Courseiva

350-401 · topic practice

Architecture practice questions

Architecture covers enterprise design principles for the 350-401 ENCOR exam. It tests SD-WAN, SD-Access, underlay/overlay separation, OSPF area types, QoS queuing, and high-availability mechanisms. Questions present deployment scenarios and ask you to choose the correct protocol behavior, feature, or design consideration.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Editorial oversight:Johnson Ajibi· MSc IT Security, IEEE Senior Member
20 questionsDomain: Architecture

What the exam tests

What to know about Architecture

You must design and verify enterprise architectures using SD-WAN, SD-Access, OSPF area types, and QoS. The most important thing is to know how each technology segments, routes, and prioritizes traffic in a given scenario.

Cisco SD-WAN segmentation using VPNs and VRF-aware routing for guest, employee, and IoT traffic

SD-Access underlay requirements: IP reachability, MTU, and routing protocol consistency

OSPF LSA types in totally stubby areas (Type 1, Type 2, Type 3 only)

QoS low-latency queuing (LLQ) for strict priority of voice traffic on outbound interfaces

Watch out for

Common Architecture exam traps

  • ▸Assuming a totally stubby area still allows Type 4 or Type 5 LSAs; it blocks them and uses a default route instead.
  • ▸Confusing SD-WAN VPN segmentation with traditional VRF-lite; SD-WAN uses VPN IDs and BFD across overlays.
  • ▸Believing SD-Access underlay requires a specific routing protocol like IS-IS, when any IP-routed underlay works.

Practice set

Architecture questions

20 questions · select your answer, then reveal the explanation

Question 1mediummultiple choice
Review the full routing breakdown →

A network engineer is designing a campus network with high availability for critical services. Which Cisco technology enables traffic to be forwarded to an alternate next hop in the event of a first-hop router failure, without requiring any configuration changes on the hosts?

Question 2mediummulti select
Read the full Architecture explanation →

Which TWO characteristics are true about Cisco StackWise virtual technology? (Choose two.)

Question 3mediumdrag order
Open the full STP breakdown →

Drag and drop the steps for the Spanning Tree Protocol (STP) convergence process in the correct order.

Drag or tap steps into the slots.

Steps
Order
1Step 1
2Step 2
3Step 3
4Step 4
5Step 5

Match each routing protocol to its administrative distance.

Drag a concept onto its matching description — or click a concept then click the description.

Concepts
Matches

110

90

120

20

115

Question 5mediummultiple choice
Study the full SD-Access breakdown →

A campus network designer is evaluating a Cisco SD-Access fabric. The design requires that the fabric be able to route traffic between endpoints in different virtual networks without the traffic leaving the fabric, while maintaining isolation. Which fabric component is responsible for this inter-VN routing?

Question 6mediummulti select
Study the full SD-WAN breakdown →

A network engineer is designing a Cisco SD-WAN solution for a company with multiple branches. The engineer must ensure that the SD-WAN fabric provides secure, scalable connectivity and application-aware routing. Which two components are part of the Cisco SD-WAN architecture? (Choose two.)

Question 7easymultiple choice
Read the full Architecture explanation →

A network engineer is configuring a Cisco Catalyst 9000 switch with StackWise Virtual technology. The engineer wants to ensure that the control plane remains active on both switches in the stack. Which command should be used to verify the StackWise Virtual configuration and confirm that both switches are in the active-active state?

Question 8mediummulti select
Study the full SD-Access breakdown →

A network engineer is deploying Cisco SD-Access and needs to understand the roles of fabric nodes. Which two node types are responsible for connecting external networks to the fabric? (Choose two.)

Question 9hardmulti select
Read the full wireless explanation →

A network engineer is deploying Cisco SD-Access and needs to ensure that the fabric supports both wired and wireless clients with consistent policy enforcement. Which two components are required to achieve this integration? (Choose two.)

Question 10hardmulti select
Read the full wireless explanation →

A network architect is designing a new campus network using Cisco SD-Access. The architect must ensure that the fabric supports both wired and wireless endpoints with consistent policy enforcement. Which two components are required to integrate wireless access into the SD-Access fabric? (Choose two.)

