Objective 100.015% of exam

Architecture

350-401 Practice Questions

Architecture covers enterprise design principles for the 350-401 ENCOR exam. It tests SD-WAN, SD-Access, underlay/overlay separation, OSPF area types, QoS queuing, and high-availability mechanisms. Questions present deployment scenarios and ask you to choose the correct protocol behavior, feature, or design consideration.

Full Practice Test →All Objectives

What this objective tests

350-401 Architecture — Key Topics

You must design and verify enterprise architectures using SD-WAN, SD-Access, OSPF area types, and QoS. The most important thing is to know how each technology segments, routes, and prioritizes traffic in a given scenario.

Cisco SD-WAN segmentation using VPNs and VRF-aware routing for guest, employee, and IoT traffic
SD-Access underlay requirements: IP reachability, MTU, and routing protocol consistency
OSPF LSA types in totally stubby areas (Type 1, Type 2, Type 3 only)
QoS low-latency queuing (LLQ) for strict priority of voice traffic on outbound interfaces

Common exam traps

Where candidates lose marks on Architecture

⚠Assuming a totally stubby area still allows Type 4 or Type 5 LSAs; it blocks them and uses a default route instead.
⚠Confusing SD-WAN VPN segmentation with traditional VRF-lite; SD-WAN uses VPN IDs and BFD across overlays.
⚠Believing SD-Access underlay requires a specific routing protocol like IS-IS, when any IP-routed underlay works.

350-401 Architecture — Practice Questions

30 questions from this objective · 15% of your 350-401 exam

Question 2mediummultiple choice

Review the full routing breakdown →

A network engineer is designing a campus network with high availability for critical services. Which Cisco technology enables traffic to be forwarded to an alternate next hop in the event of a first-hop router failure, without requiring any configuration changes on the hosts?

Question 3mediummulti select

Full question →

Which TWO characteristics are true about Cisco StackWise virtual technology? (Choose two.)

Question 4mediumdrag order

Open the full STP breakdown →

Drag and drop the steps for the Spanning Tree Protocol (STP) convergence process in the correct order.

Drag or tap steps into the slots.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 5mediummatching

Review the full routing breakdown →

Match each routing protocol to its administrative distance.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

110

120

115

Question 6mediummultiple choice

Architecture

350-401 Architecture — Key Topics

Where candidates lose marks on Architecture

350-401 Architecture — Practice Questions

A network engineer is designing a campus network with high availability for critical services. Which Cisco technology enables traffic to be forwarded to an alternate next hop in the event of a first-hop router failure, without requiring any configuration changes on the hosts?

Which TWO characteristics are true about Cisco StackWise virtual technology? (Choose two.)

Drag and drop the steps for the Spanning Tree Protocol (STP) convergence process in the correct order.

Match each routing protocol to its administrative distance.

A network engineer is designing a Cisco SD-WAN solution for a company with multiple branches. The engineer must ensure that the SD-WAN fabric provides secure, scalable connectivity and application-aware routing. Which two components are part of the Cisco SD-WAN architecture? (Choose two.)

A network engineer is deploying Cisco SD-Access and needs to understand the roles of fabric nodes. Which two node types are responsible for connecting external networks to the fabric? (Choose two.)

A network engineer is deploying Cisco SD-Access and needs to ensure that the fabric supports both wired and wireless clients with consistent policy enforcement. Which two components are required to achieve this integration? (Choose two.)

A network engineer is designing a high-availability solution for a data center. The requirement is to provide loop-free Layer 2 multipathing with active-active forwarding and no Spanning Tree Protocol blocking. Which technology should be used?

A network engineer is deploying Cisco SD-Access and needs to ensure that endpoints in the same virtual network can communicate with each other even when they are attached to different fabric edge nodes. Which component is responsible for this?

A network administrator is configuring a new Cisco Catalyst switch and needs to ensure that the management VLAN is configured with an IP address and is reachable from a remote subnet. Which command should be used to assign an IP address to the management VLAN interface?

A network engineer is configuring a Cisco IOS router to act as a DHCP server for a branch subnet. The requirement is to exclude a range of addresses that are statically assigned to printers and servers. Which command should the engineer use inside the DHCP pool configuration?

