About the Exam

This exam is for candidates pursuing CCNP Service Provider or the related Cisco Certified Specialist credential. It tests knowledge of implementing service provider VPN services, including Layer 2, Layer 3, and IPv6. Passing it earns the Cisco Certified Specialist - Service Provider VPN Services Implementation certification and counts toward the CCNP Service Provider concentration requirement.

Exam Topics

  • VPN Architecture25%
  • Layer 2 VPNs30%
  • Layer 3 VPNs35%
  • IPv6 VPNs10%

How to Use This Practice Exam

  1. Browse — Read each question, select your answer, and reveal the explanation.
  2. Exam Mode — Simulate real exam conditions with a timed session and score report.
  3. Learn Mode — Spaced repetition schedules questions you struggle with for long-term retention.

Download the Full Exam PDF

Get every question and answer in a clean, printable PDF built for offline study. Purchase once, keep permanent access, and re-download the latest version anytime.

Last updated March 17, 2026 at 10:26 PM

Topic filter
Retired questions
Question sort

QuestionQ1

Layer 3 VPNs

Question Image

Refer to the exhibit. PE1 and PE2 exchange VPNv4 routes for CE1 and CE2, and PE3 holds the default route to the internet. If all three devices operate normally, which two conclusions describe this configuration?

Choose two
  • A The CE1 and CE2 VRFs can exchange routes only between their respective VRFs on PE1 and PE2.
  • B All three routers must be running a distance-vector routing protocol.
  • C All three routers must be running MP-BGP.
  • D The CE1 and CE2 VRFs can access the default route provided by the Internet VRF.
  • E Only the CE2 VRF can access the default route provided by the Internet VRF.
Explanation

A VRF imports an exported VPN route only when the route’s route target matches one of its import route targets. The Internet VRF exports the default route with route target 300:3, which CE2 imports but CE1 does not; therefore, only CE2 can use that default route. VPNv4 reachability is exchanged between PE routers through MP-BGP.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ2

Layer 3 VPNs

Question Image

Refer to the exhibit. The CE router has formed a BGP peering with the PE router, and the CE will use the PE core infrastructure as a backbone carrier to support CSC. What additional task can you perform to complete the configuration?

  • A Configure static routing on the CE router.
  • B Configure the address-family ipv4 labeled-unicast command under the neighbor configuration of the CE router for the PE.
  • C Change the rd value to 65001:65001 under the VRF section of the PE router.
  • D Configure OSPF on the PE router.
Explanation

Carrier Supporting Carrier requires the CSC-CE and CSC-PE to exchange IPv4 routes together with MPLS labels through BGP. The PE neighbor already uses the IPv4 labeled-unicast address family, so the CE neighbor must also be configured for address-family ipv4 labeled-unicast to enable labeled route exchange.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ3

Layer 2 VPNs

What is common to EVPN single-active and all-active modes?

  • A They are default gateway redundancy options.
  • B They are multihoming mechanisms used for CE devices.
  • C They are used to provide single connection from a CE device to a service provider.
  • D They are both roles that a designated router can take when MPLS is used with EVPN.
Explanation

EVPN single-active and all-active are multihoming mechanisms for CE devices. Single-active forwards through one active provider-edge attachment for an Ethernet segment, whereas all-active can forward through multiple attached provider-edge devices.

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ4

Layer 2 VPNs

An engineer is troubleshooting an EVPN traffic-flow issue. Which traffic type should the engineer permit in an EVPN Tree Service to resolve the issue?

  • A known unicast from a leaf to another leaf
  • B unknown unicast from a leaf to another leaf
  • C multicast from a leaf to another leaf
  • D known unicast from a root to another root
Explanation

An EVPN E-Tree service allows a root to send traffic to another root or to a leaf, while leaf-to-leaf traffic is restricted. Known unicast traffic from a root to another root is therefore permitted.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!

QuestionQ5

Layer 2 VPNs

An engineer is troubleshooting an EoMPLS circuit on a Cisco IOS XR router interface that strips a VLAN from the distribution layer. Which configuration should the engineer apply to accomplish this task?

  • A interface GigabitEthernet 0/10.l2transport encapsulation dot1q 10 rewrite ingress tag pop 1 symmetric l2vpn xconnect group 103588 p2p 103588 interface GigabitEthernet 0/10.10 neighbor ipv4 10.10.10.2 pw-id 103588
  • B interface GigabitEthernet 0/10.10 encapsulation dot1q 10 rewrite ingress tag pop 1 symmetric l2vpn xconnect group 103588 p2p 103588 interface GigabitEthernet 0/10.10 neighbor ipv4 10.10.10.2 pw-id 103588
  • C interface GigabitEthernet 0/10.10 l2transport encapsulation dot1q 10 l2vpn xconnect group 103588 p2p 103588 interface GigabitEthernet 2/10.10 neighbor ipv4 10.10.10.2 pw-id 103588
  • D interface GigabitEthernet 0/10.10 l2transport encapsulation dot1q 10 rewrite ingress tag translate 1-to-1 dot1ad 10 symmetric l2vpn xconnect group 103588 p2p 103588 interface GigabitEthernet 0/10.10 neighbor ipv4 10.10.10.2 pw-id 103588
Explanation

An IOS XR L2 transport subinterface matching VLAN 10 uses rewrite ingress tag pop 1 symmetric to remove one incoming 802.1Q VLAN tag. The symmetric keyword applies the complementary tag handling in the reverse direction, and the subinterface can be used as the attachment circuit for the EoMPLS xconnect.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!
Know a question that should be here? Contribute to this exam
Back home