350-401 · topic practice

Spanning Tree Protocol practice questions

Practise 350-401 STP questions covering root bridge election, bridge IDs, port roles (root, designated, blocking), path cost, PortFast, BPDU Guard, and how spanning tree prevents Layer 2 loops.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security
20 questionsDomain: Spanning Tree Protocol

What the exam tests

What to know about Spanning Tree Protocol

STP questions usually test root bridge election, port roles, path cost and how spanning tree prevents Layer 2 loops.

Root bridge election and bridge ID comparison.

Root ports, designated ports and blocked/alternate ports.

Path cost and how switches choose the best path to the root bridge.

PortFast, BPDU Guard and common Layer 2 loop-prevention behaviour.

Why learners struggle

Why Spanning Tree Protocol questions are commonly missed

STP questions are missed when learners confuse bridge ID comparison direction, forget how ties are broken, or misidentify which port role a given switch port takes. The lowest bridge ID wins, but cost, port ID, and tiebreakers all play a role.

  • ·Lowest bridge ID wins root election — lower priority wins, then lower MAC breaks ties
  • ·Root port vs designated port — each non-root switch has exactly one root port
  • ·Blocking ports are on non-designated segments — they receive BPDUs but do not forward
  • ·PortFast bypasses STP states — only safe on access ports connected to end devices
  • ·BPDU Guard shuts down PortFast ports that receive BPDUs — protecting against loops
  • ·STP path cost uses link bandwidth — faster links have lower cost and are preferred

Watch out for

Common Spanning Tree Protocol exam traps

  • The lowest bridge ID wins root bridge election.
  • A non-root switch has one root port: its best path toward the root bridge.
  • PortFast should be used carefully on access ports, not normal switch-to-switch links.
  • Lower STP cost is preferred, but bridge ID and port ID can break ties.

Practice set

Spanning Tree Protocol questions

20 questions · select your answer, then reveal the explanation

Question 1mediummultiple choice
Open the full VLAN trunking answer →

A network engineer is troubleshooting an STP issue in a switched network. The network has two distribution switches connected via a trunk, and each distribution switch connects to the same access switch. The engineer notices that the root bridge is not the intended distribution switch. Upon checking, the engineer sees that the access switch has a higher priority than the distribution switches. The engineer needs to ensure that the intended distribution switch becomes the root bridge without causing a temporary loop. What should the engineer do?

Question 2hardmultiple choice
Open the full VLAN trunking answer →

An engineer is designing a redundant Layer 2 network with multiple VLANs. The network uses Rapid PVST+ for STP. The engineer wants to ensure that different VLANs have different root bridges to optimize traffic flow. The distribution switches are Cisco Catalyst 9300s. The engineer has configured one distribution switch as the root for VLANs 10 and 20, and the other as the root for VLANs 30 and 40. However, after implementation, the engineer notices that all VLANs have the same root bridge. What is the most likely cause?

Question 3mediummultiple choice
Open the full STP breakdown →

A network engineer is troubleshooting a Layer 2 loop issue. The network consists of three switches: SW1, SW2, and SW3, all connected in a triangle. The engineer notices that SW1 is the root bridge. After a link failure between SW1 and SW2, the network experiences a temporary loop. The engineer wants to prevent such loops in the future by enabling a feature that provides faster convergence and prevents temporary loops during topology changes. The engineer is using Rapid PVST+. Which feature should the engineer enable?

Question 4hardmultiple choice
Open the full VLAN trunking answer →

An engineer is configuring a new access switch that connects to two distribution switches via trunk links. The distribution switches are configured with Rapid PVST+ and are both running as root bridges for different VLANs. The engineer wants to ensure that the access switch does not become the root bridge for any VLAN, even if the distribution switches fail. The engineer also wants to prevent any unauthorized switch from becoming root. What configuration should the engineer apply on the access switch?

Question 5easymultiple choice
Open the full VLAN trunking answer →

A network engineer is troubleshooting a connectivity issue in a switched network. The network uses Rapid PVST+ with multiple VLANs. The engineer notices that a host connected to an access port on SW1 cannot communicate with the default gateway, which is on a distribution switch. The access port is configured with PortFast and BPDU Guard. The engineer checks the switch logs and sees that the port went into errdisable state. What is the most likely cause of the errdisable state?

Question 6hardmultiple choice
Open the full VLAN trunking answer →

An engineer is designing a Layer 2 network with redundancy. The network uses MST (Multiple Spanning Tree) to reduce the number of STP instances. The engineer has configured two regions: Region 1 and Region 2. The engineer notices that switches in Region 1 are not forming a single MST region, and instead, they are treating each other as if they are in different regions. The engineer checks the configuration and finds that the region name and revision number are the same on all switches in Region 1, but the VLAN-to-instance mapping is different on one switch. What is the most likely cause of the issue?

