A service provider is designing Internet access for a customer who has strict security requirements. The customer wants to ensure that their private VPN traffic is completely isolated from their Internet traffic. The provider is considering using a separate VRF for Internet access. What is the primary advantage of this design over using a shared VRF for Internet access?

It allows the customer to use the same IP address space for both private and Internet traffic.

It simplifies the configuration of the PE-CE routing protocol.

It reduces the number of route targets required.

It provides complete routing isolation between the customer's private and Internet traffic.

CiscoCertified Network Professional Service Provider

Domain 4Objective 3

4.3 Configure L3VPN 350-501 Practice Questions (Page 4)

Part of the Services domain, which accounts for 20% of the 350-501 exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–16 in this domain), expect 2–3 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

10concepts

20%of the exam

Questions 16–20

16foundation · easy
Which routing protocol is commonly used between PE and CE routers in an L3VPN when the customer requires dynamic route exchange and uses Cisco equipment?
Select an answer first
17foundation · easy
Which BGP extended community attribute is used to control the import and export of routes between VRFs in an L3VPN?
Select an answer first
18foundation · easy
Which Internet access option for L3VPN customers uses the provider's global routing table for Internet routes?
Select an answer first
19application · medium
A service provider is designing Internet access for a customer who has strict security requirements. The customer wants to ensure that their private VPN traffic is completely isolated from their Internet traffic. The provider is considering using a separate VRF for Internet access. What is the primary advantage of this design over using a shared VRF for Internet access?
Select an answer first
20foundation · easy
Which component is responsible for maintaining separate routing tables for different VPN customers on a PE router in an intra-AS L3VPN?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 350-501

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “350-501” is a trademark of its owner, used for identification only.

4.3 Configure L3VPN 350-501 Practice Questions (Page 4)

Questions 16–20

Which routing protocol is commonly used between PE and CE routers in an L3VPN when the customer requires dynamic route exchange and uses Cisco equipment?

Which BGP extended community attribute is used to control the import and export of routes between VRFs in an L3VPN?

Which Internet access option for L3VPN customers uses the provider's global routing table for Internet routes?

Which component is responsible for maintaining separate routing tables for different VPN customers on a PE router in an intra-AS L3VPN?

Keep studying — Services