How many SW1 and SW2 VLAN Trunking Practice Questions questions are on this page?

This page has 15 SW1 and SW2 VLAN Trunking Practice Questions scenario questions for the 350-401 exam, each with detailed explanations and wrong-answer analysis.

How should I approach 350-401 scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to ENCOR 350-401 questions

Scenario-based practice

SW1 and SW2 VLAN Trunking Practice Questions

Practise 350-401 VLAN and trunking questions covering access ports, trunk ports, allowed VLAN lists, native VLAN, inter-VLAN routing, and command-output troubleshooting.

Start full practice test Read exam guide

scenario questions

350-401

exam code

Cisco

vendor

Scenario guide

How to approach sw1 and sw2 vlan trunking practice questions

Practise switch scenarios involving SW1, SW2, VLANs, trunk links, allowed VLAN lists and show interfaces trunk output.

Quick answer

VLAN and trunking questions usually test whether the VLAN exists, whether the trunk is active and whether the VLAN is allowed across the link.

Access ports, trunk ports and native VLAN behaviour.

Allowed VLAN lists and trunk verification.

How to read show vlan brief and show interfaces trunk output.

Why hosts in the same VLAN may fail across switches.

Practice scenarios

Question 1mediumdrag order

Open the full VLAN trunking answer →

Drag and drop the steps of Multiple SPAN source ports with filter VLAN into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 2mediumdrag order

Open the full VLAN trunking answer →

Drag and drop the steps of Private VLAN (PVLAN) configuration steps into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 3mediumdrag order

Open the full VLAN trunking answer →

Drag and drop the steps to configure VLAN Trunking Protocol (VTP) on a Cisco switch in the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

A
Step 1: Configure VTP mode (server/client/transparent) → Step 2: Configure VTP domain name → Step 3: Configure trunk ports → Step 4: Verify VTP status
This is the correct order because VTP mode must be set first to define the switch's role, followed by the domain name to group switches, then trunk ports to propagate advertisements, and finally verification to confirm operation.
B
Step 1: Configure trunk ports → Step 2: Configure VTP mode → Step 3: Configure VTP domain name → Step 4: Verify VTP status
Why wrong: This is incorrect because trunk ports should be configured after VTP mode and domain are set; otherwise, VTP advertisements may not be propagated correctly without a proper domain.
C
Step 1: Configure VTP domain name → Step 2: Configure VTP mode → Step 3: Configure trunk ports → Step 4: Verify VTP status
Why wrong: This is incorrect because while domain name can be set before mode, the recommended order is to set mode first; domain is necessary but mode defines the switch's behavior. Still, this order might work but deviates from best practice.
D
Step 1: Configure VTP mode → Step 2: Configure trunk ports → Step 3: Configure VTP domain name → Step 4: Verify VTP status
Why wrong: This is incorrect because the VTP domain name must be set before or simultaneously with trunking; without a domain, VTP advertisements are not accepted on trunk ports.

Full breakdown with real-world context →

Question 4mediumdrag order

Open the full VLAN trunking answer →

Drag and drop the steps of VLAN pruning on trunks using VTP into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 5mediumdrag order

Open the full VLAN trunking answer →

Drag and drop the steps of SVI configuration for inter-VLAN routing into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 6hardmultiple choice

Open the full VLAN trunking answer →

A network engineer runs the following command on Switch SW1:

SW1# show interfaces trunk

Port Mode Encapsulation Status Native vlan Gi0/1 on 802.1q trunking 1 Gi0/2 on 802.1q trunking 1

Port Vlans allowed on trunk Gi0/1 1-1005 Gi0/2 1-1005

Port Vlans allowed and active in management domain Gi0/1 1,10,20 Gi0/2 1,10,20

Port Vlans in spanning tree forwarding state and not pruned Gi0/1 1,10,20 Gi0/2 1,10,20

Based on this output, what can be concluded?

A
VLANs 2-9 are allowed but not active on the trunk.
The 'allowed' list includes 1-1005, but only VLANs 1,10,20 are active; thus VLANs 2-9 are allowed but not active (not created in VLAN database).
B
The trunk is using ISL encapsulation.
Why wrong: The encapsulation is shown as 802.1q.
C
VLAN 1 is pruned from the trunk.
Why wrong: VLAN 1 is in the forwarding state, so it is not pruned.
D
Only VLANs 10 and 20 are forwarding traffic.
Why wrong: VLAN 1 is also forwarding.

