Career upgrade: Learn practical AI skills for better jobs and higher pay.
Level up
All Practice Exams

100+ Free Cisco SPVI 300-515 Practice Questions

Pass your Implementing Cisco Service Provider VPN Services (SPVI 300-515 v1.1) exam on the first try — instant access, no signup required.

✓ No registration✓ No credit card✓ No hidden fees✓ Start practicing immediately
Not publicly published Pass Rate
100+ Questions
100% Free
1 / 100
Question 1
Score: 0/0

An RR in the SP core peers VPNv4 with all PEs but is not on the data path. PE1 to PE2 forwarding fails after RR is rebooted. What is the most likely cause?

A
B
C
D
to track
2026 Statistics

Key Facts: Cisco SPVI 300-515 Exam

90 min

Exam Length

Cisco 300-515 exam page

$300

Exam Fee (USD)

Cisco / Pearson VUE

35%

Largest Domain

Layer 3 VPNs

4

Official Domains

SPVI v1.1 blueprint

3 years

Certification Valid

Cisco recertification policy

Pearson VUE

Test Provider

Cisco delivery partner

SPVI 300-515 v1.1 is a 90-minute, 55-65 question exam, costs US$300, and is delivered by Pearson VUE. The official blueprint splits content into four domains: VPN Architecture (25%), Layer 2 VPNs (30%), Layer 3 VPNs (35%), and IPv6 VPNs (10%). Passing 300-515 earns the Cisco Certified Specialist - Service Provider VPN Services Implementation badge and satisfies the concentration requirement for CCNP Service Provider when paired with the SPCOR 350-501 core. Cisco professional-level certifications are valid for three years.

