Courseiva
Question 307 of 1,420
mediumMultiple SelectObjective-mapped

350-401 Practice Question: Which two statements about the Cisco Enterprise…

Which two statements about the Cisco Enterprise Campus Architecture are true? (Choose two.)

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The distribution layer provides policy-based connectivity and controls traffic flow between access and core layers.

The Cisco Enterprise Campus Architecture uses a hierarchical model to improve scalability, performance, and manageability. The access layer provides user and device connectivity, often with VLANs and PoE. The distribution layer aggregates access switches and provides policy enforcement, while the core layer provides high-speed transport. The collapsed core design merges core and distribution for smaller networks. Option A is correct because the distribution layer is indeed the policy enforcement point. Option C is correct because the core layer should be optimized for high-speed switching without complex policies. Option B is incorrect because the access layer typically does not perform routing between VLANs (that is a distribution layer function). Option D is incorrect because a two-tier design (collapsed core) is actually recommended for smaller campuses, not larger ones. Option E is incorrect because the core layer should not be used for security filtering, which is a distribution layer role.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The distribution layer provides policy-based connectivity and controls traffic flow between access and core layers.

    Why this is correct

    Correct because the distribution layer is the policy enforcement boundary, implementing routing, QoS, and security policies.

  • The access layer is responsible for routing between VLANs and providing high-speed switching for the campus backbone.

    Why it's wrong here

    Incorrect because routing between VLANs is typically done at the distribution layer, not the access layer.

  • The core layer should be designed for high-speed transport and minimal latency, avoiding CPU-intensive features like ACLs.

    Why this is correct

    Correct because the core layer's primary role is fast, reliable transport; adding complex features would degrade performance.

  • A two-tier hierarchical design (collapsed core) is recommended for large campus networks with thousands of users.

    Why it's wrong here

    A two-tier collapsed core design lacks the dedicated core layer needed to handle the high-density routing and east-west traffic demands of thousands of users; large campus networks require a three-tier architecture with a separate core to provide sufficient forwarding capacity and redundancy. This option is tempting because a collapsed core works well for smaller or medium-sized campuses where the distribution and core functions can be combined without overwhelming the switch fabric.

  • The core layer should enforce security policies and perform packet inspection to protect the campus network.

    Why it's wrong here

    Incorrect because security enforcement is a distribution layer function; the core should focus on speed and availability.

Visual reference

Switch VLAN 10 Sales (192.168.10.0/24) PC-A PC-B VLAN 20 HR (192.168.20.0/24) PC-C PC-D Router VLANs isolate traffic — inter-VLAN routing requires a Layer 3 device

About these practice questions

Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Last reviewed: Jun 18, 2026

Question Discussion

Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.

Loading comments…

Sign in to join the discussion.

This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.