Courseiva

350-401 · topic practice

Network Assurance practice questions

Use this page to practise Network Assurance questions for this certification. Focus on how the exam tests network assurance in scenario format — understanding the why behind each answer builds more durable knowledge than memorising options.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security
20 questionsDomain: Network Assurance
Practice 10 questionsBrowse domain →

What the exam tests

What to know about Network Assurance

Network Assurance questions on this certification test your ability to deploy and manage network assurance concepts in scenario-based situations.

Core Network Assurance concepts and how they apply in real-world cloud scenarios.

How to deploy network assurance correctly and verify the outcome.

Troubleshooting network assurance issues by interpreting error output and system state.

Cloud best practices and Network Assurance design trade-offs tested by this certification.

Watch out for

Common Network Assurance exam traps

  • ▸Selecting the most expensive service when a simpler managed option meets the requirement.
  • ▸Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
  • ▸Choosing a global service fix when the issue is region-specific.
  • ▸Overlooking cost implications of cross-region data transfer in architecture questions.

Practice set

Network Assurance questions

20 questions · select your answer, then reveal the explanation

Question 1mediummultiple choice
Open the full VLAN trunking answer →

A network engineer notices intermittent connectivity issues between two switches connected via a trunk link. The trunk is configured with DTP in dynamic desirable mode on one side and trunk mode on the other. Which action should the engineer take to resolve the issue?

Question 2hardmulti select
Read the full Network Assurance explanation →

Which THREE are common causes of high CPU utilization on a Cisco Catalyst switch? (Choose three.)

Question 3hardmultiple choice
Read the full Network Assurance explanation →

A network administrator is troubleshooting high CPU utilization on a Catalyst 9300 switch. The output of 'show processes cpu sorted' shows the 'IP Input' process consuming 45% CPU. Which tool should be used to identify the specific packets causing the issue?

Question 4easymultiple choice
Study the full QoS explanation →

A network engineer is implementing QoS on a WAN link to prioritize voice traffic. Which queuing mechanism provides the lowest latency for real-time traffic?

Question 5mediummultiple choice
Open the full BGP breakdown →

A network administrator is troubleshooting a BGP routing issue where routes from an eBGP neighbor are not being installed in the routing table. The 'show ip bgp' output shows the routes are received but not valid. What is the most likely cause?

Question 6hardmultiple choice
Study the full multicast explanation →

A network engineer is designing a multicast network for IPTV. Which protocol is used by routers to discover which multicast groups are of interest to directly connected hosts?

Question 7mediummulti select
Read the full Network Assurance explanation →

Which TWO statements are true about IP SLA? (Choose two.)

Question 8easymultiple choice
Read the full Network Assurance explanation →

Refer to the exhibit. An engineer notices that interface resets have occurred. What is the most likely cause of the interface resets?

Exhibit

Refer to the exhibit.

Switch# show interfaces gigabitethernet 1/0/1
GigabitEthernet1/0/1 is up, line protocol is up
  Hardware is Gigabit Ethernet, address is aaaa.bbbb.cccc (bia aaaa.bbbb.cccc)
  MTU 1500 bytes, BW 1000000 Kbit/sec, DLY 10 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation ARPA, loopback not set
  Keepalive set (10 sec)
  Full-duplex, 1000Mb/s, link type is auto, media type is 10/100/1000BaseTX
  input flow-control is off, output flow-control is unsupported
  ARP type: ARPA, ARP Timeout 04:00:00
  Last input 00:00:00, output 00:00:00, output hang never
  Last clearing of "show interface" counters never
  Input queue: 0/2000/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/40 (size/max)
  5 minute input rate 0 bits/sec, 0 packets/sec
  5 minute output rate 0 bits/sec, 0 packets/sec
     0 packets input, 0 bytes, 0 no buffer
     Received 0 broadcasts (0 multicasts)
     0 runts, 0 giants, 0 throttles
     0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 0 multicast, 0 pause input
     0 input packets with dribble condition detected
     0 packets output, 0 bytes, 0 underruns
     0 output errors, 0 collisions, 2 interface resets
     0 unknown protocol drops
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 pause output
     0 output buffer failures, 0 output buffers swapped out
Question 9mediummultiple choice
Review the full OSPF breakdown →

Refer to the exhibit. Which OSPF route type is the default route?

Exhibit

Refer to the exhibit.

