Reference: https://www.oreilly.com/library/view/mpls-configuration-on/1587051990/1587051990_ch01lev1sec6.html

Special Outgoing Label Types
LSRs perform the operation of label swapping, imposition, or disposition depending on their location in the MPLS domain. In certain cases, the incoming label maps to special outgoing labels that define the operation to be performed at the upstream LSR or router. These labels are propagated by the downstream LSR during label distribution to the upstream LSR. The following outlines the types of outgoing labels that can be associated with a packet:

• Untagged— The incoming MPLS packet is converted to an IP packet and forwarded to the destination (MPLS to IP Domain transition). This is used in the implementation of MPLS VPN (discussed in Chapter 3).
  
• Implicit-null or POP label— This label is assigned when the top label of ...
  

Question: What is the function of the endpoint of a network? 

Answer should be: Allows a user to record data and transmit to a file server

The correct answer it not available to choose.  The correct answer should be "120 on R3 E0/1".  Explanation of configuring delay values can be found here: 

https://www.cisco.com/c/en/us/support/do...-893029462

AR143 Incorrect. 
How is an IPv4 access list going to affect telnet to an IPv6 address?
IPv6 unicast routing is not enabled by default and IPv6 access-list INGRESS is blocking IPv6 packets.  You would need both for IPv6 address autoconfig to work. Therefore you need to assign an IPv6 address on GigabitEthernet0/0.

AR163 Incorrect. 
If an interface is not explicitly assigned to an interface, it will be assigned to the default VRF by default (which is equivalent to the global routing table).  
Quoted from the below source: "A one-to-one relationship does not necessarily exist between customer sites and VPNs. A site can be a member of multiple VPNs. However, a site can associate with only one VRF."
Reference: 
https://www.cisco.com/c/en/us/td/docs/io...ls-vpn.pdf

AR550 appears to be incorrect. With standard access-lists, you can only have source addresses.  So “access-list 1 permit any any” does not work and tries to resolve the second "any" through DNS. This leaves only one other possible correct answer.  If this conclusion is wrong then please explain.  

The answer is incorrect. 

The Correct answer should be:  "It was obtained directly from the next-hop server."

Here for Reference:
https://www.cisco.com/c/en/us/td/docs/io...-nhrp.html

Flag             Description
authoritative: The mapping was obtained directly from the next-hop router or server.
implicit: The mapping was obtained from an NHRP resolution request or packet.
local: The mapping is for networks that are local to the router.
nat: The remote device supports NHRP Network Address Translation (NAT) extensions.
negative: A mapping could not be obtained for negative caching.
(no socket): IP Security (IPSec) will not set up encryption, because data traffic does not require this tunnel.
registered: The mapping was created in response to an NHRP registration.
router: The mappings for a remote router are marked with the router flag.
unique: The mapping cannot be overwritten by a different NBMA entry with the same IP address.
used: Data packets are being process-switched for the given mapping.

The given Answer is wrong. 

The correct answer should be LDP uses SSO to recover from disruption in control plane service.

"Multiprotocol Label Switching (MPLS) Label Distribution Protocol (LDP) uses SSO, NSF, and graceful restart to allow a Route Processor (RP) to recover from disruption in control plane service (specifically, the LDP component) without losing its MPLS forwarding state."

https://www.cisco.com/c/en/us/td/docs/io...sfsso.html

The given Answer is wrong. It deny the route with tag 200 but this is the route R1 have to redistribute. The correct answer should be: 

R1(config)#route-map CCNP permit 10
R1(config-route-map)#match tag 200
R1(config-route-map)#exit
R1(config)#router ospf 10
R1(config-router)#redistribute eigrp 100 subnets route-map CCNP

Here the route with the tag 200 is the only one which will be redistributed. This will advertise the correct subnet.

EC302 has a bug in the question. The answer is marked incorrect. Even the answer that How2pass gives is barked incorrect.