Courseiva
Free · No account needed · No credit card

ENCOR 350-401 Practice Test

1,923 questions with instant explanations, domain breakdown, and wrong-answer analysis. Built for the real exam.

Instant feedback after each answer
Full explanations included
Domain score breakdown
Real exam: 120 min
Pass mark: Variable

Sample questions with explanations

This is exactly what you see during practice — question, options, and a full explanation after you answer.

Q1Securityhard
Full explanation →

Your company has deployed a Cisco Catalyst 9300 switch stack as the distribution layer for a campus network. The network uses VLANs 10 (data), 20 (voice), and 30 (management). The switch stack is configured with DHCP snooping, Dynamic ARP Inspection (DAI), and IP Source Guard (IPSG) on access ports. Recently, users in VLAN 10 report intermittent connectivity issues. You notice that some users receive duplicate IP addresses from the DHCP server. The DHCP server is connected to a trunk port on the switch stack. After reviewing logs, you see that DHCPACK messages are being dropped on the trunk port. The DHCP snooping binding table shows entries for legitimate clients, but also some entries with MAC addresses from a different vendor. Which action should you take to resolve the issue?

AManually shut down the access ports that have unknown MAC addresses in the binding table.
BDisable Dynamic ARP Inspection on VLAN 10.
Configure the trunk port connecting to the DHCP server as a trusted port for DHCP snooping.Correct
DDisable IP Source Guard on all access ports in VLAN 10.

The DHCP snooping feature treats all ports as untrusted by default, which means DHCP server messages (DHCPOFFER, DHCPACK, DHCPNAK) are dropped on untrusted ports. Since the DHCP server is connected to a trunk port and DHCPACK messages are being dropped, that trunk port must be ex…Read full explanation

Which two statements about MPLS label operations are true? (Choose two.)

The ingress LSR imposes a label onto the packet.Correct
The egress LSR removes the label before forwarding the IP packet.Correct
CThe egress LSR pushes a new label onto the packet.
DEach LSR in the LSP performs label imposition.

Option A is correct because the ingress LSR (label edge router) is the entry point of the MPLS domain and performs label imposition (push), adding an MPLS shim header to the incoming IP packet before forwarding it into the LSP. Option B is correct because the egress LSR (also an …Read full explanation

A network team must design QoS for a campus network that carries voice, video, and data traffic. The design must use the DiffServ model and ensure that voice traffic is prioritized over all other traffic classes. Which DSCP marking and queuing strategy should be used for voice?

AMark voice with AF41 and place in a weighted fair queue.
Mark voice with EF and place in a strict priority queue.Correct
CMark voice with CS3 and place in a low-latency queue.
DMark voice with BE and rely on WRED for drop precedence.

Voice traffic requires strict priority to ensure minimal jitter and latency. DSCP EF (Expedited Forwarding, per RFC 3246) is the standard marking for real-time traffic like voice, and placing it in a strict priority queue (LLQ) guarantees that voice packets are serviced before an…Read full explanation

Untimed Practice

Answer at your own pace. Explanation and domain tag shown immediately after each answer.

Timed Practice

Countdown timer starts immediately. Results and domain scores shown at the end — just like the real exam.

Why practice here?

Full explanations on every question

Not just the right answer — you get exactly why each wrong option is wrong, so you learn the concept, not the answer.

Domain score breakdown

After each session see your score by exam domain so you know exactly where to focus study time.

100% free, forever

No subscription, no trial, no email wall. Start a session in under 10 seconds.

Exam-style questions

Scenario-based, precise wording, realistic distractors — written to match what you actually see on exam day.

← All 350-401 questions350-401 exam guideStudy guidePractice by domain