350-401 · domain
Infrastructure
Use this page to practise Infrastructure questions for this certification. Focus on how the exam tests infrastructure in scenario format — understanding the why behind each answer builds more durable knowledge than memorising options.
Focused practice
Practice Infrastructure questions
Scored sessions drawing only from this domain — pick a length below.
What this domain covers
What to know about Infrastructure
Infrastructure questions on this certification test your ability to deploy and manage infrastructure concepts in scenario-based situations.
Core Infrastructure concepts and how they apply in real-world cloud scenarios.
How to deploy infrastructure correctly and verify the outcome.
Troubleshooting infrastructure issues by interpreting error output and system state.
Cloud best practices and Infrastructure design trade-offs tested by this certification.
Watch out for
Common Infrastructure exam traps
- ▸Selecting the most expensive service when a simpler managed option meets the requirement.
- ▸Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
- ▸Choosing a global service fix when the issue is region-specific.
- ▸Overlooking cost implications of cross-region data transfer in architecture questions.
Question index
All Infrastructure questions (21)
Click any question to see the full explanation, or start a practice session above.
An engineer needs to configure a switchport to carry traffic for multiple VLANs to a router using a single physical link. Which configuration should be applied on the switchport?
Easy2A network administrator needs to allow SSH access to a router from the management network 192.168.1.0/24. Which configuration should be applied?
Easy3A company is implementing QoS in a campus network. Voice traffic must be prioritized over data traffic, and all traffic should be marked at Layer 2 and Layer 3. Which combination of marking values should be used on access ports to achieve this?
Hard4Based on the exhibit, which traffic will be permitted outbound on GigabitEthernet0/0?
Hard5Drag and drop the steps to configure VLAN Trunking Protocol (VTP) on a Cisco switch in the correct order.
Medium6Which TWO methods can be used to prevent unauthorized access to the privileged EXEC mode on a Cisco router? (Choose two.)
Easy7A network engineer is troubleshooting an EIGRP adjacency issue between two routers. The engineer verifies that both routers have the same K-values and autonomous system number. However, the adjacency does not form. Which configuration issue is most likely the cause?
Medium8Drag and drop the steps for the EIGRP neighbor discovery process in the correct order.
Medium9A company has a campus network with two distribution switches (DSW1 and DSW2) connected via a Layer 2 trunk. Each distribution switch connects to two access switches. Spanning Tree Protocol (STP) is running with default settings. Recently, a network administrator added a new access switch (ASW3) and connected it to both distribution switches. After the connection, network performance degraded significantly, and users in VLAN 10 reported intermittent connectivity. The administrator checked the logs and saw multiple TCN notifications. What is the most likely cause of the issue?
Medium10Match each Cisco IOS command to its function.
Medium11Which THREE conditions are required for OSPF routers to become fully adjacent? (Choose three.)
Hard12A network engineer is deploying a new WLAN and needs to ensure that client traffic is encrypted using AES with a pre-shared key. Which security configuration should be applied to the wireless SSID?
Medium13Which TWO characteristics are true about the operation of Rapid PVST+? (Choose two.)
Easy14An engineer is troubleshooting a BGP routing issue. The router is not receiving routes from an eBGP neighbor. The neighbor is reachable via ping. The BGP session is established and in the Established state. What is the most likely cause?
Hard15A network administrator is troubleshooting an issue where OSPF routes are not being learned from a neighbor. The administrator checks the OSPF configuration and sees that both routers are in the same area. The neighbor state is stuck in EXSTART. What is the most likely cause?
Hard16An engineer is configuring a new VLAN 100 on a switch. Which command must be used to create the VLAN?
Easy17R1 has an OSPF priority of 0. What is its role on the OSPF network?
Medium18A multinational organization has a BGP-based MPLS VPN network. The CE router at a branch office is connected to two PE routers (PE1 and PE2) in the service provider network. The branch uses eBGP to exchange routes with the PEs. The network administrator notices that the branch can reach some destinations but not others. The BGP table on the CE shows routes with next-hop set to the PE loopback addresses, but those loopbacks are not reachable. The CE has a default route pointing to the PEs. What is the most likely cause of the issue?
Hard19Which TWO actions are valid for configuring 802.1Q trunking on a Cisco switch? (Choose two.)
Medium20Match each EIGRP term to its definition.
Medium21Refer to the exhibit. R1 has two equal-cost OSPF E2 routes to 10.1.1.0/24 via two different next hops. However, when tracing to 10.1.1.1, all traffic uses the path through 10.0.1.2. What is the most likely reason?
HardOther domains
All 350-401 exam domains
Frequently asked questions
- What does the Infrastructure domain cover on the 350-401 exam?
- Infrastructure questions on this certification test your ability to deploy and manage infrastructure concepts in scenario-based situations.
- How many questions are in this domain?
- This page lists all 21 Infrastructure questions in the 350-401 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
- What is the best way to practise this domain?
- Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
- Can I practise only Infrastructure questions?
- Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.