Sample Cisco SPVI 300-515 Practice Questions

Try these sample questions to test your Cisco SPVI 300-515 exam readiness. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1Which statement best distinguishes a Layer 2 VPN from a Layer 3 VPN on a service provider network?
A.L2VPN forwards customer IP packets using VRF route lookups, while L3VPN forwards Ethernet frames transparently
B.L2VPN transports customer Ethernet frames transparently, while L3VPN performs IP routing for the customer using a per-customer VRF on the PE
C.L2VPN always uses MP-BGP signaling, while L3VPN always uses LDP signaling
D.L3VPN uses pseudowires between PEs, while L2VPN uses VPNv4 prefixes between PEs
Explanation: An L2VPN extends a Layer 2 service (Ethernet, ATM, FR, PPP, HDLC) across the SP core by tunneling frames over MPLS pseudowires or EVPN; the PE never routes the customer IP. An L3VPN places the customer in a VRF on the PE, runs PE-CE routing, and exchanges customer prefixes between PEs as VPNv4/VPNv6 routes via MP-BGP. The PE participates in customer routing for L3VPN but is transparent for L2VPN.
2In an Inter-AS L3VPN deployment, which statement best describes the difference between Intra-AS and Inter-AS designs?
A.Intra-AS keeps PEs and the MPLS core inside one Autonomous System; Inter-AS interconnects VPN customers across multiple Autonomous Systems through ASBRs
B.Intra-AS uses VPNv4 BGP and Inter-AS uses only VPNv6
C.Intra-AS requires Option B; Inter-AS requires Option A
D.Intra-AS does not use MP-BGP, while Inter-AS uses MP-BGP only on PEs
Explanation: Intra-AS L3VPN means every PE that imports/exports a given VRF lives in one AS with one IGP and one set of RRs. Inter-AS L3VPN extends customer VPNs between providers (or between AS regions of the same provider); the ASBRs at each AS edge exchange VPN routes using one of the four well-known options (A, B, AB, C).
3A new L3VPN customer cannot reach remote sites and the operator suspects an underlay problem. Which two underlay components must be working before any VPN traffic can flow end-to-end? (Choose two.)
A.Core IGP reachability between every PE loopback
B.MP-BGP VPNv4 sessions between PEs
C.An end-to-end LSP (LDP or SR) between ingress and egress PE loopbacks
D.EVPN Type-2 routes for each customer prefix
Explanation: Without core IGP reachability between PE loopbacks, BGP sessions never form and recursive next hops never resolve. Without an LSP between PE loopbacks, MPLS forwarding fails at the ingress PE and traffic is dropped — the VPN label by itself cannot move the packet through P routers. MP-BGP VPNv4 and EVPN are overlay constructs that depend on a working underlay.
4On Cisco IOS XR, which construct defines the Layer 2 attachment point for an EVC-style L2VPN service such as VPWS or EVPN?
A.Service Instance under interface
B.Ethernet Flowpoint (EFP) under l2transport sub-interface
C.Bridge-domain interface (BDI)
D.switchport mode trunk
Explanation: On IOS XR, an Ethernet Flowpoint (EFP) is configured as an l2transport sub-interface and matches one or more VLAN tags using encapsulation dot1q/dot1ad with optional rewrites. The EFP is the demarcation between the physical port and the L2VPN service (xconnect, bridge-domain, or EVPN AC). On IOS XE, the equivalent is the EVC service instance.
5Which IOS XE construct is functionally equivalent to an IOS XR Ethernet Flowpoint for matching dot1q-tagged frames into an L2VPN service?
A.MAC access-list
B.Service Instance with encapsulation dot1q under the main interface
C.Layer 3 sub-interface
D.Port-channel load-balance configuration
Explanation: On IOS XE the Ethernet Virtual Circuit (EVC) model uses a Service Instance under the physical interface with encapsulation dot1q/dot1ad and optional rewrite ingress tag commands. The Service Instance is then bound to xconnect (VPWS), bridge-domain (E-LAN), or an EVPN/BD instance. This is the IOS XE counterpart of the IOS XR EFP.
6In an L3VPN control plane, what is the role of the Route Distinguisher (RD)?
A.It identifies which VRF imports the prefix on the receiving PE
B.It is prepended to the IPv4 prefix to create a globally unique VPNv4 NLRI so MP-BGP can carry overlapping customer addresses
C.It is the MPLS label imposed at the ingress PE for VPN traffic
D.It selects the path used by traffic engineering
Explanation: An RD is a 64-bit value prepended to an IPv4 prefix to form a 96-bit VPNv4 NLRI (or to an IPv6 prefix to form a VPNv6 NLRI). RDs make customer prefixes unique within MP-BGP even when multiple customers reuse the same private addressing. RDs do not control import/export — that is the Route Target's job — and they are not labels.
7Which three formats are valid for an MPLS L3VPN Route Distinguisher? (Choose the correct list.)
A.Type 0: 2-byte ASN:32-bit number; Type 1: IPv4:16-bit number; Type 2: 4-byte ASN:16-bit number
B.Type 0: MAC:VLAN; Type 1: 4-byte ASN; Type 2: IP:label
C.Type 0: 4-byte ASN only; Type 1: 6-byte ESI; Type 2: 8-byte VNI
D.Only one format exists: 32-bit IP:32-bit number
Explanation: RFC 4364 defines three RD encodings. Type 0 uses a 2-byte ASN with a 4-byte assigned number. Type 1 uses a 4-byte IPv4 address with a 2-byte assigned number. Type 2 uses a 4-byte ASN with a 2-byte assigned number for 4-byte ASN deployments. All three are 8 bytes total and prepend the customer prefix to form the VPNv4 NLRI.
8Two customer sites are in VRFs with different RDs but matching import/export Route Targets. What is the result?
A.Routes are still exchanged because RT, not RD, controls import/export
B.Routes are not exchanged because the RDs do not match
C.Routes are exchanged only if the PEs share a Route Reflector
D.Routes are exchanged only if the PEs run iBGP IPv4 unicast
Explanation: RTs are extended communities attached to VPNv4 routes and they alone control import/export between VRFs. RDs make routes unique on the wire and never have to match between VRFs of the same customer. Many customer designs deliberately use a per-PE RD with shared RTs.
9Which BGP extended community type carries the L3VPN Route Target?
A.Standard community 0x0000
B.Extended community of type Route-Target (0x0002 / 0x0102 / 0x0202)
C.Large community only
D.Origin attribute
Explanation: Route Targets are encoded as transitive extended communities of subtype 0x02 with type 0x00 (2-byte AS), 0x01 (IPv4), or 0x02 (4-byte AS). The 8-byte extended community is attached to VPNv4/VPNv6 routes and read by every PE that has a matching import RT in any VRF. Standard communities and large communities cannot carry RTs.
10On the ingress PE in an L3VPN, what is the order of MPLS labels imposed on a customer packet?
A.VPN label (inner), Transport label (outer)
B.Transport label (inner), VPN label (outer)
C.Only a single VPN label is used
D.Only a single transport label is used
Explanation: The ingress PE pushes the VPN label first (inner, bottom of stack with S=1) so the egress PE can identify the destination VRF, then pushes the transport label (outer) used by the LDP/SR LSP across the core. P routers swap only the outer transport label; the inner VPN label is hidden until the egress PE pops PHP and reads the VPN label.

