Question 40 An engineer changes a prefix list to permit 192.0.2.0/24, yet a route-map still blocks longer subnets such as 192.0.2.64/26. Which lasting design or operational safeguard best prevents this particular issue from recurring? Maintain route ownership and tag/filter policy at each redistribution boundary with bidirectional loop tests. Use track-aware PBR with documented probe targets and scheduled remote failure tests. Audit route-map references and tag expectations when new redistribution sources or prefixes are introduced. Write prefix-policy test cases for exact and more-specific prefixes before deploying modifications. ExplanationCorrect Answer D:Write prefix-policy test cases for exact and more-specific prefixes before deploying modifications. This addresses the recurring cause: A prefix-list entry without length modifiers matches the exact prefix length, not every subnet underneath it. A targeted acceptance check is: Test representative /24 and /26 entries against the prefix list and verify the accepted routing advertisements. Other Answers A:Maintain route ownership and tag/filter policy at each redistribution boundary with bidirectional loop tests. A prefix-list entry without length modifiers matches the exact prefix length, not every subnet underneath it. B:Use track-aware PBR with documented probe targets and scheduled remote failure tests. A prefix-list entry without length modifiers matches the exact prefix length, not every subnet underneath it. C:Audit route-map references and tag expectations when new redistribution sources or prefixes are introduced. A prefix-list entry without length modifiers matches the exact prefix length, not every subnet underneath it.
Question 41 After a new policy-based routing rule, branch traffic exits a backup WAN even though the routing table's default still points to the primary. Which corrective action most directly resolves the documented failure without suppressing unrelated safeguards? Inspect the ingress interface's PBR route-map and correct the matched next-hop action for the affected source. Apply a narrowly scoped outbound prefix policy for the peer to include only explicitly approved networks. Attach summarization to the actual outbound interface toward the recipient and check release-dependent syntax. Use PBR next-hop availability checking or reachability tracking supported by the platform instead of trusting link-up alone. ExplanationCorrect Answer A:Inspect the ingress interface's PBR route-map and correct the matched next-hop action for the affected source. Policy-based routing can override normal destination-based forwarding for packets that meet an applied ingress policy. Confirm `show route-map` matches and compare forwarding for matching and nonmatching packets. Other Answers B:Apply a narrowly scoped outbound prefix policy for the peer to include only explicitly approved networks. Policy-based routing can override normal destination-based forwarding for packets that meet an applied ingress policy. C:Attach summarization to the actual outbound interface toward the recipient and check release-dependent syntax. Policy-based routing can override normal destination-based forwarding for packets that meet an applied ingress policy. D:Use PBR next-hop availability checking or reachability tracking supported by the platform instead of trusting link-up alone. Policy-based routing can override normal destination-based forwarding for packets that meet an applied ingress policy.
Question 42 After a new policy-based routing rule, branch traffic exits a backup WAN even though the routing table's default still points to the primary. Which technical mechanism best explains the behavior observed in this scenario? Redistributing the same origin from multiple protocols can cause multiple external candidates and route-feedback hazards. Policy-based routing can override normal destination-based forwarding for packets that meet an applied ingress policy. Uncontrolled bidirectional redistribution can reintroduce an already exported route, producing feedback and unstable route selection. An up local interface does not establish end-to-end viability of the PBR-selected next hop. ExplanationCorrect Answer B:Policy-based routing can override normal destination-based forwarding for packets that meet an applied ingress policy. This explains why the initial condition produces the observed failure. The direct repair is: Inspect the ingress interface's PBR route-map and correct the matched next-hop action for the affected source. Validate through: Confirm `show route-map` matches and compare forwarding for matching and nonmatching packets. Other Answers A:Redistributing the same origin from multiple protocols can cause multiple external candidates and route-feedback hazards. Policy-based routing can override normal destination-based forwarding for packets that meet an applied ingress policy. C:Uncontrolled bidirectional redistribution can reintroduce an already exported route, producing feedback and unstable route selection. Policy-based routing can override normal destination-based forwarding for packets that meet an applied ingress policy. D:An up local interface does not establish end-to-end viability of the PBR-selected next hop. Policy-based routing can override normal destination-based forwarding for packets that meet an applied ingress policy.
Question 43 After a new policy-based routing rule, branch traffic exits a backup WAN even though the routing table's default still points to the primary. After applying the correction, which verification evidence most directly demonstrates that this issue is resolved? Query `show ip route vrf` for both tenants and prove that overlap remains isolated under forwarding tests. Display the actual route-map match counters and confirm the expected tag is attached to each new route. Confirm `show route-map` matches and compare forwarding for matching and nonmatching packets. Test one authorized medical flow and one guest flow, observing their distinct next hops and policy counters. ExplanationCorrect Answer C:Confirm `show route-map` matches and compare forwarding for matching and nonmatching packets. This checks the affected traffic or control-plane behavior, not merely a generic up/down indicator. The underlying mechanism is: Policy-based routing can override normal destination-based forwarding for packets that meet an applied ingress policy. Other Answers A:Query `show ip route vrf` for both tenants and prove that overlap remains isolated under forwarding tests. Policy-based routing can override normal destination-based forwarding for packets that meet an applied ingress policy. B:Display the actual route-map match counters and confirm the expected tag is attached to each new route. Policy-based routing can override normal destination-based forwarding for packets that meet an applied ingress policy. D:Test one authorized medical flow and one guest flow, observing their distinct next hops and policy counters. Policy-based routing can override normal destination-based forwarding for packets that meet an applied ingress policy.