Question 7hardmultiple choice
Open the full STP breakdown →

A network engineer is troubleshooting an STP issue in a network that uses Rapid PVST+. The network has a root bridge (SW1) and a secondary root bridge (SW2). The engineer notices that after a link failure between SW1 and SW2, the network takes longer than expected to converge. The engineer checks the configuration and finds that SW2 has the 'spanning-tree uplinkfast' command enabled. The engineer also notices that SW2 has a lower priority than SW1. What is the most likely cause of the slow convergence?

Question 8easymultiple choice
Open the full VLAN trunking answer →

A network engineer is configuring a new switch that will be used as an access layer switch. The switch connects to two distribution switches via trunk links. The engineer wants to ensure that the access switch does not become the root bridge for any VLAN. The engineer also wants to provide redundancy so that if one uplink fails, the other uplink takes over quickly. The engineer is using Rapid PVST+. What configuration should the engineer apply on the access switch?

Question 9mediummultiple choice
Open the full STP breakdown →

A network engineer is troubleshooting a Layer 2 loop that occurred in a network using Rapid PVST+. The network has three switches: SW1 (root), SW2, and SW3. The engineer examines the topology and finds that SW2 and SW3 are connected via a link that is not supposed to be there. The engineer suspects that an unauthorized switch was connected to the network, causing the loop. The engineer wants to prevent such loops in the future by configuring a feature that will disable any port that receives a BPDU from an unauthorized switch. Which feature should the engineer configure on the access ports?

Question 10mediummultiple choice
Open the full VLAN trunking answer →

A network engineer runs the following command on Switch SW1:

SW1# show spanning-tree vlan 10

VLAN0010 Spanning tree enabled protocol ieee Root ID Priority 24586 Address aabb.cc00.0100 This bridge is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 24586 (priority 24576 sys-id-ext 10) Address aabb.cc00.0100 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300 sec

Interface           Role Sts Cost      Prio.Nbr Type

------------------- ---- --- --------- -------- ------------------------------ Gi0/1 Desg FWD 4 128.1 P2p Gi0/2 Desg FWD 4 128.2 P2p Gi0/3 Desg FWD 4 128.3 P2p

Based on this output, what can be concluded?

Question 11mediummultiple choice
Open the full VLAN trunking answer →

A network engineer runs the following command on Switch SW2:

SW2# show spanning-tree vlan 20

VLAN0020 Spanning tree enabled protocol ieee Root ID Priority 24596 Address aabb.cc00.0200 Cost 4 Port 1 (GigabitEthernet0/1) Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32778 (priority 32768 sys-id-ext 20) Address aabb.cc00.0300 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300 sec

Interface           Role Sts Cost      Prio.Nbr Type

------------------- ---- --- --------- -------- ------------------------------ Gi0/1 Root FWD 4 128.1 P2p Gi0/2 Desg FWD 4 128.2 P2p Gi0/3 Altn BLK 4 128.3 P2p

Based on this output, what can be concluded?

Question 12hardmultiple choice
Open the full VLAN trunking answer →

A network engineer runs the following command on Switch SW3:

SW3# show spanning-tree vlan 30

VLAN0030 Spanning tree enabled protocol ieee Root ID Priority 24606 Address aabb.cc00.0400 Cost 12 Port 2 (GigabitEthernet0/2) Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32798 (priority 32768 sys-id-ext 30) Address aabb.cc00.0500 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300 sec

Interface           Role Sts Cost      Prio.Nbr Type

------------------- ---- --- --------- -------- ------------------------------ Gi0/1 Desg FWD 4 128.1 P2p Gi0/2 Root FWD 12 128.2 P2p Gi0/3 Desg FWD 4 128.3 P2p

Based on this output, what is the root path cost from SW3 to the root bridge for VLAN 30?

Question 13easymultiple choice
Open the full VLAN trunking answer →

A network engineer runs the following command on Switch SW4:

SW4# show spanning-tree vlan 40

VLAN0040 Spanning tree enabled protocol ieee Root ID Priority 24616 Address aabb.cc00.0600 Cost 8 Port 1 (GigabitEthernet0/1) Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32768 (priority 32768 sys-id-ext 40) Address aabb.cc00.0700 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300 sec

Interface           Role Sts Cost      Prio.Nbr Type

------------------- ---- --- --------- -------- ------------------------------ Gi0/1 Root FWD 8 128.1 P2p Gi0/2 Desg FWD 4 128.2 P2p Gi0/3 Desg FWD 4 128.3 P2p

Based on this output, which port is the root port?

Question 14easymultiple choice
Open the full VLAN trunking answer →

A network engineer runs the following command on Switch SW5:

SW5# show spanning-tree vlan 50

VLAN0050 Spanning tree enabled protocol ieee Root ID Priority 24626 Address aabb.cc00.0800 Cost 4 Port 1 (GigabitEthernet0/1) Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32768 (priority 32768 sys-id-ext 50) Address aabb.cc00.0900 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300 sec

Interface           Role Sts Cost      Prio.Nbr Type

------------------- ---- --- --------- -------- ------------------------------ Gi0/1 Root FWD 4 128.1 P2p Gi0/2 Desg FWD 4 128.2 P2p Gi0/3 Desg FWD 4 128.3 P2p Gi0/4 Altn BLK 4 128.4 P2p

Based on this output, how many ports are in the Forwarding state?

