051
- C. telemetry ietf subscription 1 source-address 10.1.1.1 50051 protocol grpc-icmp
- D. telemetry ietf subscription 1 receiver ip address 192.168.50.50 50051 protocol grpc-tcp
Answer: D
Explanation:
The configuration specifies that the router must transmit telemetry data securely and reliably to the monitoring server. To achieve this:
gRPC-TCP (gRPC with Transport Layer Security) is compliant with RFC 5246 for secure communication using TLS.
Reliable transmission is ensured through TCP, as it adheres to RFC 793 for reliability.
The command telemetry ietf subscription 1 receiver ip address 192.168.50.50 50051 protocol grpc-tcp explicitly configures R1 to send telemetry data to the specified server and port using the required secure and reliable protocol.
NEW QUESTION # 247
How do CSC VPN services use BGP to support connectivity between customer sites?
- A. BGP eliminates the need for an IGP to run within the backbone carrier core and provides more efficient label distribution.
- B. BGP sends labels to the CSC-PE router so that traffic can traverse the backbone carrier.
- C. BGP uses address families for IPv6 support in networks that use IPv4 and IPv6 between customers in different geographies.
- D. The BGP AS-Override feature allows the CSC network to use the same autonomous system number.
Answer: B
NEW QUESTION # 248
Which capability does RSVP provide in an MPLS network?
- A. reserving bandwidth for multicast flows
- B. reserving up to 75% of interface bandwidth by default
- C. supporting interoperability between IntServ and DiffServ architecture models
- D. signaling a primary path for LSP tunnels
Answer: D
Explanation:
RSVP-TE is used in an MPLS network to signal and establish (primary) label-switched paths by exchanging PATH and RESV messages to set up the tunnel across the network.
NEW QUESTION # 249
Refer lo the exhibit.
An engineer working for private Service Provider with employee id: 3948:11:613 is configuring the BGPsec framework. Which two conditions must the engineer take into account? (Choose two.)
- A. The BGPsec framework secures the AS path.
- B. In BGPsec. all route advertisements are given an expiry time by the originator of the route.
- C. BGPsec uses iPsec tunnel for security.
- D. Private keys are pan of the router key pair used to sign route updates.
- E. In BGPsec, route advertisements are not given an expiration time by the originator of the route.
Answer: A,B
Explanation:
Explanation
https://tools.ietf.org/html/rfc8374#section-3.2
NEW QUESTION # 250
......
The Cisco 350-501 exam consists of 60-70 questions that must be completed in 120 minutes. The questions are a mix of multiple-choice, drag and drop, and simulation-based formats. The passing score for the exam is 825 out of 1000, and the exam is available in English and Japanese.
Pass Cisco 350-501 exam Dumps 100 Pass Guarantee With Latest Demo: https://www.testsimulate.com/350-501-study-materials.html