R1# show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       a - application route
       + - replicated route, % - next hop override

Gateway of last resort is 10.0.0.2 to network 0.0.0.0

O*E2 0.0.0.0/0 [110/1] via 10.0.0.2, 00:00:23, GigabitEthernet0/0
      10.0.0.0/8 is variably subnetted, 2 subnets, 2 masks
C        10.0.0.0/30 is directly connected, GigabitEthernet0/0
L        10.0.0.1/32 is directly connected, GigabitEthernet0/0
      192.168.1.0/24 is variably subnetted, 2 subnets, 2 masks
O        192.168.1.0/24 [110/2] via 10.0.0.2, 00:00:23, GigabitEthernet0/0
O        192.168.1.1/32 [110/2] via 10.0.0.2, 00:00:23, GigabitEthernet0/0
Question 10hardmultiple choice
Review the full OSPF breakdown →

A company has a core network running OSPF in a single area (area 0). The network consists of four routers: R1, R2, R3, and R4. R1 is connected to R2 and R3. R2 is also connected to R4. R3 is also connected to R4. All links are GigabitEthernet with OSPF cost based on bandwidth (reference bandwidth 100 Gbps). The network engineer notices that traffic from R1 to a subnet behind R4 is taking a suboptimal path: R1 -> R2 -> R4, instead of R1 -> R3 -> R4 which has lower cost. Upon checking OSPF neighbor states, all adjacencies are full. The engineer verifies that the cost on the R1-R3 link is 10 and the cost on the R3-R4 link is 10, while the R1-R2 link cost is 20 and the R2-R4 link cost is 20. The total cost via R2 is 40, via R3 is 20. However, the routing table on R1 shows the next-hop as R2 for the subnet behind R4. What is the most likely cause?

Question 11mediummultiple choice
Open the full VLAN trunking answer →

A network engineer is troubleshooting intermittent connectivity issues between two switches connected via a trunk link. The engineer notices that the port counters show a high number of CRC errors and runts on one side. Which action should the engineer take first?

Question 12hardmultiple choice
Study the full QoS explanation →

A network administrator is deploying a new QoS policy to prioritize voice traffic across a WAN link. The policy must ensure that voice packets are not dropped even during congestion, and that bandwidth is guaranteed for voice. Which queuing mechanism should be used for the voice class?

Question 13mediummulti select
Open the full STP breakdown →

Which TWO STP features are used to improve convergence time after a topology change?

Question 14easymultiple choice
Review the full OSPF breakdown →

Refer to the exhibit. An administrator needs to ensure that traffic to 192.168.1.0/24 is forwarded via a different path than traffic to 192.168.2.0/24, even though both routes are learned via OSPF with the same metric. Which action should the administrator take?

Exhibit

Refer to the exhibit.

R1# show ip route
Codes: L - local, C - connected, S - static, R - RIP, M - mobile, B - BGP
       D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
       N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
       E1 - OSPF external type 1, E2 - OSPF external type 2
       i - IS-IS, su - IS-IS summary, L1 - IS-IS level-1, L2 - IS-IS level-2
       ia - IS-IS inter area, * - candidate default, U - per-user static route
       o - ODR, P - periodic downloaded static route, H - NHRP, l - LISP
       a - application route
       + - replicated route, % - next hop override

Gateway of last resort is 10.0.0.2 to network 0.0.0.0

O E2     192.168.1.0/24 [110/20] via 10.0.0.2, 00:00:34, GigabitEthernet0/0
O E2     192.168.2.0/24 [110/20] via 10.0.0.2, 00:00:34, GigabitEthernet0/0
S*       0.0.0.0/0 [1/0] via 10.0.0.1
Question 15hardmultiple choice
Open the full VLAN trunking answer →

A company has a network with multiple VLANs connected via a Layer 3 switch acting as the gateway for all VLANs. The network uses Rapid PVST+ for spanning tree. Recently, the network team added a new access switch to VLAN 100. After the switch was connected, users in VLAN 100 experienced intermittent connectivity, and the Layer 3 switch logs show 'SPANTREE-2-ROOTGUARD_BLOCK' messages for the port connected to the new switch. The new switch is intended to provide additional access ports for VLAN 100. The network team ensured that the new switch's configuration is correct for VLAN 100 access. What is the most likely cause of the issue, and what action should be taken to resolve it?

