350-401 Infrastructure Practice Question
A network engineer is configuring a Cisco Catalyst switch to support a new wireless access point that will carry management traffic on VLAN 10 and client traffic on VLAN 20. The AP connects to a single switchport and requires both VLANs to be trunked with 802.1Q tagging, with VLAN 10 as the native VLAN. Which configuration on the switchport will meet these requirements?
⚠ Common exam trap
The trap here is assuming that an access point always uses an access port for management, but in this scenario, multiple VLANs require a trunk with a specific native VLAN.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
switchport mode trunk switchport trunk native vlan 10 switchport trunk allowed vlan 10,20
The switchport must be configured as a trunk to carry multiple VLANs. Setting the native VLAN to 10 ensures untagged management traffic uses VLAN 10, and allowing VLANs 10 and 20 permits both management and client traffic. The other options either do not enable trunking, set the wrong native VLAN, or use a dynamic mode that may not form a trunk with an access point.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
switchport mode trunk switchport trunk native vlan 10 switchport trunk allowed vlan 10,20
Why this is correct
This correctly configures the port as an 802.1Q trunk, sets VLAN 10 as the native VLAN (untagged), and allows both VLAN 10 and VLAN 20 on the trunk. The AP can send management traffic untagged on VLAN 10 and tag client traffic for VLAN 20, exactly matching the requirements for the wireless deployment.
- ✗
switchport mode dynamic auto switchport trunk native vlan 10 switchport trunk allowed vlan 10,20
Why it's wrong here
Dynamic auto mode will not actively form a trunk unless the other side is set to trunk or desirable. The AP typically does not initiate trunk negotiation, so the link would remain an access port. Even if a trunk formed, the native VLAN and allowed VLANs would be correct, but the mode prevents proper operation in this scenario.
- ✗
switchport mode access switchport access vlan 10 switchport trunk allowed vlan 20
Why it's wrong here
This configuration sets the port to access mode, which can only carry one untagged VLAN. The switchport trunk allowed vlan command is not valid in access mode and would be rejected or ignored. The AP would not receive tagged frames for VLAN 20, so client traffic would fail. A trunk is required to carry multiple VLANs.
- ✗
switchport mode trunk switchport trunk encapsulation dot1q switchport trunk native vlan 20 switchport trunk allowed vlan 10,20
Why it's wrong here
Although this sets the port to trunk mode with 802.1Q encapsulation, it incorrectly sets VLAN 20 as the native VLAN instead of VLAN 10. The requirement specifies VLAN 10 as the native VLAN. With VLAN 20 as native, management traffic on VLAN 10 would be tagged, which may not match the AP configuration, causing connectivity issues.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 350-401 question from scratch — 1,923 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.