A network administrator is configuring a new Cisco Catalyst 9000 switch for a branch office. The administrator wants to ensure that the switch can be managed remotely via SSH and that only secure protocols are used for management. Which configuration step is necessary to enable SSH access?

A network architect is designing a campus network using Cisco StackWise Virtual technology. The design requires that the two switches appear as a single logical entity to the access layer and that traffic is forwarded efficiently. Which statement is true about StackWise Virtual?

A network engineer is designing a Cisco SD-Access fabric and needs to ensure that the underlay network supports the overlay. Which two statements are correct about the underlay network in Cisco SD-Access? (Choose two.)

A network engineer is evaluating Cisco StackWise Virtual technology for a new data center access switch pair. The engineer needs to understand which statements are true about this technology. (Choose two.)

A network architect is evaluating Cisco SD-Access for a new campus fabric deployment. The architect must explain the roles of the fabric border node and the fabric control plane node to the operations team. Which two statements correctly describe these roles? (Choose two.)

A network architect is evaluating Cisco SD-Access for a campus network. The architect must ensure that the fabric provides segmentation and policy enforcement for IoT devices, guests, and employees. Which two components are responsible for these functions? (Choose two.)

All 350-401 Objectives

Architecture

350-401 Architecture — Key Topics

Where candidates lose marks on Architecture

350-401 Architecture — Practice Questions

A network engineer is designing a campus network with high availability for critical services. Which Cisco technology enables traffic to be forwarded to an alternate next hop in the event of a first-hop router failure, without requiring any configuration changes on the hosts?

Which TWO characteristics are true about Cisco StackWise virtual technology? (Choose two.)

Drag and drop the steps for the Spanning Tree Protocol (STP) convergence process in the correct order.

Match each routing protocol to its administrative distance.

A network engineer is designing a Cisco SD-WAN solution for a company with multiple branches. The engineer must ensure that the SD-WAN fabric provides secure, scalable connectivity and application-aware routing. Which two components are part of the Cisco SD-WAN architecture? (Choose two.)

A network engineer is deploying Cisco SD-Access and needs to understand the roles of fabric nodes. Which two node types are responsible for connecting external networks to the fabric? (Choose two.)

A network engineer is deploying Cisco SD-Access and needs to ensure that the fabric supports both wired and wireless clients with consistent policy enforcement. Which two components are required to achieve this integration? (Choose two.)

A network engineer is designing a high-availability solution for a data center. The requirement is to provide loop-free Layer 2 multipathing with active-active forwarding and no Spanning Tree Protocol blocking. Which technology should be used?

A network engineer is deploying Cisco SD-Access and needs to ensure that endpoints in the same virtual network can communicate with each other even when they are attached to different fabric edge nodes. Which component is responsible for this?

A network administrator is configuring a new Cisco Catalyst switch and needs to ensure that the management VLAN is configured with an IP address and is reachable from a remote subnet. Which command should be used to assign an IP address to the management VLAN interface?

A network engineer is configuring a Cisco IOS router to act as a DHCP server for a branch subnet. The requirement is to exclude a range of addresses that are statically assigned to printers and servers. Which command should the engineer use inside the DHCP pool configuration?

A network administrator is configuring a new Cisco Catalyst 9000 switch for a branch office. The administrator wants to ensure that the switch can be managed remotely via SSH and that only secure protocols are used for management. Which configuration step is necessary to enable SSH access?

A network architect is designing a campus network using Cisco StackWise Virtual technology. The design requires that the two switches appear as a single logical entity to the access layer and that traffic is forwarded efficiently. Which statement is true about StackWise Virtual?

A network engineer is designing a Cisco SD-Access fabric and needs to ensure that the underlay network supports the overlay. Which two statements are correct about the underlay network in Cisco SD-Access? (Choose two.)

A network engineer is evaluating Cisco StackWise Virtual technology for a new data center access switch pair. The engineer needs to understand which statements are true about this technology. (Choose two.)

A network architect is evaluating Cisco SD-Access for a new campus fabric deployment. The architect must explain the roles of the fabric border node and the fabric control plane node to the operations team. Which two statements correctly describe these roles? (Choose two.)

A network architect is evaluating Cisco SD-Access for a campus network. The architect must ensure that the fabric provides segmentation and policy enforcement for IoT devices, guests, and employees. Which two components are responsible for these functions? (Choose two.)

All 350-401 Objectives