Question 16mediummulti select
Read the full Network Assurance explanation →

Which TWO statements about Cisco DNA Center's Assurance capabilities are correct?

Question 17hardmultiple choice
Study the full EIGRP explanation →

Refer to the exhibit. A network engineer is troubleshooting a routing issue. The route for 10.0.0.0/8 is learned via EIGRP with metric 2560512. Which change would most likely cause the metric to increase?

Exhibit

Refer to the exhibit.
```
router# show ip route 10.0.0.0
Routing entry for 10.0.0.0/8
  Known via "eigrp 100", distance 170, metric 2560512, type internal
  Redistributing via eigrp 100
  Last update from 192.168.1.1 on GigabitEthernet0/0, 00:00:05 ago
  Routing Descriptor Blocks:
  * 192.168.1.1, from 192.168.1.1, 00:00:05 ago, via GigabitEthernet0/0
      Route metric is 2560512, traffic share count is 1
      Total delay is 2000 microseconds, minimum bandwidth is 10000 Kbit
      Reliability 255/255, minimum MTU 1500 bytes
      Loading 1/255, Hops 3
```
Question 18easymultiple choice
Open the full VLAN trunking answer →

A network administrator is troubleshooting a performance issue in a large enterprise campus network. The network consists of Cisco Catalyst 9300 switches acting as access switches and Cisco Catalyst 9500 switches as distribution. Users on VLAN 10 report intermittent slow file transfers to a server on VLAN 20. The administrator has verified that there are no errors on the links, CPU utilization is normal, and STP topology is stable. The administrator suspects a possible QoS issue. Upon checking the QoS configuration on the access switch, the administrator finds that the default QoS configuration is in place, which trusts the CoS value at the port level. The connected devices are IP phones and PCs; the IP phones mark voice traffic with CoS 5. The server on VLAN 20 is connected to a distribution switch. Which action should the administrator take to most likely resolve the issue?

Question 19mediumdrag order
Read the full DHCP explanation →

Drag and drop the steps for the DHCP DORA process in the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
Question 20mediummatching
Read the full wireless explanation →

Match each wireless standard to its frequency band and maximum data rate.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

5 GHz, up to 6.9 Gbps

2.4/5 GHz, up to 9.6 Gbps

2.4/5 GHz, up to 600 Mbps

2.4 GHz, up to 54 Mbps

5 GHz, up to 54 Mbps

Continue with 20-question session →

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Sign up freeLog in

Focused Network Assurance sessions

Start a Network Assurance only practice session

Every question in these sessions is drawn from the Network Assurance domain — nothing else.

10 questions20 questions30 questions50 questions
Browse all Network Assurance questions →Mixed 350-401 session

Related practice questions

Related 350-401 topic practice pages

Move into related areas when this topic feels solid.

Architecture practice questions

Practise 350-401 questions linked to Architecture.

Virtualization practice questions

Practise 350-401 questions linked to Virtualization.

Infrastructure practice questions

Practise 350-401 questions linked to Infrastructure.

Network Assurance practice questions

Practise 350-401 questions linked to Network Assurance.

Security practice questions

Practise 350-401 questions linked to Security.

Automation practice questions

Practise 350-401 questions linked to Automation.

ENCOR BGP practice questions

Practise eBGP/iBGP peering, path attributes, route selection and BGP troubleshooting.

ENCOR OSPF practice questions

Practise OSPF area types, LSA types, neighbour states and multi-area design.

ENCOR EIGRP practice questions

Practise EIGRP DUAL, metrics, stub routing and route redistribution.

ENCOR VLANs and trunking practice questions

Practise VLAN configuration, trunk negotiation and inter-VLAN routing.

ENCOR STP practice questions

Practise RSTP, MSTP, port roles and STP protection features.

ENCOR ACLs and CoPP practice questions

Practise extended ACLs, CoPP rate-limiting and control-plane protection.

Frequently asked questions

What does the 350-401 exam test about Network Assurance?
Network Assurance questions on this certification test your ability to deploy and manage network assurance concepts in scenario-based situations.
How should I use these practice questions?
Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Network Assurance questions in a focused session?
Yes — the session launcher on this page draws every question from the Network Assurance domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other 350-401 topics?
Use the topic links above to move to related areas, or go back to the 350-401 question bank to see all topics.
Are these real exam questions or dumps?
These are original practice questions written to test the same concepts the 350-401 exam covers. They are not copied from any real exam or dump site.