20+ practice questions focused on Infrastructure — one of the most tested topics on the ENCOR 350-401 exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Infrastructure PracticeAn engineer is troubleshooting a BGP routing issue. The router is not receiving routes from an eBGP neighbor. The neighbor is reachable via ping. The BGP session is established and in the Established state. What is the most likely cause?
Explanation: The BGP session is established, which confirms that the TCP connection and BGP open messages have been successfully exchanged. However, routes are not being received. The most common cause in this scenario is that the next-hop IP address for the advertised routes is not reachable via the router's routing table. eBGP by default sets the next-hop to the IP address of the neighbor's interface, and if that address is not reachable (e.g., missing route, incorrect static route, or interface down), the router will not install the routes into the BGP table or the routing table.
A network administrator needs to allow SSH access to a router from the management network 192.168.1.0/24. Which configuration should be applied?
Explanation: A standard ACL applied to the vty lines is the proper method to restrict SSH access to a router from a specific source network. Standard ACLs filter based on source IP address, and when applied to the vty lines with the 'access-class' command, they control which management hosts can initiate inbound SSH sessions to the router.
Which TWO actions are valid for configuring 802.1Q trunking on a Cisco switch? (Choose two.)
Explanation: 'switchport mode dynamic auto', is valid because it enables DTP negotiation to establish an 802.1Q trunk when the remote switch is configured as desirable or trunk. Option E, 'switchport trunk encapsulation dot1q', explicitly sets the trunking encapsulation to 802.1Q, directly configuring 802.1Q trunking. Option B, 'switchport mode trunk', is incorrect because it enables trunking but does not guarantee 802.1Q encapsulation; on older switches it may default to ISL. Therefore, it is not a complete command for configuring 802.1Q trunking.
Which THREE conditions are required for OSPF routers to become fully adjacent? (Choose three.)
Explanation: For OSPF routers to become fully adjacent, three key conditions must be met: (1) same area ID, because the area defines the link-state database scope; (2) matching hello and dead intervals, as these control the neighbor discovery and failure detection; (3) different router IDs, because router IDs must be unique on the network for proper LSA identification. Matching authentication is required only if authentication is configured, so it is not a universally required condition. The same subnet mask is not required; routers on the same segment need only the same network number.
Which TWO methods can be used to prevent unauthorized access to the privileged EXEC mode on a Cisco router? (Choose two.)
Explanation: The privileged EXEC mode (enable mode) is protected by either the `enable password` or `enable secret` command. The `enable secret` command uses a stronger MD5-based hash (or SHA-256 in newer IOS versions) to store the password, making it the recommended method. Both commands restrict access to privileged EXEC mode by requiring a password before executing `enable`.
+15 more Infrastructure questions available
Practice all Infrastructure questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Infrastructure. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Infrastructure questions on the 350-401 frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Infrastructure is tested as part of the ENCOR 350-401 blueprint. Practicing with targeted Infrastructure questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free 350-401 practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Infrastructure is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Infrastructure practice session with instant scoring and detailed explanations.
Start Infrastructure Practice →