350-401 · topic practice

Virtualization practice questions

Use this page to practise Virtualization questions for this certification. Focus on how the exam tests virtualization in scenario format — understanding the why behind each answer builds more durable knowledge than memorising options.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security
20 questionsDomain: Virtualization

What the exam tests

What to know about Virtualization

Virtualization questions on this certification test your ability to deploy and manage virtualization concepts in scenario-based situations.

Core Virtualization concepts and how they apply in real-world cloud scenarios.

How to deploy virtualization correctly and verify the outcome.

Troubleshooting virtualization issues by interpreting error output and system state.

Cloud best practices and Virtualization design trade-offs tested by this certification.

Why learners struggle

Why Virtualization questions are commonly missed

Learners often confuse Type 1 and Type 2 hypervisors, and misunderstand VM resource limits versus host capabilities. The abstract nature of virtualized hardware makes it hard to apply to real scenarios.

  • ·Type 1 vs Type 2 hypervisor — which runs directly on hardware.
  • ·Host vs guest OS — which controls physical resources.
  • ·Overcommitment — VM resources can exceed host physical limits.
  • ·Snapshot vs backup — snapshot is not a full backup.
  • ·Virtual switch vs physical switch — network isolation differences.
  • ·Hardware compatibility — guest OS may lack drivers for virtual hardware.

Watch out for

Common Virtualization exam traps

  • Selecting the most expensive service when a simpler managed option meets the requirement.
  • Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
  • Choosing a global service fix when the issue is region-specific.
  • Overlooking cost implications of cross-region data transfer in architecture questions.

Practice set

Virtualization questions

20 questions · select your answer, then reveal the explanation

Question 1mediummultiple choice
Read the full VRF explanation →

A network engineer is troubleshooting a Cisco IOS-XE router that hosts multiple virtual routing and forwarding (VRF) instances. Users in VRF-A report they cannot reach a server in VRF-B. The engineer verifies that both VRFs have the correct routes and that the router has a route leaking configuration using route-target import/export. However, connectivity still fails. What is the most likely cause?

Question 2hardmulti select
Open the full VLAN trunking answer →

A data center uses Cisco Nexus 9000 switches with VXLAN EVPN to provide network virtualization. The operations team notices that VLAN 100 (mapped to VNI 10100) is not reachable across the fabric, although other VLANs work fine. The NVE interface is up, and the EVPN address-family is configured. Which two actions should the engineer take to isolate the issue?

Question 3mediummultiple choice
Study the full virtualization explanation →

A network engineer is deploying a Cisco Catalyst 9300 switch as a virtual switch using StackWise Virtual. The switch will connect to two upstream routers for redundancy. What is the best practice for connecting the uplinks?

Question 4hardmultiple choice
Study the full multicast explanation →

A cloud provider uses Cisco ACI to automate provisioning of tenant networks. A new tenant requires a Layer 2 bridge domain that extends to an external Layer 2 network via a VPC. The engineer creates a bridge domain with the settings: Type: Regular, L2 Unknown Unicast: Flood, L3 Unknown Multicast Flood: Flood, and Multi-Destination Flooding: Flood. The VPC is configured as a virtual port channel. The tenant reports that broadcast traffic is not reaching the external network. What is the most likely cause?

An enterprise uses VMware vSphere to host multiple virtual machines (VMs). The network team wants to implement a virtual firewall on the hypervisor to inspect traffic between VMs on the same ESXi host. Which technology should be used?

Question 6mediummultiple choice
Open the full VLAN trunking answer →

A network engineer configured three interfaces on a switch as shown. A host connected to Ethernet1/2 sends an untagged frame. Which VLAN will this frame be placed into when it reaches Ethernet1/3?

Exhibit

Refer to the exhibit.

interface Ethernet1/1
 switchport mode trunk
 switchport trunk allowed vlan 10,20,30
 switchport trunk native vlan 999
 no shutdown
!
interface Ethernet1/2
 switchport mode access
 switchport access vlan 10
 no shutdown
!
interface Ethernet1/3
 switchport mode trunk
 switchport trunk allowed vlan 20,30
 switchport trunk native vlan 1
 no shutdown
Question 7hardmultiple choice
Read the full VPN explanation →

An engineer configures VXLAN EVPN on a Nexus 9000 switch. The configuration is shown. The switch does not advertise any EVPN routes for VNI 10100. Which configuration change is required to fix this issue?

Exhibit

Refer to the exhibit.

! NVE configuration
interface nve1
 no shut
 source-interface Loopback0
 member vni 10100
  mcast-group 239.1.1.100
!
! VRF configuration
vrf context TENANT-A
 rd 65000:1
 address-family ipv4 unicast
  route-target both 65000:100
 exit-address-family
!
! BGP EVPN configuration
router bgp 65000
 neighbor 10.1.1.1 remote-as 65000
 neighbor 10.1.1.1 update-source Loopback0
 address-family l2vpn evpn
  neighbor 10.1.1.1 activate
  neighbor 10.1.1.1 send-community extended
!
! VLAN configuration
vlan 100
 vn-segment 10100
!
! Interface configuration
interface Vlan100
 no shutdown
 vrf member TENANT-A
 ip address 192.168.100.1/24

Which TWO of the following are benefits of using network virtualization with VXLAN? (Choose two.)

Which THREE of the following are components of a Cisco ACI fabric? (Choose three.)