Full breakdown with real-world context →

Question 7mediummultiple choice

Full question →

A network engineer runs the following command on Switch SW2:

SW2# show monitor session 2

Session 2 --------- Type : Remote Source Session Source Ports : TX Only : Gi1/0/5 RX Only : Gi1/0/6 Destination Ports : Gi1/0/20

Encapsulation      : Replicate

Based on this output, what can be concluded?

A
This is an RSPAN source session, sending mirrored traffic to a remote VLAN.
The output shows a Remote Source Session with source ports assigned separately for TX Only (Gi1/0/5) and RX Only (Gi1/0/6), which is a characteristic of RSPAN source configuration. The destination port Gi1/0/20 uses Encapsulation: Replicate, indicating traffic is forwarded onto a remote VLAN rather than a local analyser, satisfying the RSPAN definition of sending mirrored traffic to a remote VLAN for collection elsewhere.
B
This is a local SPAN session with bidirectional capture.
Why wrong: The type is Remote Source, not Local, and capture is unidirectional per port.
C
The destination port Gi1/0/20 is used to receive mirrored traffic from another switch.
Why wrong: The destination port Gi1/0/20 is configured with encapsulation set to Replicate, which indicates it transmits an exact copy of the source traffic out of the switch; in a Remote Source Session, the destination port forwards mirrored traffic to a remote analyser, not receives it from another switch. This option is tempting because in a local SPAN session a destination port does receive traffic for monitoring, but here the session type is explicitly Remote Source, where the destination port acts as an egress for replicated frames to a remote collector.
D
Both source ports capture all traffic in both directions.
Why wrong: Gi1/0/5 captures TX only, Gi1/0/6 captures RX only.

Full breakdown with real-world context →

Question 8easymultiple choice

Open the full VLAN trunking answer →

A network engineer runs the following command on a Cisco WLC:

WLC# show wlan summary

WLAN ID SSID Status Security Interface 1 Guest Enabled Open guest-vlan 2 Corporate Enabled WPA2 corp-vlan 3 IoT Disabled WPA2 iot-vlan 4 Management Enabled WPA2 mgmt-vlan

Based on this output, what can be concluded?

A
All WLANs are currently active and serving clients.
Why wrong: WLAN 3 is disabled.
B
WLAN 3 is not operational because it is disabled.
The Status column shows Disabled for WLAN 3.
C
The Guest WLAN uses WPA2 security.
Why wrong: The Guest WLAN uses Open security.
D
The Management WLAN is on the guest-vlan interface.
Why wrong: Management WLAN is on mgmt-vlan, not guest-vlan.

Full breakdown with real-world context →

Question 9mediummultiple choice

Open the full VLAN trunking answer →

Examine the following partial Cisco IOS-XE configuration:

interface GigabitEthernet0/1
 switchport mode access
 switchport access vlan 10
 ip access-group ACL_IN in
 spanning-tree portfast

What is the effect of this configuration?

A
The port will immediately transition to forwarding state, reducing STP convergence time for end hosts.
spanning-tree portfast on an access port causes immediate forwarding, as intended for host ports.
B
The port will become a trunk port and participate in VLAN trunking.
Why wrong: The port is configured as an access port, not a trunk.
C
The port will use Rapid PVST+ and immediately forward after a link failure.
Why wrong: PortFast does not change the STP mode; it only affects initial convergence.
D
The port will block all inbound traffic due to the ACL.
Why wrong: The ACL is applied inbound but does not block all traffic; it filters based on the ACL entries.

Full breakdown with real-world context →

Question 10mediummatching

Open the full VLAN trunking answer →

Drag and drop each VLAN range on the left to its matching type on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Normal VLANs

Extended VLANs

Reserved VLANs

Reserved for legacy token ring and FDDI

A
1–1005: Normal VLANs
Why wrong: Correct. 1-1005 is the standard normal VLAN range, though 1002-1005 are reserved for legacy.
B
1006–4094: Extended VLANs
Why wrong: Correct. 1006-4094 are extended VLANs.
C
0, 4095: Reserved VLANs
Why wrong: Correct. 0 and 4095 are reserved VLANs.
D
1002–1005: Reserved for legacy token ring and FDDI
Why wrong: Correct. 1002-1005 are reserved for legacy Token Ring and FDDI.
E
2–1001: Normal VLANs (default range)
Why wrong: Incorrect. Normal VLANs start at 1, not 2, and include 1-1001 as usable; the full range is 1-1005.

