MAC Learning JN0-683 Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A network engineer is designing an EVPN-VXLAN fabric and wants to ensure that MAC mobility events are handled correctly, but also wants to prevent a malicious host from spoofing a MAC address and causing a denial-of-service by continuously moving the MAC. What is the best approach?

   • ADisable MAC mobility and rely on static MAC entries
   • BUse MACsec to authenticate the host and prevent spoofing
   • CIncrease the MAC aging timer to reduce the frequency of mobility events
   • DEnable duplicate MAC detection with a low threshold to suppress the spoofed MAC
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   An engineer is configuring a new EVPN-VXLAN fabric and wants to ensure that MAC addresses learned from remote VTEPs are flushed when a VTEP goes down. What mechanism ensures this?

   • AThe MAC-VRF is reset when a VTEP goes down
   • BThe duplicate MAC detection timer triggers a flush
   • CBGP session teardown triggers the removal of all routes learned from that peer, including MAC routes
   • DThe MAC aging timer expires and removes the remote MAC entries
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   When a VTEP receives a Type 2 route for a MAC address that it already has in its forwarding table, but the route is from a different remote VTEP, what does the receiving VTEP do to determine which route is more recent?

   • AIt uses the BGP local preference to select the route from the closest VTEP.
   • BIt accepts both routes and load-balances traffic across the two VTEPs.
   • CIt compares the local aging timers of the two MAC entries.
   • DIt compares the sequence numbers in the MAC mobility extended community of the two routes.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   When a VTEP receives a data frame from a locally attached host with an unknown destination MAC, what is the first action it takes in an EVPN-VXLAN fabric?

   • AIt floods the frame to all remote VTEPs in the same VNI using the ingress replication list or multicast tree.
   • BIt sends the frame only to the VTEP that advertised the VNI in a Type 3 route.
   • CIt drops the frame and sends a BGP Type 2 route to request the MAC address.
   • DIt sends an ARP request to the remote VTEPs to resolve the MAC address.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In an EVPN-VXLAN fabric, which BGP EVPN route type is used to advertise locally learned MAC addresses to remote VTEPs?

   • AType 2: MAC/IP Advertisement route
   • BType 1: Ethernet Auto-Discovery route
   • CType 3: Inclusive Multicast Ethernet Tag route
   • DType 5: IP Prefix route
   Reveal Solution Discussion Select an answer first