Question 10hardmultiple choice
Open the full BGP breakdown →

A financial services company has deployed Cisco UCS servers with VMware vSphere 7.0 to host critical trading applications. The network uses Cisco Nexus 9000 switches in a VXLAN EVPN fabric with BGP as the underlay. The environment includes 50 ESXi hosts, each connected via two 40G interfaces to two different leaf switches in a VPC. The VMs are spread across multiple hosts and communicate over VXLAN. Recently, the operations team migrated a set of VMs from an old VLAN-based network to a new VXLAN segment (VNI 50000). After the migration, users report intermittent connectivity issues and packet loss. The engineering team captures traffic and notices that some VMs send ARP requests that are not being replied to, even though the target VM is active. Further analysis shows that the ARP requests are being flooded to all VTEPs, but the replies are not reaching the source. The team checks the underlay and finds no issues with BGP or routing. The NVE interfaces are up, and the VNI is configured. Which of the following is the most likely cause of the issue?

Question 11mediummultiple choice
Read the full VRF explanation →

A network engineer is troubleshooting connectivity issues in a multi-tenant environment where each tenant's traffic is isolated using VRF-Lite. The engineer notices that tenants in the same VRF cannot communicate with each other across different access switches. Which design change should be implemented to enable inter-switch VRF communication?

Question 12hardmultiple choice
Read the full VPN explanation →

An organization is migrating from a traditional three-tier architecture to a leaf-spine fabric using VXLAN EVPN. The design requires that virtual machines can move between racks without IP address changes. Which technology must be enabled at the leaf switches to support this mobility?

Which TWO statements correctly describe characteristics of virtual device contexts (VDCs) in Cisco Nexus switches?

Question 14hardmultiple choice
Read the full VRF explanation →

A network engineer configured VRF TENANT_A and moved the subinterfaces into the VRF. After the change, the CEF table shows the prefixes but the next-hop addresses are unreachable. What is the most likely cause?

Exhibit

Refer to the exhibit.

CEF table snippet:
Prefix          Next Hop     Interface
10.1.1.0/24     192.168.1.2  Ethernet0/0
10.2.2.0/24     192.168.2.2  Ethernet0/1

CEF table after VRF configuration:
VRF: TENANT_A
Prefix          Next Hop     Interface
10.1.1.0/24     192.168.1.2  Ethernet0/0.100
10.2.2.0/24     192.168.2.2  Ethernet0/1.200
Question 15mediummultiple choice
Open the full BGP breakdown →

A service provider uses a Cisco ASR 1000 router to provide MPLS L3VPN services to multiple customers. Each customer has their own VRF. Recently, a new customer was added with VRF CUSTOMER_C. After configuration, the customer reports that they can reach some remote sites but not others. The network engineer checks the VRF configuration and finds that the route targets for CUSTOMER_C are correctly configured. The engineer also verifies that BGP sessions to the PE routers are up. The missing routes are from a site that uses a different PE router. Which action should the engineer take to resolve the issue?

Which TWO statements about virtual switching in a hypervisor environment are correct?

Question 17mediummultiple choice
Read the full VRF explanation →

Refer to the exhibit. A network engineer has configured VRFs on a router. A packet arrives on Gi0/1/0 with destination IP 10.1.1.2. Which VRF is used for routing this packet?

Exhibit

Refer to the exhibit.

! Output from 'show vrf' on a router
VRF-Name       Interfaces
Mgmt-intf      Gi0/0/0
CUSTOMER-A     Gi0/1/0, Gi0/1/1.10
CUSTOMER-B     Gi0/2/0, Gi0/2/1.20

! Output from 'show ip interface brief' for Gi0/1/0
Interface      IP-Address      OK? Method Status      Protocol
Gi0/1/0        10.1.1.1        YES manual up          up

! Output from 'show ip interface brief' for Gi0/1/1.10
Interface      IP-Address      OK? Method Status      Protocol
Gi0/1/1.10     10.1.1.2        YES manual up          up
Question 18hardmultiple choice
Study the full virtualization explanation →

A financial company runs a critical trading application in a virtualized environment on VMware vSphere. The application consists of two VMs: App-1 (web server) and App-2 (database server). Both VMs are on the same ESXi host. Recently, users report intermittent slowness during peak trading hours. Monitoring shows that App-1 experiences high CPU ready time (up to 15%) and App-2 has high disk latency (average 50 ms). The ESXi host has 16 vCPUs total (2 sockets, 8 cores each) and 128 GB RAM. The host runs 10 VMs total. App-1 has 4 vCPUs and 16 GB RAM; App-2 has 8 vCPUs and 32 GB RAM. The storage is a shared NFS datastore connected via 1 Gbps Ethernet. The network is 10 Gbps. What is the MOST effective course of action to resolve the performance issues?

Question 19mediumdrag order
Review the full OSPF breakdown →

Drag and drop the steps to configure OSPF on a Cisco router in the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5
Question 20mediumdrag order
Read the full VPN explanation →

Drag and drop the steps to configure a site-to-site IPsec VPN on a Cisco router in the correct order.

Drag steps to the numbered slots on the right, or tap a step then tap a slot.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Focused Virtualization sessions

Start a Virtualization only practice session

Every question in these sessions is drawn from the Virtualization domain — nothing else.

Related practice questions

Related 350-401 topic practice pages

Move into related areas when this topic feels solid.

Frequently asked questions

What does the 350-401 exam test about Virtualization?
Virtualization questions on this certification test your ability to deploy and manage virtualization concepts in scenario-based situations.
How should I use these practice questions?
Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Virtualization questions in a focused session?
Yes — the session launcher on this page draws every question from the Virtualization domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other 350-401 topics?
Use the topic links above to move to related areas, or go back to the 350-401 question bank to see all topics.
Are these real exam questions or dumps?
These are original practice questions written to test the same concepts the 350-401 exam covers. They are not copied from any real exam or dump site.