Question 11mediummultiple choice
Open the full STP breakdown →

A network engineer is designing a high-availability solution for a data center. The requirement is to provide loop-free Layer 2 multipathing with active-active forwarding and no Spanning Tree Protocol blocking. Which technology should be used?

Question 12mediummultiple choice
Study the full SD-Access breakdown →

A network engineer is deploying Cisco SD-Access and needs to ensure that endpoints in the same virtual network can communicate with each other even when they are attached to different fabric edge nodes. Which component is responsible for this?

Question 13mediummultiple choice
Read the full Architecture explanation →

A Cisco Catalyst 9000 switch stack in a distribution layer has been running Cisco StackWise-480 for several months. A network engineer notices that when the active switch reloads, the standby switch takes over, but the uplink ports on the newly active switch remain in a blocking state for approximately 30 seconds before forwarding traffic. The engineer wants to reduce this convergence time. Which Cisco StackWise feature should be configured to allow the standby switch to pre-build its forwarding information and take over faster?

Question 14easymultiple choice
Open the full VLAN trunking answer →

A network administrator is configuring a new Cisco Catalyst switch and needs to ensure that the management VLAN is configured with an IP address and is reachable from a remote subnet. Which command should be used to assign an IP address to the management VLAN interface?

Question 15mediummultiple choice
Read the full wireless explanation →

An enterprise campus uses a Cisco Catalyst 9800 Series Wireless Controller running IOS-XE with a single C9800-L appliance that must serve 5,000 access points and 40,000 clients. The network architect needs to design the wireless architecture so that the controller handles only control-plane traffic while client data is forwarded directly from the access points. Which Cisco wireless architecture should be deployed?

Question 16easymultiple choice
Read the full DHCP explanation →

A network engineer is configuring a Cisco IOS router to act as a DHCP server for a branch subnet. The requirement is to exclude a range of addresses that are statically assigned to printers and servers. Which command should the engineer use inside the DHCP pool configuration?

Question 17mediummultiple choice
Read the full Architecture explanation →

A network architect is designing a new branch office that requires a lightweight, programmable underlay with native VXLAN support and centralized control plane via an external SDN controller. The switches must support open APIs and be manageable through a single pane of glass. Which Cisco platform best meets these requirements?

Question 18easymultiple choice
Open the full VLAN trunking answer →

A network administrator is configuring a new Cisco Wireless LAN Controller (WLC) running AireOS. The administrator wants to ensure that the management interface is reachable from the wired network and that the WLC can communicate with access points. Which interface on the WLC must be configured with an IP address and be connected to a switch port that supports trunking?

Question 19easymultiple choice
Read the full Architecture explanation →

A network administrator is configuring a new Cisco Catalyst 9000 switch for a branch office. The administrator wants to ensure that the switch can be managed remotely via SSH and that only secure protocols are used for management. Which configuration step is necessary to enable SSH access?

Question 20hardmultiple choice
Read the full Architecture explanation →

A network architect is designing a campus network using Cisco StackWise Virtual technology. The design requires that the two switches appear as a single logical entity to the access layer and that traffic is forwarded efficiently. Which statement is true about StackWise Virtual?

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Focused Architecture sessions

Start a Architecture only practice session

Every question in these sessions is drawn from the Architecture domain — nothing else.

Related practice questions

Related 350-401 topic practice pages

Move into related areas when this topic feels solid.

Frequently asked questions

What does the 350-401 exam test about Architecture?
You must design and verify enterprise architectures using SD-WAN, SD-Access, OSPF area types, and QoS. The most important thing is to know how each technology segments, routes, and prioritizes traffic in a given scenario.
How should I use these practice questions?
Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Architecture questions in a focused session?
Yes — the session launcher on this page draws every question from the Architecture domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other 350-401 topics?
Use the topic links above to move to related areas, or go back to the 350-401 question bank to see all topics.
Are these real exam questions or dumps?
These are original practice questions written to test the same concepts the 350-401 exam covers. They are not copied from any real exam or dump site.