350-501 Question #4: Real Exam Question with Answer & Explanation

Question

After you analyze your network environment, you decide to implement a full separation model for Internet access and MPLS L3VPN services. For which reason do you make this decision?

Options

• AIt enables you to choose whether to separate or centralize each individual service.
• BIt is easier to manage a system in which services are mixed
• CIt requires only one edge router
• DIt enables EGP and IGP to operate independently

Explanation

A full separation model for Internet access and MPLS L3VPN services is chosen to ensure the independent operation of Exterior Gateway Protocols (EGP) and Interior Gateway Protocols (IGP).

Common mistakes.

• A. The full separation model is a specific architectural choice that enforces separation, not one that provides flexibility to choose whether to separate or centralize individual services.
• B. Mixing services generally increases complexity and management overhead, especially when security and performance isolation are critical, making separation a more manageable approach for complex scenarios.
• C. A full separation model often requires more edge routers or logically separate routing instances (e.g., VRFs) to achieve the necessary isolation, not just one edge router.

Concept tested. Network architecture - service separation

Reference. https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Data_Center/DCSecurity_3-1_Campus_LAN_Access_Reference_Design/DCSecurity_3-1_Campus_LAN_Access_Reference_Design/DC_Security_3-1_Reference_Design_Chapter2.html

No community discussion yet for this question.