Full breakdown with real-world context →

Question 11mediumdrag order

Open the full VLAN trunking answer →

Drag and drop the steps of Private VLAN (PVLAN) configuration steps into the correct order, from first to last.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps

Order

1Step 1

2Step 2

3Step 3

4Step 4

5Step 5

Question 12mediummatching

Open the full VLAN trunking answer →

Drag and drop each DTP mode on the left to its matching trunking behavior on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Actively sends DTP frames to form trunk

Passively waits for DTP frames to form trunk

Forces the port to become a trunk regardless of neighbor

Forces the port to be an access port, no trunking

Disables DTP, trunking only if manually configured

Question 13mediummatching

Open the full VLAN trunking answer →

Drag and drop each trunk encapsulation on the left to its matching standard on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts

Matches

Cisco proprietary, encapsulates entire frame with 30-byte header; Does not support native VLAN concept

IEEE standard, inserts 4-byte tag into frame; Supports up to 4094 VLANs

Untagged frames on trunk port

Question 14easymulti select

Open the full VLAN trunking answer →

Which two statements about VLAN configuration and verification on a Cisco IOS switch are true? (Choose two.)

A
VLAN 1 and VLANs 1002-1005 cannot be deleted.
Correct because these are default VLANs that are automatically created and cannot be removed.
B
The 'show vlan brief' command only displays VLANs that have been created on the switch.
Correct because it shows only configured VLANs, not all possible VLAN numbers.
C
The 'switchport access vlan 10' command automatically creates VLAN 10 if it does not exist.
Why wrong: Incorrect because the command assigns the port to VLAN 10, but VLAN 10 must already be created; otherwise the port remains inactive.
D
The 'no switchport' command on a switch port places it into the default VLAN.
Why wrong: Incorrect because 'no switchport' makes the interface a Layer 3 routed port, removing it from VLAN operation.
E
Extended VLANs (1006-4094) are stored in the vlan.dat file by default.
Why wrong: Incorrect because extended VLANs are stored in the running configuration, not in vlan.dat, unless VTP version 3 is used.

Full breakdown with real-world context →

Question 15mediummulti select

Open the full VLAN trunking answer →

Which two statements about DTP (Dynamic Trunking Protocol) are true? (Choose two.)

A
DTP is a Cisco proprietary protocol.
DTP is indeed Cisco proprietary and is not standardized in IEEE 802.1Q.
B
The default switchport mode on a Cisco Catalyst switch is dynamic desirable.
By default, Cisco Catalyst switches use dynamic desirable mode, which actively sends DTP frames to negotiate trunking.
C
DTP frames are sent continuously on a trunk port to maintain the trunk.
Why wrong: DTP frames are sent only during negotiation; once a trunk is established, DTP frames are no longer sent.
D
The 'switchport nonegotiate' command enables DTP on an interface.
Why wrong: The 'switchport nonegotiate' command disables DTP, preventing the interface from sending DTP frames.
E
DTP supports both 802.1Q and ISL trunking encapsulation.
Why wrong: DTP can negotiate both 802.1Q and ISL, but ISL is obsolete and not supported on modern switches; the statement is technically true but misleading in modern contexts, and the question focuses on current implementations where ISL is deprecated.

Full breakdown with real-world context →

These 350-401 practice questions are part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style 350-401 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.

SW1 and SW2 VLAN Trunking Practice Questions

How to approach sw1 and sw2 vlan trunking practice questions

Quick answer

Related 350-401 topic practice pages

Architecture practice questions

Virtualization practice questions

Infrastructure practice questions

Network Assurance practice questions

Security practice questions

Automation practice questions

ENCOR BGP practice questions

ENCOR OSPF practice questions

ENCOR EIGRP practice questions

ENCOR VLANs and trunking practice questions

ENCOR STP practice questions

ENCOR ACLs and CoPP practice questions

Practice scenarios

Drag and drop the steps of Multiple SPAN source ports with filter VLAN into the correct order, from first to last.

Drag and drop the steps of Private VLAN (PVLAN) configuration steps into the correct order, from first to last.

Drag and drop the steps to configure VLAN Trunking Protocol (VTP) on a Cisco switch in the correct order.

Drag and drop the steps of VLAN pruning on trunks using VTP into the correct order, from first to last.

Drag and drop the steps of SVI configuration for inter-VLAN routing into the correct order, from first to last.

Drag and drop each VLAN range on the left to its matching type on the right.

Drag and drop the steps of Private VLAN (PVLAN) configuration steps into the correct order, from first to last.

Drag and drop each DTP mode on the left to its matching trunking behavior on the right.

Drag and drop each trunk encapsulation on the left to its matching standard on the right.

Which two statements about VLAN configuration and verification on a Cisco IOS switch are true? (Choose two.)

Which two statements about DTP (Dynamic Trunking Protocol) are true? (Choose two.)