Question 15mediummultiple choice
Open the full VLAN trunking answer →

A network engineer runs the following command on Switch SW6:

SW6# show spanning-tree vlan 60

VLAN0060 Spanning tree enabled protocol ieee Root ID Priority 24636 Address aabb.cc00.0a00 Cost 8 Port 1 (GigabitEthernet0/1) Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32768 (priority 32768 sys-id-ext 60) Address aabb.cc00.0b00 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300 sec

Interface           Role Sts Cost      Prio.Nbr Type

------------------- ---- --- --------- -------- ------------------------------ Gi0/1 Root FWD 8 128.1 P2p Gi0/2 Desg FWD 4 128.2 P2p Gi0/3 Altn BLK 4 128.3 P2p Gi0/4 Desg FWD 4 128.4 P2p

Based on this output, what is the bridge priority of the root bridge for VLAN 60?

Question 16easymultiple choice
Open the full VLAN trunking answer →

A network engineer runs the following command on Switch SW7:

SW7# show spanning-tree vlan 70

VLAN0070 Spanning tree enabled protocol ieee Root ID Priority 24646 Address aabb.cc00.0c00 Cost 4 Port 1 (GigabitEthernet0/1) Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32768 (priority 32768 sys-id-ext 70) Address aabb.cc00.0d00 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300 sec

Interface           Role Sts Cost      Prio.Nbr Type

------------------- ---- --- --------- -------- ------------------------------ Gi0/1 Root FWD 4 128.1 P2p Gi0/2 Desg FWD 4 128.2 P2p Gi0/3 Altn BLK 4 128.3 P2p

Based on this output, which port is the alternate port?

Question 17easymultiple choice
Open the full VLAN trunking answer →

A network engineer runs the following command on Switch SW8:

SW8# show spanning-tree vlan 80

VLAN0080 Spanning tree enabled protocol ieee Root ID Priority 24656 Address aabb.cc00.0e00 Cost 12 Port 1 (GigabitEthernet0/1) Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 32768 (priority 32768 sys-id-ext 80) Address aabb.cc00.0f00 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300 sec

Interface           Role Sts Cost      Prio.Nbr Type

------------------- ---- --- --------- -------- ------------------------------ Gi0/1 Root FWD 12 128.1 P2p Gi0/2 Desg FWD 4 128.2 P2p Gi0/3 Desg FWD 4 128.3 P2p Gi0/4 Altn BLK 4 128.4 P2p

Based on this output, what is the cost of the root port?

Question 18hardmultiple choice
Open the full VLAN trunking answer →

A network engineer runs the following command on Switch SW9:

SW9# show spanning-tree vlan 90

VLAN0090 Spanning tree enabled protocol ieee Root ID Priority 24666 Address aabb.cc00.1000 This bridge is the root Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec

Bridge ID Priority 24666 (priority 24576 sys-id-ext 90) Address aabb.cc00.1000 Hello Time 2 sec Max Age 20 sec Forward Delay 15 sec Aging Time 300 sec

Interface           Role Sts Cost      Prio.Nbr Type

------------------- ---- --- --------- -------- ------------------------------ Gi0/1 Desg FWD 4 128.1 P2p Gi0/2 Desg FWD 4 128.2 P2p Gi0/3 Desg FWD 4 128.3 P2p Gi0/4 Desg FWD 4 128.4 P2p

Based on this output, what is the base priority of the root bridge?

Question 19mediummultiple choice
Open the full STP breakdown →
interface GigabitEthernet0/1
 spanning-tree portfast
 spanning-tree bpduguard enable

end

What is the effect of this configuration?

Question 20mediummultiple choice
Open the full VLAN trunking answer →
spanning-tree vlan 10 priority 4096

What is the effect of this global configuration command?

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Focused Spanning Tree Protocol sessions

Start a Spanning Tree Protocol only practice session

Every question in these sessions is drawn from the Spanning Tree Protocol domain — nothing else.

Related practice questions

Related 350-401 topic practice pages

Move into related areas when this topic feels solid.

Frequently asked questions

What does the 350-401 exam test about Spanning Tree Protocol?
STP questions usually test root bridge election, port roles, path cost and how spanning tree prevents Layer 2 loops.
How should I use these practice questions?
Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Spanning Tree Protocol questions in a focused session?
Yes — the session launcher on this page draws every question from the Spanning Tree Protocol domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other 350-401 topics?
Use the topic links above to move to related areas, or go back to the 350-401 question bank to see all topics.
Are these real exam questions or dumps?
These are original practice questions written to test the same concepts the 350-401 exam covers. They are not copied from any real exam or dump site.