About the Cisco SPVI 300-515 Exam

The 300-515 SPVI exam validates knowledge of implementing service provider VPN services and is one of the concentration exams for the CCNP Service Provider certification. The official v1.1 blueprint focuses on VPN architecture (L2 vs L3, Intra-AS vs Inter-AS, MP-BGP control plane and data plane), Layer 2 VPNs (E-Line/E-LAN/E-Tree, EVPN concepts and multihoming, E-OAM, EVPN IRB/VPWS/native), Layer 3 VPNs (PE-CE routing, Intra-AS troubleshooting, multicast VPN, extranet/shared services, Inter-AS Options A/B/AB/C, CSC), and IPv6 VPNs (6PE and 6VPE) on Cisco IOS XR and IOS XE platforms.

Assessment

Approximately 55-65 multiple-choice, multi-select, drag-and-drop, simulation, and testlet items per Cisco; exact count varies by exam form.

Time Limit

90 minutes

Passing Score

Variable cut score; Cisco does not publish the exact passing percentage for 300-515.

Exam Fee

$300 USD (Cisco / Pearson VUE)

Cisco SPVI 300-515 Exam Content Outline

25%

VPN Architecture

Compare L2 vs L3 and Intra-AS vs Inter-AS VPN architecture; troubleshoot the underlay (core IGP, LSP); describe Layer 2 service architecture (IOS XR Ethernet Flowpoints and IOS XE EVCs); describe L3VPN control plane (MP-BGP, RD, VPNv4, RT, VPN label, VRF, PE-CE advertisement, additional paths, PIC, unified BGP/MPLS); describe L3VPN data plane (underlay label, VRF forwarding, VPNv6).

30%

Layer 2 VPNs

Troubleshoot L2VPN services (E-LAN/E-Line/E-Tree); describe EVPN concepts (data/control plane, multihoming, suppression, traffic forwarding, RSVP-TE/SR-TE with IS-IS/OSPF); implement Ethernet OAM (E-OAM, including CFM 802.1ag and ITU-T Y.1731); implement EVPN IRB, EVPN VPWS, and EVPN native.

35%

Layer 3 VPNs

Describe routing requirements (MP-BGP, PE-CE protocol options); troubleshoot Intra-AS L3VPN (PE-CE, PE-PE, PE-RR); implement multicast VPN (Intranet MVPN, Extranet MVPN, MLDP); implement extranet/shared services using RT import/export and RPL/route-maps; describe Inter-AS L3VPN Options A/B/AB/C; describe CSC (carrier supporting carrier) concepts.

10%

IPv6 VPNs

Describe routing requirements (MP-BGP for 6PE and 6VPE; PE-CE eBGP/OSPFv3/EIGRPv6/RIPng/static); troubleshoot IPv6 VPN PE issues including PE-PE label/transport problems and PE-CE IPv6 reachability.