Question 44 After a new policy-based routing rule, branch traffic exits a backup WAN even though the routing table's default still points to the primary. Which lasting design or operational safeguard best prevents this particular issue from recurring? Write prefix-policy test cases for exact and more-specific prefixes before deploying modifications. Map summary direction and receiver neighbors explicitly during routing design review. Use track-aware PBR with documented probe targets and scheduled remote failure tests. Add source-based forwarding tests to change validation for every PBR deployment. ExplanationCorrect Answer D:Add source-based forwarding tests to change validation for every PBR deployment. This addresses the recurring cause: Policy-based routing can override normal destination-based forwarding for packets that meet an applied ingress policy. A targeted acceptance check is: Confirm `show route-map` matches and compare forwarding for matching and nonmatching packets. Other Answers A:Write prefix-policy test cases for exact and more-specific prefixes before deploying modifications. Policy-based routing can override normal destination-based forwarding for packets that meet an applied ingress policy. B:Map summary direction and receiver neighbors explicitly during routing design review. Policy-based routing can override normal destination-based forwarding for packets that meet an applied ingress policy. C:Use track-aware PBR with documented probe targets and scheduled remote failure tests. Policy-based routing can override normal destination-based forwarding for packets that meet an applied ingress policy.
Question 45 A PBR next-hop points to an upstream router that has failed beyond a still-up local interface; matching traffic is black-holed. Which corrective action most directly resolves the documented failure without suppressing unrelated safeguards? Use PBR next-hop availability checking or reachability tracking supported by the platform instead of trusting link-up alone. Inspect the ingress interface's PBR route-map and correct the matched next-hop action for the affected source. Constrain summary advertisement to the intended reachable coverage or install the needed more-specific reachability design. Inspect OSPF path type and cost instead of changing interprotocol administrative distance. ExplanationCorrect Answer A:Use PBR next-hop availability checking or reachability tracking supported by the platform instead of trusting link-up alone. An up local interface does not establish end-to-end viability of the PBR-selected next hop. Demonstrate matched traffic failing over when an upstream reachability probe fails while unrelated traffic remains unaffected. Other Answers B:Inspect the ingress interface's PBR route-map and correct the matched next-hop action for the affected source. An up local interface does not establish end-to-end viability of the PBR-selected next hop. C:Constrain summary advertisement to the intended reachable coverage or install the needed more-specific reachability design. An up local interface does not establish end-to-end viability of the PBR-selected next hop. D:Inspect OSPF path type and cost instead of changing interprotocol administrative distance. An up local interface does not establish end-to-end viability of the PBR-selected next hop.
Question 46 A PBR next-hop points to an upstream router that has failed beyond a still-up local interface; matching traffic is black-holed. Which technical mechanism best explains the behavior observed in this scenario? A scheduled IP SLA probe tests remote path availability; a track object exposes that result to a route or policy decision. An up local interface does not establish end-to-end viability of the PBR-selected next hop. Redistributing the same origin from multiple protocols can cause multiple external candidates and route-feedback hazards. A summary represents a broader address block than its component routes; advertised coverage must match the routing design. ExplanationCorrect Answer B:An up local interface does not establish end-to-end viability of the PBR-selected next hop. This explains why the initial condition produces the observed failure. The direct repair is: Use PBR next-hop availability checking or reachability tracking supported by the platform instead of trusting link-up alone. Validate through: Demonstrate matched traffic failing over when an upstream reachability probe fails while unrelated traffic remains unaffected. Other Answers A:A scheduled IP SLA probe tests remote path availability; a track object exposes that result to a route or policy decision. An up local interface does not establish end-to-end viability of the PBR-selected next hop. C:Redistributing the same origin from multiple protocols can cause multiple external candidates and route-feedback hazards. An up local interface does not establish end-to-end viability of the PBR-selected next hop. D:A summary represents a broader address block than its component routes; advertised coverage must match the routing design. An up local interface does not establish end-to-end viability of the PBR-selected next hop.
