Refer to the exhibit: https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/350-501/page_18_img_1.jpg Which condition must be met by the OSPF peer of router R1 before the two devices can establish communication?

A. The interface on the OSPF peer must use the same key ID and key value as the configured interface

B. The interface on the OSPF peer may have a different key ID, but it must use the same key value as the configured interface

C. The OSPF peer must be configured as an OSPF stub router

D. The OSPF peer must use clear-text authentication

Refer to the exhibit: https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/350-501/page_51_img_1.jpg R1 is connected to two service providers and is under a DDoS attack Which statement about this design is true if uRPF in strict mode is configured on both interfaces'?

A. R1 accepts source addresses on interface gigabitethernet0/1 that are private addresses

B. R1 permits asymmetric routing as long as the AS-RATH attribute entry matches the connected AS

C. R1 drops destination addresses that are routed to a null interface on the router

D. R1 drops all traffic that ingresses either interface that has a FIB entry that exits a different interface

Refer to the exhibit. https://kxbjsyuhceggsyvxdkof.supabase.co/storage/v1/object/public/file-images/350-501/page_186_img_1.jpg An engineer is reviewing the BGP configuration. Which routes must be advertised to 10.10.10.1

A. Local routes are permitted, and routes from other ASNs are denied.

B. All routes whether local or from other ASNs are denied.

C. Local routes are denied, and routes from other ASNs are permitted.

D. All routes whether local or from other ASNs are permitted.

Free 350-501 Practice Test Questions and Answers (2026)

Q: 1

How much must the MTU be increased when configuring the 802.1q VLAN tag?

Options

26 comments in the community discussion

Reese J. 8

Option B, Similar question popped up on practice exams, always 4 bytes for 802.1q tag.

Quinn X. 3

B . It's 4 bytes for the 802.1q VLAN tag, official Cisco docs and lab sims always show that value. If you want to see it hands-on, try packet captures in a lab environment. Correct me if I'm missing something.

Q: 2

Refer to the exhibit. A large organization is merging the network assets of a recently acquired competitor with one of its own satellite offices in the same geographic are a. The newly acquired network is running different routing protocol than the company's primary network. As part of the merger a network engineer implemented this route map Which task must the engineer perform to complete the Implementation?

Options

25 comments in the community discussion

Luke C. 1

Pretty sure it's C here.

Noah 1

Had something like this in a mock, isn't B the step where you enable wide metrics for IS-IS interoperability?

Q: 3

Refer to the exhibit: Which condition must be met by the OSPF peer of router R1 before the two devices can establish communication?

Options

33 comments in the community discussion

Chris E. 1

A , the key ID mismatch is what actually blocks OSPF MD5 peers in practice.

Nora 1

A is wrong, A. Both sides have to match key ID and key value for OSPF MD5 authentication, or they'll never form adjacency. I remember getting tripped up by this in lab before. Correct me if I'm missing a special case!

Q: 4

Which utility can you use to locate MPLS faults?

Options

27 comments in the community discussion

Logan P. 6

Option C here. Tricky since A is usually a trap for path mapping, but C is for pinpointing MPLS LSP faults specifically.

Ajay X. 2

C imo. MPLS traceroute (A) is tempting but only shows hops, doesn't actually catch LSP faults like C does.

Q: 5

Refer to the exhibit: R1 is connected to two service providers and is under a DDoS attack Which statement about this design is true if uRPF in strict mode is configured on both interfaces'?

Options

38 comments in the community discussion

Quinn Z. 1

D imo

Neha 1

Q: 6

Which feature will an operator use while implementing MPLS TE on customer's network, to prevent an LSP from using any overseas inks?

Options

29 comments in the community discussion

HelpfulAuditor7638 6

C. not B

Nathan K. 1

C tbh

Q: 7

Refer to the exhibit. R101 is peering with R102 and R103, and R201 is peering with R202 and R203 using iBGP Labeled Unicast address families. The OSPF area 0 border routers are in a full iBGP Labeled Unicast mesh, and VPNv4 routes are exchanged directly between PE routers R101 and R201 through iBGP Which address family-level configuration must be applied on ABR R102 on ABR R102 to support a Unified MPLS routing architecture with partitioned IGP domains? A) B) C) D)

Options

38 comments in the community discussion

DirectTester1052 2

Option B pretty sure since some lab guides show similar config. Check official guide and look over exam practice too.

Luke 1

B , looks like it could work because it sets up iBGP but I'm missing the labeled unicast part for partitioned domains. Maybe I'm overthinking and B is fine since VPNv4 is exchanged directly. Not 100% though, anyone see B as valid?

Q: 8

Refer To the exhibit: On R1, which output does the show isis neighbors command generate? A) B) C) D)

Options

31 comments in the community discussion

Zoe 1

D imo, A is a classic trap since it shows the 'detailed' output not just basic show isis neighbors.

Nora I. 1

Probably D, I saw a similar format pop up on practice exam sites for show isis neighbors.

Q: 9

When configuring traffic engineering tunnels in Cisco MPLS core network, you see the traffic is not taking the expected path in the core. Which command do you use to quickly check path of a TE tunnel?