How to Pass the Cisco SPVI 300-515 Exam

What You Need to Know

  • Passing score: Variable cut score; Cisco does not publish the exact passing percentage for 300-515.
  • Assessment: Approximately 55-65 multiple-choice, multi-select, drag-and-drop, simulation, and testlet items per Cisco; exact count varies by exam form.
  • Time limit: 90 minutes
  • Exam fee: $300 USD

Keys to Passing

  • Complete 500+ practice questions
  • Score 80%+ consistently before scheduling
  • Focus on highest-weighted sections
  • Use our AI tutor for tough concepts

Cisco SPVI 300-515 Study Tips from Top Performers

1Spend the most time on Layer 3 VPNs (35%) and Layer 2 VPNs (30%) — together they are 65% of the exam and reward depth on EVPN route types, MVPN profiles, and Inter-AS options.
2Memorize the EVPN BGP route types: Type 1 Ethernet AD (per-ES for mass-withdrawal, per-EVI for aliasing), Type 2 MAC/IP, Type 3 IMET, Type 4 ES route (DF election), Type 5 IP prefix.
3Build a small lab in CML or EVE-NG with at least two PEs, two P routers, and two ASBRs to practice Inter-AS Options A, B, AB, and C and to inspect labels with show mpls forwarding and show bgp vpnv4 unicast all labels.
4Drill the difference between 6PE and 6VPE: 6PE = global IPv6 over IPv4 MPLS with BGP IPv6 labeled-unicast, two-label stack, no VRFs; 6VPE = per-customer IPv6 VRFs over MPLS with VPNv6 (AFI 2 SAFI 128).
5Master MVPN profile semantics for at least Profile 0 (Rosen GRE PIM-SM), Profile 1 (Default/Data MDT with PIM-SSM), and one mLDP-based BGP-AD profile (e.g., Profile 14) — Cisco loves these distinctions.
6Know the L3VPN packet flow: ingress PE pushes VPN label (inner) then transport label (outer); P routers swap only the outer; egress PE uses the inner label to pick the VRF or directly forward.

Frequently Asked Questions

How many questions are on the SPVI 300-515 exam and how long is it?

The 300-515 SPVI is a 90-minute exam. Cisco does not publish a fixed question count, but the exam typically delivers around 55 to 65 questions including multiple-choice, multiple-select, drag-and-drop, simulation, and testlet items. Plan your pacing for under two minutes per item on average.

What is the passing score for SPVI 300-515?

Cisco uses a variable scaled cut score and does not publish the exact passing percentage for 300-515. Most CCNP-level exams have historically scaled to roughly 825 out of 1000, but the actual passing line per form is set by Cisco psychometrics and is not disclosed. Aim for a consistent 85% or higher on quality practice questions before testing.

What does the 300-515 exam cost and who delivers it?

The 300-515 SPVI exam costs US$300 plus applicable taxes. It is delivered by Pearson VUE either at a physical test center or through OnVUE online proctoring. You can register through the Cisco certification portal, which routes you to Pearson VUE for scheduling.

What domains are covered and how are they weighted?

The official SPVI v1.1 blueprint defines four domains: VPN Architecture (25%) covering L2/L3 and Intra/Inter-AS architecture, the L3VPN control and data planes (RD, RT, VPN label, VRF, MP-BGP), and underlay troubleshooting; Layer 2 VPNs (30%) covering E-Line/E-LAN/E-Tree, EVPN concepts and multihoming, E-OAM, and EVPN IRB/VPWS/native; Layer 3 VPNs (35%) covering PE-CE routing, Intra-AS troubleshooting, MVPN, extranet/shared services, Inter-AS Options A/B/AB/C, and CSC; and IPv6 VPNs (10%) covering 6PE and 6VPE.

Are there prerequisites for SPVI 300-515?

Cisco does not enforce formal prerequisites for 300-515, but recommends solid CCNA-level networking knowledge plus hands-on experience with Service Provider routing and MPLS. SPVI is a CCNP Service Provider concentration exam, so most candidates pair it with the SPCOR 350-501 core exam to earn the full CCNP Service Provider certification.

How does 300-515 fit into CCNP Service Provider?

Passing 300-515 alone earns the Cisco Certified Specialist - Service Provider VPN Services Implementation badge. To earn CCNP Service Provider, you must pass the SPCOR 350-501 core exam plus one concentration exam such as 300-510 SPRI, 300-515 SPVI, or 300-540 SPAUTO. SPVI focuses specifically on L2VPN, L3VPN, MVPN, Inter-AS, and IPv6 VPN services.

How long is the certification valid?

Cisco professional certifications are valid for three years from the date you pass. You can recertify by passing any current CCNP concentration or core exam, the CCIE written or lab, or by combining Continuing Education credits earned through approved Cisco activities.