300-540 Exam Dumps : Designing and Implementing Cisco Service Provider Cloud Network Infrastructure (SPCNI v1.0)

From Cisco’s EVPN VXLAN multihoming design requirements,port-active multihominguses asingle LAG (EtherChannel / Bundle-Ether)between the host/router and the pair of leaf switches. All physical interfaces participating in that bundle must be configured with:

bundle id mode active

This command:

Associates the physical interfaces (g1/0 and g1/1) withBundle-Ether1.

UsesLACP activemode, which is required for EVPN port-active multihoming.

Enables the host-facing port-channel required to support EVPN multihomed connectivity.

In the exhibit, R1 already has:

interface Bundle-Ether1

description "Bundle to Leaf-1"

interface Bundle-Ether1.10

ip address 192.168.10.1 255.255.255.0

This confirms that the engineer intends to bundleg1/0andg1/1together intoBundle-Ether1, and the missing step is adding the interfaces into that bundle.

The correct configuration is:

interface g1/0

bundle id 1 mode active

interface g1/1

bundle id 1 mode active

Why the other options are incorrect

A. evpn ethernet-segment 1This command is used on EVPN leaf switches (not R1) to define an ESI for multihoming. R1 is not an EVPN VTEP.

B. switchport mode trunkR1 is a router, not a switch. L3 interfaces do not use switchport.

C. encapsulation dot1q 1This applies only to subinterfaces, not physical interfaces, and is unrelated to building a LAG for port-active multihoming.

Comprehensive and Detailed Explanation

For virtualization functions and operational reliability, the architecture must leverageCisco NSO (Network Services Orchestrator)capabilities. NSO provides:

Transactional service modeling

Automatic rollbackwhen any step of a transactional deployment fails

Real-time network-state visibilityvia NSO CLI and live device synchronization

End-to-end service lifecycle automation

Among the options:

Why B is correct

"Virtualization service modeling" fits NSO’s core design principle: model the service, not individual devices.

NSO’s CLI providesstate visibility, operational introspection, transaction logs, and commit details.

NSO’s transactional engine providesautomatic rollbackupon any device or service failure.

This option capturesfull lifecycle automation,real-time state visibility, andreliability, exactly as required.

Why others are incorrect

A: CLI NED alone does not provide real-time state visibility or automated rollback; manual rollback contradicts requirements.

C: Only focuses on service modeling + CLI, but doesnotinclude rollback or lifecycle automation.

D: Templates alone do not ensure rollback or real-time operational state.

Phase 1 of an IPsec tunnel (ISAKMP/IKE) must havematching proposalson both peers for:

Encryption algorithm

Hash (integrity) algorithm

Authentication method

DH group

The requirement states thatAESandSHA-256must be used. The current configuration uses:

encryption 3des → incorrect (must be AES)

hash md5 → incorrect (must be SHA-256)

To meet the requirement, we must modify the ISAKMP policy:

crypto isakmp policy 10

encryption aes ← change 3DES to AES

hash sha256 ← change MD5 to SHA-256

authentication pre-share

group 12

Therefore, the necessary commands on PE1 are:

encryption aes→ optionB

hash sha256→ optionE

Options C and D are invalid syntax (encryption sha256 and hash aes are not supported). Changing the DH group (A) is not required by the problem statement and would not by itself fix the mismatch related to encryption and hash algorithms.