Practice 350-401 Network Function Virtualization questions with full explanations on every answer.
Start practicing
Network Function Virtualization — choose a session length
Free · No account required
Click any question to see the full explanation and answer options, or start a focused practice session above.
A company is migrating its legacy firewall services to a virtualized environment using Cisco NFV. The network engineer deploys a virtual firewall (vFW) on an NFVIS-enabled UCS platform. After the deployment, traffic through the vFW is intermittent and performance monitoring shows high CPU usage on the host. Which action should the engineer take to improve performance?
2An enterprise is deploying a virtual router (vRouter) as part of its NFV infrastructure. The engineer needs to ensure that the vRouter can handle a sudden spike in traffic without dropping packets. The vRouter is running on a KVM hypervisor. What should the engineer configure to guarantee CPU resources for the vRouter during peak demand?
3A network engineer is deploying a virtual WAN edge device using Cisco SD-WAN on an NFVIS platform. After powering on the VM, the device fails to boot and the NFVIS console shows 'ERROR: No bootable device found'. The engineer verified that the ISO image is correctly uploaded. What is the most likely cause?
4An engineer is managing a Cisco NFVIS host running multiple virtual network functions (VNFs). The engineer needs to upgrade the NFVIS software to a new version that includes critical security patches. The upgrade process must minimize downtime. Which upgrade method should the engineer use?
5A company uses Cisco NFVIS to host a virtual ASA (vASA) and a virtual router (vRouter). The engineer notices that the vASA cannot communicate with the vRouter even though both are on the same NFVIS host. The vASA is connected to a bridge network, and the vRouter is connected to a different bridge. What should the engineer do to enable communication between the two VNFs?
6An engineer is deploying a virtual network function (VNF) on a Cisco NFVIS host. The VNF requires four virtual NICs, each connected to a different network segment. The engineer creates four bridges on NFVIS and attaches each vNIC to a separate bridge. After deployment, the VNF can only communicate on the first bridge. What is the most likely cause?
7A network engineer is troubleshooting a performance issue with a virtual firewall (vFW) running on a Cisco NFVIS host. The vFW is experiencing high packet loss during peak traffic. The engineer checks the NFVIS monitoring dashboard and sees that the vFW's CPU usage is low, but the host's memory usage is high. What is the most likely cause of the packet loss?
8An engineer is deploying a virtual router (vRouter) on a Cisco NFVIS host. The vRouter needs to advertise routes to a physical router connected to the host's management port. The engineer configures the vRouter with an IP address on the same subnet as the management port. However, the physical router does not receive any routing updates. What should the engineer do to enable route exchange?
9A company is deploying a virtual WAN optimizer (vWAAS) on a Cisco NFVIS host. The engineer needs to ensure that the vWAAS can intercept traffic between two VNFs running on the same host. The traffic currently flows directly between the VNFs without passing through the vWAAS. What should the engineer configure to redirect the traffic?
10A company is deploying a virtualized network function (VNF) on a KVM-based host. The VNF requires dedicated CPU cores and must avoid performance interference from other VMs. Which hypervisor configuration best meets these requirements?
11An architect is designing an SD-WAN deployment for a multinational enterprise. The design must ensure that control plane traffic remains separate from data plane traffic and that the solution can scale to thousands of sites. Which architectural component is responsible for maintaining the control plane and distributing routing information?
12A network team must design QoS for a campus network that carries voice, video, and data traffic. The design must use the DiffServ model and ensure that voice traffic is prioritized over all other traffic classes. Which DSCP marking and queuing strategy should be used for voice?
13An enterprise is migrating its data center to a leaf-spine architecture. The design must provide high availability and support for east-west traffic patterns. Which design choice best meets these requirements?
14A service provider wants to deploy a virtualized firewall as a VNF in a service chain. The VNF must be inserted transparently into the traffic path without requiring changes to the existing IP addressing. Which service chaining method should the architect choose?
15An architect is designing an SD-Access fabric for a large enterprise campus. The design must support segmentation based on user identity and device type, and must integrate with Cisco ISE. Which fabric component and protocol should be used to enforce micro-segmentation?
16A company is deploying a virtualized router (CSR1000v) on VMware vSphere. The VNF must support high throughput and low latency. Which vSphere configuration option should the architect select to optimize network performance?
17An architect is designing an SD-WAN policy to ensure that real-time video traffic from headquarters to branch offices is always sent over the most reliable transport, while all other traffic uses the least-cost path. Which type of policy should be used to achieve this?
18A network team must design a QoS policy for a WAN link that carries voice, video, and data. The policy must ensure that voice traffic is never dropped, even during congestion. Which queuing mechanism should be used for the voice class?
19Examine the following configuration snippet: interface GigabitEthernet0/1 ip address 192.168.1.1 255.255.255.0 ip ospf hello-interval 20 ip ospf dead-interval 80 What is the effect of this configuration?
