100+ Free ACE-Professional Practice Questions

Pass your Arista Certified Engineer — Professional (ACE-P) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately

~60-75% Pass Rate

100+ Questions

100% Free

1 / 10

Question 1

Score: 0/0

In EVPN Multi-Site (DCI) design using border leaves, what role does a Border Gateway (BGW) play?

Connects end hosts

Stitches overlay between sites, performing site-to-site re-origination of EVPN routes

Acts as a spine

Provides wireless

to track

2026 Statistics

Key Facts: ACE-Professional Exam

~75

Exam Questions

Arista / Pearson VUE

70%

Passing Score

Arista

120 min

Exam Duration

Arista

$350

Exam Fee

Arista

3 years

Validity

Arista

25%

EVPN Multi-Site

Largest domain

The ACE-P exam has ~75 questions in 120 minutes with 70% pass threshold. Key topics: EVPN multi-site with Border Gateways, advanced BGP/OSPF, symmetric IRB, ESI multihoming, AVD + Ansible automation, CloudVision Portal features, telemetry (TerminAttr/gNMI), MACsec, 400G optics, LANZ, CoPP. Recommended prep: complete ACE-Specialist track. Certification valid 3 years. Exam fee $350 USD. Delivered via Pearson VUE.

Sample ACE-Professional Practice Questions

Try these sample questions to test your ACE-Professional exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1In EVPN Multi-Site (DCI) design using border leaves, what role does a Border Gateway (BGW) play?

A.Connects end hosts

B.Stitches overlay between sites, performing site-to-site re-origination of EVPN routes

C.Acts as a spine

D.Provides wireless

Explanation: A Border Gateway (also called a gateway/border leaf in multi-site EVPN) terminates EVPN from the local site and re-originates routes toward remote sites, providing site isolation. It typically performs VXLAN-to-VXLAN stitching or VXLAN-to-MPLS gateway functions. Route targets are rewritten during re-origination.

2Which EVPN route type is primarily used for inter-site IP prefix advertisement in multi-site designs?

A.Type 1

B.Type 2

C.Type 3

D.Type 5

Explanation: EVPN Type 5 (IP Prefix) is the workhorse for inter-site routing because it carries IP subnets tied to an L3VNI without requiring host-specific MAC/IP state. For inter-site L2 extension, Type 2/3 are also needed, but Type 5 enables scalable L3 reachability between sites.

3Which EVPN multihoming all-active type balances flows using flow hashing across both VTEPs via Type 1 per-EVI routes?

A.ESI mode: A (All-Active)

B.ESI mode: S (Single-Active)

C.Port-only

D.Static only

Explanation: All-Active ESI multihoming (Type A) allows both VTEPs to forward traffic to/from the multihomed CE simultaneously, load-balanced via Type 1 per-EVI aliasing routes. Single-Active (Type S) allows only the DF to forward at any time. Port-mode (Type P) uses port-level LACP for local resolution.

4In advanced BGP design, what is a confederation?

A.A group of BGP peers signed by a certificate

B.Dividing a large AS into sub-ASes (Member-ASes) that appear as a single AS to external peers

C.A routing encryption scheme

D.A fast-hello extension

Explanation: BGP confederations divide a large AS into Member-ASes. Inside a confederation, Member-ASes run eBGP among each other (with full mesh or RRs per Member-AS). Externally, the entire confederation is seen as a single AS. An alternative to route reflectors for scaling iBGP.

5What does BGP flowspec (RFC 5575) enable?

A.Fast BGP convergence

B.Programmable flow-based actions (drop, rate-limit, redirect) distributed via BGP — often used for DDoS mitigation

C.Encryption

D.Faster SPF

Explanation: BGP flowspec lets operators program fine-grained traffic filters (5-tuple match + action) across routers by advertising them via BGP NLRI. Commonly used for DDoS mitigation — advertise a 'drop' for the attacking 5-tuple and propagate it to the edge within seconds.

6What is the difference between symmetric and asymmetric IRB routing in EVPN?

A.Symmetric routes on both ingress and egress VTEPs using a dedicated L3VNI; asymmetric routes only at the ingress VTEP

B.No difference

C.Asymmetric is encrypted

D.Symmetric uses STP

Explanation: In symmetric IRB, ingress VTEP routes from source SVI into the L3VNI; egress VTEP routes from L3VNI into destination SVI. Both VTEPs perform a route lookup — 'symmetric'. Asymmetric: ingress VTEP routes to destination L2VNI directly, egress bridges. Symmetric is preferred for scale.

7What mechanism does EVPN use to signal that a MAC has moved?

A.Manual refresh

B.MAC Mobility Extended Community with incrementing sequence number

C.STP reconvergence

D.ARP flushing

Explanation: When a VTEP learns a MAC that is also known via EVPN from another VTEP, it generates a Type 2 route with a higher MAC Mobility sequence number. Other VTEPs accept the new advertisement and withdraw the old entry. This enables clean live workload migration across racks or sites.

8Which Arista automation tool generates topology-driven EVPN configs from YAML data models?

A.AVD (Arista Validated Designs)

B.Wireshark

C.Nornir

D.Cisco NSO

Explanation: AVD (Arista Validated Designs) is an Ansible collection that takes a YAML data model (fabric topology, VLANs, VRFs, etc.) and generates production-ready EVPN/VXLAN configs for all switches in the fabric. It enforces Arista's validated design patterns and is the de facto source of truth for many large deployments.

9Which feature on CVP provides drift detection between running configuration and intended config?

