In the initial configuration both class-maps are calling the same access-list.  Thus with first in/first out rule all traffic matching acl 100 is policed by CM_ROUTING  at 1Mbps and traffic matching acl 100 never gets to see Class-map CM-MGMT.  We need to delete acl 100 and recreate with just the BGP and OSPF lines. We also need to create acl 101 to permit Telnet and SSH

Afterwards, we need to remove the "match access-group 100" from class-map CM-MGMT and add "match access-group 101" 

Now class-map CM-MGMT is policing telnet and ssh at 500 kbps while CM-ROUTING is only policing BGP and OSPF at 1Mbps.

You also need to change the service policy from "output" to "input".

Thank you for your consideration,

yardbyrd

We will be adding many new questions to the ENCOR product in the coming days. Explanations will be added later. Thank you for your patience.

Reference: https://www.oreilly.com/library/view/mpls-configuration-on/1587051990/1587051990_ch01lev1sec6.html

Special Outgoing Label Types
LSRs perform the operation of label swapping, imposition, or disposition depending on their location in the MPLS domain. In certain cases, the incoming label maps to special outgoing labels that define the operation to be performed at the upstream LSR or router. These labels are propagated by the downstream LSR during label distribution to the upstream LSR. The following outlines the types of outgoing labels that can be associated with a packet:

• Untagged— The incoming MPLS packet is converted to an IP packet and forwarded to the destination (MPLS to IP Domain transition). This is used in the implementation of MPLS VPN (discussed in Chapter 3).
  
• Implicit-null or POP label— This label is assigned when the top label of ...
  

Question: What is the function of the endpoint of a network? 

Answer should be: Allows a user to record data and transmit to a file server

The correct answer it not available to choose.  The correct answer should be "120 on R3 E0/1".  Explanation of configuring delay values can be found here: 

https://www.cisco.com/c/en/us/support/do...-893029462

AR143 Incorrect. 
How is an IPv4 access list going to affect telnet to an IPv6 address?
IPv6 unicast routing is not enabled by default and IPv6 access-list INGRESS is blocking IPv6 packets.  You would need both for IPv6 address autoconfig to work. Therefore you need to assign an IPv6 address on GigabitEthernet0/0.

AR163 Incorrect. 
If an interface is not explicitly assigned to an interface, it will be assigned to the default VRF by default (which is equivalent to the global routing table).  
Quoted from the below source: "A one-to-one relationship does not necessarily exist between customer sites and VPNs. A site can be a member of multiple VPNs. However, a site can associate with only one VRF."
Reference: 
https://www.cisco.com/c/en/us/td/docs/io...ls-vpn.pdf

AR550 appears to be incorrect. With standard access-lists, you can only have source addresses.  So “access-list 1 permit any any” does not work and tries to resolve the second "any" through DNS. This leaves only one other possible correct answer.  If this conclusion is wrong then please explain.  

The answer is incorrect. 

The Correct answer should be:  "It was obtained directly from the next-hop server."

Here for Reference:
https://www.cisco.com/c/en/us/td/docs/io...-nhrp.html

Flag             Description
authoritative: The mapping was obtained directly from the next-hop router or server.
implicit: The mapping was obtained from an NHRP resolution request or packet.
local: The mapping is for networks that are local to the router.
nat: The remote device supports NHRP Network Address Translation (NAT) extensions.
negative: A mapping could not be obtained for negative caching.
(no socket): IP Security (IPSec) will not set up encryption, because data traffic does not require this tunnel.
registered: The mapping was created in response to an NHRP registration.
router: The mappings for a remote router are marked with the router flag.
unique: The mapping cannot be overwritten by a different NBMA entry with the same IP address.
used: Data packets are being process-switched for the given mapping.

The given Answer is wrong. 

The correct answer should be LDP uses SSO to recover from disruption in control plane service.

"Multiprotocol Label Switching (MPLS) Label Distribution Protocol (LDP) uses SSO, NSF, and graceful restart to allow a Route Processor (RP) to recover from disruption in control plane service (specifically, the LDP component) without losing its MPLS forwarding state."

https://www.cisco.com/c/en/us/td/docs/io...sfsso.html