The Nokia 4A0-D03 exam validates your expertise in designing and deploying EVPN solutions on Nokia SR Linux platforms within data center environments. This certification, part of the Nokia Certified Data Center Fabric Network Expert path, demonstrates your ability to architect and troubleshoot modern Layer 2 and Layer 3 EVPN deployments. This page guides you through the exam structure, core topics, and practical preparation strategies to help you succeed. Whether you are advancing your data center networking skills or seeking formal recognition of your Nokia expertise, understanding the 4A0-D03 syllabus is the first step toward confident exam performance.
Use this topic map to guide your study for Nokia 4A0-D03 (Nokia SR Linux EVPN and Data Center Interconnect) within the Nokia Certified Data Center Fabric Network Expert path.
The 4A0-D03 exam combines knowledge-based and scenario-driven questions to assess both conceptual understanding and practical decision-making in real-world data center contexts.
Questions progress in difficulty, moving from foundational concepts to complex multi-site scenarios that reflect real-world data center interconnect challenges.
Effective preparation requires mapping exam topics to a structured weekly study plan, combining theory review with hands-on practice. Allocate time proportionally to each domain, prioritize weaker areas, and validate your readiness through timed practice tests before exam day.
Explore other Nokia certifications: view all Nokia exams.
Strengthen your preparation with up-to-date resources from validexamdumps.com. These materials align to 4A0-D03 and cover practical scenarios with clear explanations.
Visit the exam page to download the PDF, Online Practice Test, or get a bundle discount offer for both formats: Nokia SR Linux EVPN and Data Center Interconnect.
Layer 2 and Layer 3 EVPN multi-homing scenarios typically represent a significant portion of the exam, as they test both design understanding and troubleshooting capability in complex redundancy setups. EVPN on SR Linux fundamentals and L3 EVPN routing also receive substantial coverage, so balanced preparation across all four domains is essential rather than focusing on a single area.
In production deployments, you typically start with EVPN on SR Linux as the foundation, then layer on either Layer 2 EVPN for bridged services or L3 EVPN for routed services depending on tenant requirements. Multi-homing is then applied across both L2 and L3 services to provide redundancy and load balancing. Understanding this progression helps you see how exam topics relate to actual data center architecture decisions.
Hands-on experience significantly improves retention and confidence. Prioritize labs that cover basic EVPN instance configuration on SR Linux, then progress to multi-site Layer 2 and Layer 3 scenarios with failover testing. If access to hardware is limited, use Nokia's SR Linux containerized environment or simulator to practice command syntax, topology validation, and troubleshooting workflows.
Many candidates confuse designated forwarder election rules in multi-homing or misunderstand the interaction between EVPN route targets and inter-subnet routing in L3 scenarios. Others overlook the importance of split-horizon filtering in Layer 2 EVPN or fail to recognize when asymmetric IRB is required instead of symmetric IRB. Careful review of these distinctions during practice testing helps avoid these pitfalls.
In the final week, shift from learning new material to reinforcing weak areas identified in practice tests. Spend 30 minutes daily reviewing one topic block, then dedicate two full sessions to timed practice tests under exam conditions. On the day before the exam, do a light review of terminology and key configuration commands rather than attempting new practice questions, which can introduce doubt and fatigue.
When PEs are connected to an Ethernet segment with at least one active MAC-VRF, which of the following statements about the AD per EVI updates sent by a PE is FALSE?
Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:
Ethernet Auto-Discovery per EVI routes are EVPN route type 1 advertisements used in multi-homing at the service-instance level. A PE sends an AD per EVI route for each MAC-VRF associated with the Ethernet Segment. These routes allow remote PEs to understand that the advertising PE has reachability to a given EVI through the shared ES. They are also used for aliasing and fast convergence, because a remote PE can treat multiple attached PEs as valid paths for traffic toward the same multihomed segment. In VXLAN EVPN, the update can include data-plane information such as the VNI, and it carries route-target information so the route is imported into the correct MAC-VRF. Option B is false because the multi-homing type or redundancy mode is not carried in the AD per EVI update as stated. Redundancy behavior is associated with Ethernet Segment-level signaling and configuration, especially ES discovery and related route attributes, not with AD per EVI as the mechanism that declares the multi-homing type. Reference: EVPN RT-1 AD per EVI, MAC-VRF association, route target, VNI, aliasing.
Consider the exhibit.
Leaf-1 has received an ARP request from host-1 for host-2. Leaf-1 has added host-1's MAC address in its MAC table and host-1's MAC/IP addresses in its proxy-ARP table.