Options

28 comments in the community discussion

RobinY 2

C , "show mpls traffic-engineering tunnels" is what actually shows the TE tunnel path, not just the IP route. D is a trap since it only checks underlay IP hops, missing MPLS specifics. Pretty sure it's C unless they asked differently.

Riley A. 2

Nah, I don’t think it’s D. C gives you the detailed tunnel path end-to-end, including all hops along the LSP. D just shows basic IP routing, not the actual MPLS TE tunnel info. Pretty sure C is what you want here, unless they were asking about plain IP routing. Anyone disagree?

Q: 10

An engineer needs to implement QOS mechanism on customer's network as some applications going over the internet are slower than others are. Which two actions must the engineer perform when implementing traffic shaping on the network in order to accomplish this task? (Choose two)

Options

37 comments in the community discussion

Nina A. 1

D imo, shaping is really about buffering packets and using the token bucket, so A and B fit best. E is more for policing where you drop packets. Not 100 percent, but this matches what I've seen in Cisco docs.

Alex B. 1

Maybe A/B, but if the app requirements specify strict real-time delivery, D could come into play instead.

Correct Answer:

A, B

Explanation

When implementing traffic shaping on a network, the goal is to control the rate of traffic being sent into the network to avoid congestion. This is done by buffering excess packets and then scheduling them to be sent out at a steady rate. Option A is correct because traffic shaping requires a queue with sufficient memory to buffer excess packets. When the traffic rate exceeds the configured maximum rate (shaping rate), the excess packets are temporarily stored in the queue until they can be sent out, ensuring a smooth flow of traffic without overwhelming the network1. Option B is also correct as traffic shaping involves configuring token values in bytes. Tokens are used to represent permission to send a certain amount of data. The token bucket is filled with tokens at a steady rate, and packets can only be sent if there are enough tokens in the bucket. The token values determine the size of the bucket and the rate at which it is refilled, which in turn controls the rate of traffic1. Option C is incorrect because packet remarking for excess traffic is not a component of traffic shaping. Packet remarking is typically used in conjunction with policing, where packets that exceed the rate limit can be remarked to a lower priority for downstream handling1. Option D is incorrect in the context of traffic shaping. While a scheduling function is used to handle the packets that are delayed due to buffering, the scheduling itself is not part of the shaping mechanism but rather a function of the queuing system that works alongside shaping1. Option E is incorrect as it pertains to traffic policing, not shaping. In traffic policing, packets that exceed a certain threshold are discarded or remarked, whereas shaping delays excess packets by buffering them1. Reference: The information provided here is based on the Quality of Service (QoS) Configuration Guide from Cisco, which details the components and implementation of QoS, including traffic shaping1.

Q: 11

Refer to the exhibit. An engineer is reviewing the BGP configuration. Which routes must be advertised to 10.10.10.1

Options

8 comments in the community discussion

Drew

Option D. Saw a similar question in an exam report where D was the pick.

Riley L.

B . If the distribute-list on outbound is misconfigured, it's possible that no routes-local or remote-would be sent to the neighbor. I remember a similar scenario in lab where everything got denied.

Q: 12

What is a constraint of Cisco MPLS TE tunnel configurations?

Options

9 comments in the community discussion

LoganN 2

B or C. B is tempting since ISIS metrics can trip people up, but I remember folks struggling with unnumbered links for MPLS TE configs too. D feels like a distractor, not convinced that's the main constraint.

Amelia T. 1

Hard to say, D, since Cisco MPLS TE tunnels don't natively do QoS-aware path selection. Saw similar in the official guide and practice tests. Check those out if you want more on MPLS TE constraints.

Q: 13

DRAG DROP Drag and drop the OSPF and IS-IS Cisco MPLS TE extensions from the left to their functional descriptions on the right.

Drag & Drop

Enable JavaScript to use the Drag & Drop feature.

TLV Type 2
TLV Type 22
TLV Type 134
TLV Type 135
Type 10 Opaque LSA

3 comments in the community discussion

Vikram X. 4

TLV Type 22 -> includes an 8-bit default metric, TLV Type 135 -> supports a 32-bit metric and up/down bit, TLV Type 134 -> carries a 32-bit router ID for TE, TLV Type 2 -> advertisements are flooded throughout entire area network, Type 10 Opaque LSA -> contains info about the link and includes other sub-

Q: 14

DRAG DROP Drag and drop the LDP features from the left onto their usages on the right.

Drag & Drop

Enable JavaScript to use the Drag & Drop feature.

session protection
IGP synchronization
targeted-hello accept
graceful restart

6 comments in the community discussion

Jack 2

session protection → uses LDP Targeted hellos, IGP synchronization → allows stale label bindings, graceful restart → prevents valid routes from being overwritten, targeted-hello accept → forms neighborship with non-direct routers. Pretty sure that's right from what I remember in the OCG. If someone sees it differently

Liam U. 2

Had something like this in a mock: session protection -> uses LDP Targeted hellos to protect sessions, IGP synchronization -> allows stale label bindings, graceful restart -> prevents valid routes from being overwritten, targeted-hello accept -> forms neighborship between non-directly connected routers.