A.Compliance engine (configlet compliance)

B.Packet capture

C.Telnet

D.Syslog

Explanation: CVP's compliance engine continuously compares running-config on managed devices against the intended configlets. Drift (out-of-compliance) triggers alerts and can be automatically or manually remediated by re-applying the configlet via change-control workflow.

10What is the purpose of NetDL in CloudVision?

A.Network Data Lake — stores streaming telemetry at scale with time-series and event semantics

B.A BGP extension

C.An ACL

D.A specific chipset

Explanation: NetDL (Network Data Lake) is CloudVision's data platform — it ingests telemetry (from TerminAttr) for thousands of devices, stores time-series and events with retention policies, and powers dashboards, search, compliance, and ML-based analysis like anomaly detection.

About the ACE-Professional Exam

The Arista Certified Engineer — Professional (ACE-P) exam validates advanced Arista mastery within a learning track. It covers EVPN multi-site designs (Border Gateways, route re-origination, BUM localization), advanced BGP (route-reflector clusters, confederations, flowspec), symmetric/asymmetric IRB, ESI multihoming (Types A/S/P), network automation (arista.eos Ansible + AVD, Terraform, eAPI/pyeapi, EOS SDK), CloudVision Portal (compliance, change control, image management), TerminAttr/gNMI telemetry, Segment Routing (SR-MPLS/SRv6) basics, MACsec, 400G optics, and observability with LANZ.

Questions

75 scored questions

Time Limit

120 minutes

Passing Score

70%

Exam Fee

$350 (Arista Networks / Pearson VUE)

ACE-Professional Exam Content Outline

25%

EVPN Multi-Site & Advanced EVPN

Border Gateways, route re-origination, BUM localization, ESI multihoming (Type A/S/P), Type 4 DF election, Type 1 mass-withdraw, SoO (Site-of-Origin)

20%

Advanced BGP

Route-reflector clusters, confederations, flowspec, BFD tuning, graceful restart, listen-range, remove-private-as, graceful-shutdown community

20%

Network Automation

AVD (Arista Validated Designs), Ansible arista.eos collection, Terraform arista/aos, eAPI + pyeapi, EOS SDK daemons, ANTA test automation

15%

CloudVision Portal

CVP compliance engine, change-control workflow, image management, configlets, Studios (intent), event correlation, topology view

10%

Telemetry & Observability

TerminAttr, gNMI/OpenConfig, sFlow/IPFIX, LANZ microburst events, ERSPAN, DOM optical telemetry streaming

10%

Security & DCI

MACsec (802.1AE), CoPP (Control Plane Policing), uRPF, secure boot, EVPN over MPLS/GRE for DCI, MACsec key management

How to Pass the ACE-Professional Exam

What You Need to Know

Passing score: 70%
Exam length: 75 questions
Time limit: 120 minutes
Exam fee: $350

Keys to Passing

Complete 500+ practice questions
Score 80%+ consistently before scheduling
Focus on highest-weighted sections
Use our AI tutor for tough concepts

ACE-Professional Study Tips from Top Performers

1Master EVPN multi-site: Border Gateways, RT re-write, BUM localization, SoO, and anycast BGW IPs — scenario questions love this

2Build an AVD-driven fabric end-to-end — YAML → Ansible → CVP → ANTA validation — this is the reference deployment pattern

3Know CVP Change Control workflow inside-out: pre-check → snapshot → apply → post-check → rollback

4Understand ESI multihoming Types A/S/P and when each is appropriate — very common scenario questions

5Practice 'debug bgp l2vpn evpn' and tracing Type 2/5 route flow across a multi-site fabric

6Know MACsec basics (802.1AE, MKA key management) — appears in DCI and campus scenarios

7Use ANTA (Arista Network Test Automation) in your home lab — even one day with it shows up in exam questions

Frequently Asked Questions

What is the Arista ACE-Professional (ACE-P) exam?

The ACE-P is Arista's advanced, track-mastery certification. In the enhanced program, passing both the Operations and Engineering Specialist sub-tracks automatically earns the Professional credential. The ACE-P exam validates deep design and operational knowledge within a learning track.

How many questions are on the ACE-P exam?

The ACE-P exam has approximately 75 questions in 120 minutes with a 70% passing score. Expect scenario-based questions testing design judgment across EVPN multi-site, automation, CloudVision operations, and advanced troubleshooting — not just factual recall.

How is ACE-P earned in the 2026 Enhanced Program?

In the Enhanced Certification Program (launched June 2025), the Professional credential is earned automatically when a candidate passes both Specialist sub-track exams (Operations AND Engineering) within the same track. Some candidates may also sit a dedicated Professional exam depending on track.

How hard is the ACE-P exam?

ACE-P is notably harder than Specialist — pass rates drop to the 60-75% range for well-prepared candidates. Questions test design judgment, not just facts. Expect multi-site EVPN scenarios, automation workflow questions, and operational trade-off decisions.

How long is the ACE-Professional certification valid?

Arista ACE certifications are valid for 3 years. Recertification is achieved by passing a current ACE exam at Professional or Expert tier. Maintaining Professional status automatically maintains the underlying Associate and Specialist credentials for that track.

How should I prepare for the ACE-P exam?

Plan 80-120 hours of study. Deep-dive the Arista Academy track modules at Professional level. Lab extensively with AVD generating EVPN multi-site fabrics. Practice Ansible, Terraform, and pyeapi workflows. Complete 150+ practice questions; aim for 85%+ on mocks before scheduling.