Which of the following steps is FALSE?
Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:
When Leaf-1 receives an ARP request from Host-1, it learns the source MAC address in the local MAC table and learns the source IP/MAC binding in the proxy ARP table. For EVPN distribution, the relevant control-plane advertisement is an EVPN route type 2 MAC/IP advertisement containing Host-1's MAC and the actual host IP address, 192.168.100.1. This allows remote PEs to populate their EVPN-derived forwarding and proxy ARP state with the correct endpoint binding. Option A is false because advertising the host MAC with the IP address set to 0.0.0.0 does not represent the learned MAC/IP binding required for proxy ARP synchronization. A MAC-only RT-2 advertisement may exist in EVPN contexts, but the question specifically states that Leaf-1 has learned the MAC/IP binding through ARP and is distributing that information. Therefore, the valid advertisement must include the real host IP address. Remote PEs use the MAC/IP route to learn the endpoint, not an all-zero IP placeholder for this proxy ARP learning event. Reference: EVPN RT-2 MAC/IP advertisement, proxy ARP table population, endpoint synchronization.
When configuring the EVPN MP-BGP route reflector sessions between the leaf and spine routers, which of the following statements is TRUE?
Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:
In SR Linux BGP configuration, parameters defined at a more specific hierarchy level can override broader protocol-level settings. Therefore, if a `local-as` value is configured within the BGP group used for EVPN MP-BGP route-reflector sessions, that value overrides the AS number configured directly under the BGP protocol for that group's sessions. Option A is correct. Option B is false because the cluster ID is configured on the route reflector, not on every participating client. The cluster ID identifies the RR cluster and helps prevent route-reflection loops. Option C is false because redundant route reflectors normally operate in parallel rather than as strict primary/backup devices; clients can peer with both for resilience. Option D is misleading because EVPN route reflectors are used to avoid a full mesh of overlay MP-BGP EVPN sessions between leaves, not to replace ordinary underlay eBGP leaf-spine routing sessions. In a clean fabric design, the underlay provides IP reachability, while the EVPN overlay uses MP-BGP sessions, often via route reflectors, to distribute tenant reachability. Reference: SR Linux BGP hierarchy, EVPN route reflector sessions, local-AS override, cluster ID behavior.
Consider the exhibit.
Which of the following statements about the configuration and operation of this setup is FALSE?
Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:
This scenario describes all-active Layer 2 EVPN multi-homing with a host connected through a LAG to Leaf1 and Leaf2. The LAG subinterface is associated with the MAC-VRF on both participating leaves, and the Ethernet Segment ES-1 is configured for all-active multi-homing. In all-active operation, both leaf routers can be active attachment points for host-originated traffic, and remote traffic can use EVPN multi-homing mechanisms to reach the segment. Option D is false because the host does not know or use the EVPN Designated Forwarder state when sending BUM traffic. The host forwards over its LAG based on its local LAG hashing and LACP behavior. DF election is an EVPN PE-side mechanism used mainly to control which PE forwards BUM traffic from the EVPN overlay toward the Ethernet Segment, preventing duplicate delivery to the multihomed access network. The host itself does not selectively forward all BUM traffic toward the DF. That distinction is critical: DF controls overlay-to-segment replication, while the host's LAG controls host-to-leaf link selection. Reference: all-active L2 EVPN multi-homing, host LAG behavior, DF election scope, BUM forwarding.
Which of the following statements about the decoupled gateway-based data center interconnect solution is TRUE?
Comprehensive and Detailed 150 to 250 words of Explanation From [SR Linux EVPN and Data Center Interconnect/Course Guide/topics]:
A decoupled gateway-based DCI model separates the data center border-leaf function from the WAN PE function. This separation is the key design point. The border leaf remains part of the data center EVPN/VXLAN environment, while the WAN PE participates in WAN VPN transport and policy enforcement. Because the roles are split across two devices, the handoff between the border leaf and WAN PE provides a clean administrative and operational boundary. That boundary is useful for security policy, QoS marking, traffic classification, and troubleshooting ownership. The WAN does not need direct reachability to every leaf and route reflector as in a gateway-less model. The WAN PE also does not peer directly with the data center route reflector in a decoupled model; route exchange occurs through the border-leaf/WAN-PE handoff. VXLAN tunnels between leaf routers across different data centers are characteristic of gateway-less extension, not decoupled gateway operation. Therefore, the statement about clear demarcation between the data center border leaf and WAN PE is the accurate description. Reference: decoupled gateway-based DCI, security/QoS demarcation, WAN PE separation.