Question 47 A PBR next-hop points to an upstream router that has failed beyond a still-up local interface; matching traffic is black-holed. After applying the correction, which verification evidence most directly demonstrates that this issue is resolved? Query `show ip route vrf` for both tenants and prove that overlap remains isolated under forwarding tests. Verify EIGRP external route entries and the configured metric components after applying the redistribution policy. Demonstrate matched traffic failing over when an upstream reachability probe fails while unrelated traffic remains unaffected. Test reachability to an active /24 and a deliberately unused /24 while inspecting the advertised summary and discard route. ExplanationCorrect Answer C:Demonstrate matched traffic failing over when an upstream reachability probe fails while unrelated traffic remains unaffected. This checks the affected traffic or control-plane behavior, not merely a generic up/down indicator. The underlying mechanism is: An up local interface does not establish end-to-end viability of the PBR-selected next hop. Other Answers A:Query `show ip route vrf` for both tenants and prove that overlap remains isolated under forwarding tests. An up local interface does not establish end-to-end viability of the PBR-selected next hop. B:Verify EIGRP external route entries and the configured metric components after applying the redistribution policy. An up local interface does not establish end-to-end viability of the PBR-selected next hop. D:Test reachability to an active /24 and a deliberately unused /24 while inspecting the advertised summary and discard route. An up local interface does not establish end-to-end viability of the PBR-selected next hop.
Question 48 A PBR next-hop points to an upstream router that has failed beyond a still-up local interface; matching traffic is black-holed. Which lasting design or operational safeguard best prevents this particular issue from recurring? Maintain an explicit per-prefix redistribution ownership matrix across protocol boundaries. Validate interface-to-VRF bindings against the approved tenant inventory after every cutover. Include per-VRF route and next-hop checks in every interface migration checklist. Pair traffic-steering policies with tested upstream reachability criteria and fallback forwarding. ExplanationCorrect Answer D:Pair traffic-steering policies with tested upstream reachability criteria and fallback forwarding. This addresses the recurring cause: An up local interface does not establish end-to-end viability of the PBR-selected next hop. A targeted acceptance check is: Demonstrate matched traffic failing over when an upstream reachability probe fails while unrelated traffic remains unaffected. Other Answers A:Maintain an explicit per-prefix redistribution ownership matrix across protocol boundaries. An up local interface does not establish end-to-end viability of the PBR-selected next hop. B:Validate interface-to-VRF bindings against the approved tenant inventory after every cutover. An up local interface does not establish end-to-end viability of the PBR-selected next hop. C:Include per-VRF route and next-hop checks in every interface migration checklist. An up local interface does not establish end-to-end viability of the PBR-selected next hop.
Question 49 Two VRF-Lite customers use the same 10.10.0.0/16 block on one aggregation router; Customer B packets appear in the global routing table. Which corrective action most directly resolves the documented failure without suppressing unrelated safeguards? Place the customer-facing interface in the correct VRF and verify its dedicated routing context and interfaces. Attach summarization to the actual outbound interface toward the recipient and check release-dependent syntax. Enable BFD with compatible timers and bind routing sessions to it where both peers support that integration. Constrain the PBR match list to the approved source subnet and validate the applied route-map sequence. ExplanationCorrect Answer A:Place the customer-facing interface in the correct VRF and verify its dedicated routing context and interfaces. VRF-Lite maintains separate forwarding and routing tables, permitting overlapping customer prefixes without global collision. Query `show ip route vrf` for both tenants and prove that overlap remains isolated under forwarding tests. Other Answers B:Attach summarization to the actual outbound interface toward the recipient and check release-dependent syntax. VRF-Lite maintains separate forwarding and routing tables, permitting overlapping customer prefixes without global collision. C:Enable BFD with compatible timers and bind routing sessions to it where both peers support that integration. VRF-Lite maintains separate forwarding and routing tables, permitting overlapping customer prefixes without global collision. D:Constrain the PBR match list to the approved source subnet and validate the applied route-map sequence. VRF-Lite maintains separate forwarding and routing tables, permitting overlapping customer prefixes without global collision.
Question 50 Two VRF-Lite customers use the same 10.10.0.0/16 block on one aggregation router; Customer B packets appear in the global routing table. Which technical mechanism best explains the behavior observed in this scenario? An up local interface does not establish end-to-end viability of the PBR-selected next hop. VRF-Lite maintains separate forwarding and routing tables, permitting overlapping customer prefixes without global collision. EIGRP interface summarization affects advertisements leaving the configured interface, not all neighbors globally. Route-maps apply sequence matching and implicitly deny entries that do not match a permitting clause. ExplanationCorrect Answer B:VRF-Lite maintains separate forwarding and routing tables, permitting overlapping customer prefixes without global collision. This explains why the initial condition produces the observed failure. The direct repair is: Place the customer-facing interface in the correct VRF and verify its dedicated routing context and interfaces. Validate through: Query `show ip route vrf` for both tenants and prove that overlap remains isolated under forwarding tests. Other Answers A:An up local interface does not establish end-to-end viability of the PBR-selected next hop. VRF-Lite maintains separate forwarding and routing tables, permitting overlapping customer prefixes without global collision. C:EIGRP interface summarization affects advertisements leaving the configured interface, not all neighbors globally. VRF-Lite maintains separate forwarding and routing tables, permitting overlapping customer prefixes without global collision. D:Route-maps apply sequence matching and implicitly deny entries that do not match a permitting clause. VRF-Lite maintains separate forwarding and routing tables, permitting overlapping customer prefixes without global collision.