Official blueprint
The 350-401 exam covers 6 domains. Each domain has a defined weight — the percentage of exam questions it contributes. Courseiva has 1,281 practice questions mapped across these objectives.
Click any objective to see practice questions for that domain.
Architecture covers enterprise design principles for the 350-401 ENCOR exam. It tests SD-WAN, SD-Access, underlay/overlay separation, OSPF area types, QoS queuing, and high-availability mechanisms. Questions present deployment scenarios and ask you to choose the correct protocol behavior, feature, or design consideration.
208 practice questions available
Virtualization on ENCOR 350-401 covers how Cisco platforms separate control plane, data plane, and services across physical and virtual infrastructure. You must know hypervisor types, virtual switching, VRF and VXLAN segmentation, and device virtualization features such as Cisco IOS XE guestshell. Expect scenario questions asking you to select or interpret configurations rather than recall marketing definitions.
144 practice questions available
Infrastructure is 30% of ENCOR 350-401 and covers Layer 2 and Layer 3 forwarding on Cisco IOS-XE platforms. Expect scenario items on VLANs and trunking, STP variants, EtherChannel, OSPF, EIGRP, BGP, first-hop redundancy, NAT, and NTP, plus configuration-syntax and show-command interpretation rather than pure recall.
355 practice questions available
Network Assurance is 10% of ENCOR 350-401 and covers the tools Cisco expects you to use to verify a live network rather than configure it. Expect questions on syslog severity levels, SNMPv2c versus SNMPv3, NetFlow and Flexible NetFlow exports, SPAN and RSPAN sessions, IP SLA probes, and DNA Center assurance and device health dashboards.
131 practice questions available
Security is 20% of ENCOR 350-401 and covers device hardening, access control, and traffic protection on Cisco IOS-XE and Catalyst platforms. Expect scenario questions on AAA with ISE or TACACS+, ACL and CoPP behaviour, 802.1X/MAB, port security, DHCP snooping, Dynamic ARP Inspection, IPsec, and MACsec, plus CLI output interpretation and configuration verification.
246 practice questions available
This domain covers network automation and programmability on Cisco IOS XE and related platforms: controller-based and agent-based tools, data formats, APIs, and Python scripting. Questions present operational scenarios and ask you to select the correct tool, protocol, or command, or to interpret JSON/YAML/XML payloads and RESTCONF/NETCONF responses.
197 practice questions available
Start with the highest-weight domain — that's where most of your exam questions will come from. Work through each objective's practice questions until you can answer at least 85% correctly. Return to lower-weight domains last, and use the full practice test to test cross-domain recall.