20Consider the following configuration: router eigrp TEST network 10.0.0.0 0.255.255.255 metric weights 0 1 0 1 0 0 What is the effect of the 'metric weights' command?
21Given the following configuration: interface GigabitEthernet0/0 ip address 10.1.1.1 255.255.255.0 ip pim sparse-mode ip igmp version 3 What is the purpose of the 'ip igmp version 3' command?
22Examine this configuration: interface GigabitEthernet0/0 ip address 192.168.1.1 255.255.255.0 ipv6 address 2001:db8::1/64 ipv6 ospf 1 area 0 What is the effect of the 'ipv6 ospf 1 area 0' command?
23Consider the following BGP configuration: router bgp 65000 bgp router-id 1.1.1.1 neighbor 10.1.1.2 remote-as 65001 neighbor 10.1.1.2 route-map SET_MED out ! route-map SET_MED permit 10 set metric 50 What is the effect of this configuration?
24Given the following configuration: interface GigabitEthernet0/0 ip address 10.0.0.1 255.255.255.0 ip access-group 101 in ! access-list 101 permit tcp 192.168.1.0 0.0.0.255 any eq 80 access-list 101 deny ip any any What is the effect of this configuration?
25What is the default OSPF hello interval on an Ethernet link?
26Which BGP attribute is preferred with the lowest value?
27What is the maximum hop count for EIGRP?
28Drag and drop the steps of VNF life cycle management into the correct order, from first to last.
29Drag and drop the steps of VNF service chain instantiation into the correct order, from first to last.
30Drag and drop the steps of deploying a virtual router as a VNF into the correct order, from first to last.
31Drag and drop the steps of NFVI resource allocation and VNF instantiation into the correct order, from first to last.
32Drag and drop the steps of service function chaining (SFC) path setup into the correct order, from first to last.
33Drag and drop the steps of VNF scaling up and scaling out into the correct order, from first to last.
34Drag and drop the steps of NFV MANO (VNFM/NFVO/VIM) interaction flow into the correct order, from first to last.
35Drag and drop the steps of Cisco NSO service provisioning workflow into the correct order, from first to last.
36Drag and drop the steps of NFVI resource allocation and VNF instantiation into the correct order, from first to last.
37Drag and drop the steps of service function chaining (SFC) path setup into the correct order, from first to last.
38Drag and drop the steps of VNF scaling up and scaling out steps into the correct order, from first to last.
39Drag and drop the steps of NFV MANO (VNFM/NFVO/VIM) interaction flow into the correct order, from first to last.
40Drag and drop the steps of Cisco NSO service provisioning workflow into the correct order, from first to last.
41Drag and drop each NFV component on the left to its matching role on the right.
42Drag and drop each hypervisor type on the left to its matching characteristic on the right.
43Drag and drop each VNF category on the left to its matching example on the right.
44Drag and drop each NFV management layer on the left to its matching function on the right.
45Drag and drop each service chaining element on the left to its matching position in the chain on the right.
46Drag and drop each NFV component on the left to its matching role on the right.
47Drag and drop each hypervisor type on the left to its matching characteristic on the right.
48Drag and drop each VNF category on the left to its matching example on the right.
49Drag and drop each NFV management layer on the left to its matching function on the right.
50Drag and drop each service chaining element on the left to its matching position in a typical chain on the right.
51Which two statements about Network Function Virtualization (NFV) architecture are true? (Choose two.)
52Which three statements about NFV MANO (Management and Orchestration) are true? (Choose three.)
53Which two statements about NFV performance considerations are true? (Choose two.)
54Which three statements about NFV use cases and deployment models are true? (Choose three.)
55Which two statements about NFV architecture and components are true? (Choose two.)
56Which three statements about the benefits and challenges of NFV are true? (Choose three.)
57Which two statements about NFV MANO (Management and Orchestration) are true? (Choose two.)
58Which three statements about NFV and its relationship with SDN are true? (Choose three.)
The Network Function Virtualization domain covers the key concepts tested in this area of the 350-401 exam blueprint published by Cisco. Courseiva provides free domain-focused practice, mock exams, missed-question review, and readiness tracking across all 350-401 domains — no account required.
The Courseiva 350-401 question bank contains 58 questions in the Network Function Virtualization domain. Click any question to see the full explanation and answer breakdown.
Start with a 10-question focused session to identify your baseline accuracy in this domain. Read every explanation — even for questions you answer correctly — to understand the reasoning. Once you score consistently above 80%, move to a 20–30 question session to confirm depth before moving to the next domain.
Yes — the session launcher on this page draws questions exclusively from the Network Function Virtualization domain. Choose 10, 20, 30, or 50 questions for a focused session, or click individual questions to review them one by one.
Save your results, see per-domain analytics, and get readiness scores — free, for every certification.
Sign Up FreeFree forever · Every certification included