Which command is used on Cisco IOS XR to verify the LPTS statistics for a specific protocol?

show lpts statistics protocol bgp

A service provider is considering deploying BGPsec to secure inter-AS routing. The provider has already implemented BGP TTL security and TCP-AO on all eBGP sessions. The provider is concerned about the operational impact of BGPsec, including CPU usage and the need to manage keys. The provider also wants to ensure that BGPsec does not break existing BGP features such as route reflectors and communities. Which consideration is most important when deploying BGPsec?

BGPsec is transparent to route reflectors and does not require any changes to the reflector configuration.

BGPsec eliminates the need for BGP TTL security and TCP-AO because it provides end-to-end authentication.

BGPsec requires that all ASes in the path support BGPsec; otherwise, the route is treated as invalid and may be rejected.

BGPsec uses the same TCP-MD5 authentication as BGP, so no additional key management is needed.

A service provider is implementing BGPsec to validate route origins and paths. The team also wants to propagate traffic filtering rules for DDoS mitigation. Which solution should be used?

Deploy BGPsec and BGP Flowspec.

Use CoPP to police BGP traffic.

A service provider is deploying BGPsec to validate route origins and paths. The team also wants to ensure that BGP sessions are protected from spoofed packets. Which additional configuration should be applied?

Enable BGP TTL security on all eBGP sessions.

Apply a CoPP policy for BGP traffic.

Configure BGP prefix suppression.

Configure BGP MD5 authentication.

A service provider is securing LDP sessions between routers. The team wants to ensure that only authorized routers can exchange labels and that the control plane is protected from excessive LDP traffic. Which configuration should be applied?

Configure LDP authentication and a CoPP policy for LDP traffic.

Configure label allocation filtering only.

Configure LDP authentication only.

Configure BGP TTL security on LDP sessions.

CiscoCertified Network Professional Service Provider

Domain 1Objective 5

1.5 Configure and Verify Control Plan Security 350-501 Practice Questions (Page 5)

Part of the Architecture domain, which accounts for 15% of the 350-501 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

6concepts

15%of the exam

Questions 21–25

21foundation · easy
Which command is used on Cisco IOS XR to verify the LPTS statistics for a specific protocol?
Select an answer first
22expert · hard
A service provider is considering deploying BGPsec to secure inter-AS routing. The provider has already implemented BGP TTL security and TCP-AO on all eBGP sessions. The provider is concerned about the operational impact of BGPsec, including CPU usage and the need to manage keys. The provider also wants to ensure that BGPsec does not break existing BGP features such as route reflectors and communities. Which consideration is most important when deploying BGPsec?
Select an answer first
23application · medium
A service provider is implementing BGPsec to validate route origins and paths. The team also wants to propagate traffic filtering rules for DDoS mitigation. Which solution should be used?
Select an answer first
24application · medium
A service provider is deploying BGPsec to validate route origins and paths. The team also wants to ensure that BGP sessions are protected from spoofed packets. Which additional configuration should be applied?
Select an answer first
25application · medium
A service provider is securing LDP sessions between routers. The team wants to ensure that only authorized routers can exchange labels and that the control plane is protected from excessive LDP traffic. Which configuration should be applied?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-501

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-501” is a trademark of its owner, used for identification only.