Courseiva
Back to ENCOR 350-401 questions

Scenario-based practice

Drag and Drop Matching Questions

Practise ENCOR 350-401 practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

20
scenario questions
350-401
exam code
Cisco
vendor

Scenario guide

How to approach drag and drop matching questions

Matching questions give you two columns — concepts, commands, or protocols on the left, and their definitions or use-cases on the right. You drag each left item to its correct match. These appear on most certification exams and punish superficial memorisation.

Quick answer

Drag and Drop Matching Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Related practice questions

Related 350-401 topic practice pages

Scenario questions usually connect to one or more exam topics. Use these links to review the underlying concepts behind the scenario.

Practice set

Practice scenarios

Question 1mediummatching
Study the full SD-WAN breakdown →

Drag and drop each SD-WAN policy type on the left to its matching application point on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Applied to data traffic for SLA-based path selection

Applied to enable NetFlow-like traffic monitoring

Applied to modify forwarding, NAT, or QoS on data packets

Applied to OMP routes and TLOCs for route manipulation

Applied to define which VPNs are provisioned on a device

Question 2mediummatching
Full question →

Drag and drop each HTTP method on the left to its matching REST operation on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Retrieve a resource

Create a new resource

Replace an existing resource entirely

Remove a resource

Apply partial modifications to a resource

Drag and drop each Netmiko device type on the left to its matching operating system on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Cisco IOS (classic)

Cisco NX-OS

Cisco IOS-XR

Cisco IOS-XE

Arista EOS

Drag and drop each Python library on the left to its matching network use case on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Simplifies SSH connections to network devices

Provides a unified API for configuration and state retrieval

Enables parallel task execution across inventory

Supports asynchronous network device communication

Offers raw SSH protocol implementation

Question 5mediummatching
Study the full SD-WAN breakdown →

Drag and drop each WAN transport type on the left to its matching SD-WAN characteristic on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Predictable latency and SLA, private Layer 3 VPN

Low cost, best-effort, public IP addressing

Wireless backup, variable throughput, cellular network

High latency, global coverage, limited bandwidth

High bandwidth, low latency, metro-area Layer 2 connectivity

Drag and drop each NAPALM getter on the left to its matching returned data on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Device hostname, vendor, model, OS version, serial number

Interface name, description, IP address, status, speed

BGP neighbor IP, remote AS, state, uptime

LLDP neighbor device ID, port ID, platform

Power supply, fan, temperature status

Question 7mediummatching
Review the full OSPF breakdown →

Drag and drop each OSPF router role on the left to its matching function on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Generates the Network LSA and maintains full adjacencies with all routers on the segment

Monitors the DR and assumes the DR role if the DR fails

Forms full adjacencies only with the DR and BDR

Connects multiple areas and advertises inter-area routes

Redistributes external routes into OSPF

Question 8mediummatching
Full question →

Drag and drop each EAP method on the left to its matching authentication type on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Certificate-based mutual authentication

Tunneled authentication with MSCHAPv2

Protected Access Credential (PAC) based

Simple password hash (no server certificate)

Generic Token Card (one-time password)

Drag and drop each NFV component on the left to its matching role on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Virtualized network function software (e.g., virtual router)

Physical and virtual resources (compute, storage, networking)

Orchestration and lifecycle management framework

Manages NFVI resources (e.g., OpenStack)

Manages lifecycle of individual VNFs

Drag and drop each NETCONF operation on the left to its action on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Retrieve running configuration and state data

Retrieve configuration from a specific datastore

Modify the target configuration datastore

Confirm a candidate configuration as the new running config

Prevent other NETCONF sessions from altering a datastore

Drag and drop each RESTCONF method on the left to its equivalent NETCONF operation on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

get-config (retrieves data)

edit-config with operation create

edit-config with operation replace

edit-config with operation merge

edit-config with operation delete

Drag and drop each NetFlow version on the left to its matching feature on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Fixed-format records with no templates; Supports only key fields and a limited set of non-key fields

Template-based flow records with user-defined fields; Introduces the concept of flow templates

Standardized version of NetFlow with variable-length fields

Question 13mediummatching
Full question →

Drag and drop each IKEv2 exchange on the left to its matching phase on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Phase 1 key agreement

Phase 2 authentication and policy

Rekey or additional SA

Error and status exchange

Phase 1 response with DH public value

Question 14mediummatching
Read the full VPN explanation →

Drag and drop each DMVPN phase on the left to its matching NHRP operation type on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Hub-and-spoke with NHRP registration

Spoke-to-spoke dynamic tunnel via NHRP resolution request/reply

NHRP with prefix-based spoke-to-spoke shortcut

Question 15mediummatching
Full question →

Drag and drop each IP SLA schedule parameter on the left to its function on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Defines when the operation begins

Sets the interval between probes

Sets the total duration of the operation

Removes the operation after inactivity

Sets the value that triggers a reaction

Question 16easymatching
Full question →

Drag and drop each broadband type on the left to its matching technology on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Uses telephone line with ADSL or VDSL

Uses coaxial cable with DOCSIS

Uses optical fiber with GPON

Uses cellular radio with OFDMA

Uses geostationary satellite with high latency

Question 17mediummatching
Full question →

Drag and drop each CoS value on the left to its matching traffic type on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Voice payload

Video conferencing

Call signaling

Critical data

Best-effort data

Question 18mediummatching
Open the full BGP breakdown →

Drag and drop each MP-BGP address family on the left to its matching use case on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Carries IPv4 VPN routes with MPLS labels across the provider core

Carries IPv6 VPN routes with MPLS labels across the provider core

Carries global IPv4 unicast routes (non-VPN)

Carries global IPv6 unicast routes (non-VPN)

Carries Layer 2 VPN information such as pseudowires and VPLS

Question 19mediummatching
Full question →

Drag and drop each First Hop Redundancy Protocol on the left to its matching function on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Cisco-proprietary active/standby gateway redundancy with one virtual IP

Open standard with master/backup election and one virtual IP

Cisco-proprietary load-balancing across multiple gateways using AVF/AVG

Adds support for IPv6 and increased group numbers

Supports IPv4 and IPv6 with improved timers

Drag and drop each SD-Access fabric role on the left to its matching function on the right.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

Connects the SD-Access fabric to external Layer 2 or Layer 3 networks

Attaches wired endpoints to the fabric and enforces access policies

Hosts the LISP map-server and map-resolver functions

Manages wireless endpoints and integrates with the fabric edge

Provides wireless connectivity and tunnels client traffic to the fabric edge

These 350-401 practice questions are part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style 350-401 questions with detailed explanations, topic-based practice, mock exams, readiness tracking, and study analytics.