Q: 15

DRAG DROP Drag and drop the LDP features from the left onto the correct usages on the right.

Drag & Drop

Enable JavaScript to use the Drag & Drop feature.

session protection
IGP synchronization
targeted-hello accept
graceful restart

7 comments in the community discussion

Jordan Q. 1

session protection -> It uses LDP Targeted hellos to protect LDP sessionsIGP synchronization -> It allows stale label bindings to be used for a period of time while an LDP neighbor is unreachabletargeted-hello accept -> It uses LDP to form neighborship between non-directly connected routersgraceful

Mason E.

session protection → It uses LDP Targeted hellos to protect LDP sessionsIGP synchronization → It prevents valid routes from being overwritten with new ones until labels are assignedtargeted-hello accept → It uses LDP to form neighborship between non-directly connected routersgraceful restart → It allows sta

Q: 16

DRAG DROP Drag and drop the NAT64 descriptions from the left onto the correct NAT64 types on the right.

Drag & Drop

Enable JavaScript to use the Drag & Drop feature.

It is limited on the number of endpoints.
It uses address overloading.
It conserves IPv4 addresses.
It mandates IPv4-translatable IPv6 address allocation.
It has 1:N translation.

7 comments in the community discussion

Logan P. 7

Pretty sure this mapping holds up, but worth noting: Stateless NAT64 needs explicit IPv4-translatable IPv6 addresses, so no address overloading there. Stateful NAT64 does the traditional overloading/conservation trick with 1:N translation. Seen a similar question on some practice sets.

Ava Q. 5

This matches what I've seen in the Cisco docs: stateful uses address overloading with 1:N translation to save IPv4, while stateless can't overload and is limited by needing IPv4-translatable IPv6. Probably the right mapping but someone shout if they see otherwise.

Q: 17

DRAG DROP Drag and drop the functions from the left onto the correct Path Computation Element Protocol roles on the right

Drag & Drop

Enable JavaScript to use the Drag & Drop feature.

calculates paths through the network
keeps TE topology database information
sends path calculation request
sends path creation request
sends path status updates

8 comments in the community discussion

Sam 9

Pretty straightforward if you've worked with PCEP. Path Computation Element gets "calculates paths through the network" and "keeps TE topology database information", while Path Computation Client handles "sends path calculation request" plus the creation and status updates. That's what I've seen in similar practice set

Anita R. 5

PCE: calculates paths through the network, keeps TE topology database info.PCC: sends path calculation request, sends path creation request, sends path status updates.I've seen some folks put status updates under PCE but that's a trap, PCC is responsible for those. Based on practice and exam reports I'm pret

Q: 18

DRAG DROP Drag and drop the OSPF area types from the left onto the correct statements on the right

Drag & Drop

Enable JavaScript to use the Drag & Drop feature.

backbone
not-so-stubby
stub
totally stubby

5 comments in the community discussion

Layla N. 6

backbone → required area that allows interarea communication, stub → area that can learn interarea routes and the default route, totally stubby → area that can learn only the default route and routes within its own area, not-so-stubby → area that can serve as a redistribution point for external routes to enter the OSPF

MethodicalTester8734 6

Q: 19

DRAG DROP A network engineer is adding 10Gbps link to an existing 2X1Gbps LACP-based LAG to augment its capacity. Network standards require a bundle interface to be take out of service if one of its member links does down, and the new link must be added with minimal impact to the production network. Drag and drop the tasks that the engineer must perform from the left into the sequence on the right. Not all options are used.

Drag & Drop

Enable JavaScript to use the Drag & Drop feature.

Execute the channel-group number mode active command to add the 10Gbps link to the existing bundle.
Execute the channel-group number mode on command add the 10Gbps link to the existing bundle.
Execute the lacp min-bundle 3 command to set the minimum number of ports threshold.
Validate the network layer of the 10Gbps link.
Execute the channel-group number mode auto command to add the 10Gbps link to the existing bundle.
Validate the physical and data link layers of the 10Gbps link.

7 comments in the community discussion

Olivia O. 6

Physical/data link check, then network layer, channel-group mode on, last is lacp min-bundle 3.

Avery W. 5

Pretty sure it should be: Validate physical/data link, validate network layer, add with channel-group mode on, then lacp min-bundle 3.

Q: 20

DRAG DROP Drag and drop the technologies from the left onto the correct definitions on the right.

Drag & Drop

Enable JavaScript to use the Drag & Drop feature.

DWDM
ROADM
IPODWDM
EDFA

6 comments in the community discussion

Noah J. 5

Why does Cisco love jamming all the optics acronyms in one drag and drop? Mapping: IPODWDM to routers/switches support, EDFA for amplification, ROADM for lambda drops, DWDM for bandwidth.

Rowan 3

Yeah, same mapping here: IPODWDM fits the router/switch requirement, EDFA for signal boost, ROADM does the lambda drops, DWDM handles bandwidth increase. Pretty sure that's what Cisco is looking for on this one.

Question 1 of 20

Free 350-501 Practice Test Questions and Answers (2026)

Premium Access Includes

FLASH OFFER

avail 10% DISCOUNT on YOUR PURCHASE