Courseiva
Question 1,477 of 1,420
mediumMultiple ChoiceObjective-mapped

Hierarchical Campus Network Design — Choosing Three-Tier vs Collapsed Core

A network architect is designing a campus network for a large university with 10,000+ users. The design must provide high availability, minimize failure domains, and allow for easy scaling of the access layer. The core layer should be resilient and support fast convergence. Which hierarchical design model best meets these requirements?

Quick Answer

The three-tier hierarchical design with access, distribution, and core layers is the correct choice because it provides clear separation of failure domains, allows easy scaling by adding access switches, and supports high availability through redundant links and VRRP for gateway redundancy. For a large campus with 10,000+ users, this model isolates problems at the access layer so they don’t propagate to the core, while the distribution layer aggregates traffic and provides first-hop redundancy. On the ENCOR 350-401 exam, this question tests your understanding of how hierarchical design principles map to real-world scalability and resilience—a common trap is choosing collapsed core for simplicity, but that merges distribution and core functions, creating a single failure domain and limiting future expansion. Remember the memory tip: “Three tiers for three needs—scale, separate, and stabilize.”

⚠ Common exam trap

Cisco often tests the misconception that a collapsed core design is always more efficient for small-to-medium networks, but for a large campus with 10,000+ users, the three-tier model is required to minimize failure domains and allow independent scaling of the access layer.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

Three-tier hierarchical design with access, distribution, and core layers, using redundant links and VRRP for gateway redundancy

The three-tier hierarchical design (access, distribution, core) is the correct choice because it provides clear separation of failure domains, allows easy scaling by adding access switches, and supports high availability through redundant links and VRRP (or HSRP/GLBP) for first-hop gateway redundancy. The core layer can be designed with fast-converging protocols like ECMP and BFD to meet the resilience and convergence requirements for a large campus with 10,000+ users.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • Three-tier hierarchical design with access, distribution, and core layers, using redundant links and VRRP for gateway redundancy

    Why this is correct

    This design separates failure domains, provides high availability via redundancy, and scales by adding distribution or access switches.

  • Collapsed core design with core and distribution combined into one layer

    Why it's wrong here

    Collapsed core reduces the number of layers but can create a larger failure domain and may not scale well for 10,000+ users.

  • Flat Layer 2 design with all switches in a single VLAN

    Why it's wrong here

    Flat Layer 2 designs have large failure domains, poor scalability, and slow convergence due to spanning tree.

  • Leaf-spine design with all switches acting as leafs and spines

    Why it's wrong here

    Leaf-spine is optimized for data center east-west traffic; in a campus, it can be complex and may not align with typical north-south traffic patterns.

About these practice questions

Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Same concept, more angles

1 more way this is tested on 350-401

These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.

Variation 1. Which two statements about the Cisco Enterprise Campus Architecture are true? (Choose two.)

medium
  • A.The distribution layer provides policy-based connectivity and controls traffic flow between access and core layers.
  • B.The access layer is responsible for routing between VLANs and providing high-speed switching for the campus backbone.
  • C.The core layer should be designed for high-speed transport and minimal latency, avoiding CPU-intensive features like ACLs.
  • D.A two-tier hierarchical design (collapsed core) is recommended for large campus networks with thousands of users.
  • E.The core layer should enforce security policies and perform packet inspection to protect the campus network.

Why A: The Cisco Enterprise Campus Architecture uses a hierarchical model to improve scalability, performance, and manageability. The access layer provides user and device connectivity, often with VLANs and PoE. The distribution layer aggregates access switches and provides policy enforcement, while the core layer provides high-speed transport. The collapsed core design merges core and distribution for smaller networks. Option A is correct because the distribution layer is indeed the policy enforcement point. Option C is correct because the core layer should be optimized for high-speed switching without complex policies. Option B is incorrect because the access layer typically does not perform routing between VLANs (that is a distribution layer function). Option D is incorrect because a two-tier design (collapsed core) is actually recommended for smaller campuses, not larger ones. Option E is incorrect because the core layer should not be used for security filtering, which is a distribution layer role.

Last reviewed: Jun 24, 2026

Question Discussion

Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.

Loading comments…

Sign in to join the discussion.

This 350-401 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 350-401 exam.