What is downstream suppression?

You are designing a NAC OOB Layer 3 Real-IP Gateway deployment for a customer. Which VLAN must be trunked back to the Clean Access Server from the access switch?

Service provider XYZ plans to provide dedicated Internet access and MPLS L3VPN services to business customers. XYZ has these design specifications:
- MP-BGP running on the core MPLS P routers with external Internet routes.
- The core network will include 16 Point of Presence IP POPs throughout the Asia-Pacific region.
- An additional nine non-P routers will use EBGP peering with multiple providers for Internet traffic.
- An additional 50 PE routers will provide end customers with dedicated Internet access and L3VPN services throughout the Asia-Pacific region.
In what two ways can the MP-BGP be removed from the MPLS P core routers and still provide dedicated Internet access and MPLS L3VPN services? (Choose two.)

Refer to the exhibit.
Why is a route leaking mechanism needed in this large, unified MPLS network with end-to- end BGP labeled prefixes and IS-IS multilevel-areas as the IGP?

Refer to the exhibit.

A customer interconnected hundreds of branch offices into a single DMVPN network, with the HUB in the main data center. Due to security policies, the customer requires that the default route for all Internet traffic from the users at the branches must go through the tunnel and the only connections that are allowed to and from the branch router over the local internet circuit are the DMVPN tunnels. Which two combined actions must you take on the branch router to address these security requirements and keep the solution scalable? (Choose two)