350-401 · topic practice

Network Function Virtualization practice questions

Practise questions on virtualization concepts cover hypervisor types, VM resource management, and host/guest relationships for 350-401.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security
20 questionsDomain: Network Function Virtualization

What the exam tests

What to know about Network Function Virtualization

Tests understanding of hypervisors, virtual machines, resource allocation, and host vs. guest OS requirements.

Identify Type 1 vs Type 2 hypervisors and their use cases.

Understand virtual machine resource allocation (CPU, RAM, storage).

Recognize host vs. guest operating system roles.

Know virtualization security and isolation requirements.

Why learners struggle

Why Network Function Virtualization questions are commonly missed

Learners often confuse Type 1 and Type 2 hypervisors, and misunderstand VM resource limits versus host capabilities. The abstract nature of virtualized hardware makes it hard to apply to real scenarios.

  • ·Type 1 vs Type 2 hypervisor — which runs directly on hardware.
  • ·Host vs guest OS — which controls physical resources.
  • ·Overcommitment — VM resources can exceed host physical limits.
  • ·Snapshot vs backup — snapshot is not a full backup.
  • ·Virtual switch vs physical switch — network isolation differences.
  • ·Hardware compatibility — guest OS may lack drivers for virtual hardware.

Watch out for

Common Network Function Virtualization exam traps

  • Confusing Type 1 hypervisor with Type 2 (e.g., VMware ESXi vs Workstation).
  • Thinking a VM can use more resources than the host has.
  • Assuming all hypervisors support the same guest OS features.
  • Forgetting that snapshots capture state, not backups.

Practice set

Network Function Virtualization questions

20 questions · select your answer, then reveal the explanation

Question 1mediummultiple choice
Study the full virtualization explanation →

A company is migrating its legacy firewall services to a virtualized environment using Cisco NFV. The network engineer deploys a virtual firewall (vFW) on an NFVIS-enabled UCS platform. After the deployment, traffic through the vFW is intermittent and performance monitoring shows high CPU usage on the host. Which action should the engineer take to improve performance?

Question 2mediummultiple choice
Study the full virtualization explanation →

An enterprise is deploying a virtual router (vRouter) as part of its NFV infrastructure. The engineer needs to ensure that the vRouter can handle a sudden spike in traffic without dropping packets. The vRouter is running on a KVM hypervisor. What should the engineer configure to guarantee CPU resources for the vRouter during peak demand?

Question 3hardmultiple choice
Study the full SD-WAN breakdown →

A network engineer is deploying a virtual WAN edge device using Cisco SD-WAN on an NFVIS platform. After powering on the VM, the device fails to boot and the NFVIS console shows 'ERROR: No bootable device found'. The engineer verified that the ISO image is correctly uploaded. What is the most likely cause?

Question 4mediummultiple choice
Study the full virtualization explanation →

An engineer is managing a Cisco NFVIS host running multiple virtual network functions (VNFs). The engineer needs to upgrade the NFVIS software to a new version that includes critical security patches. The upgrade process must minimize downtime. Which upgrade method should the engineer use?

Question 5mediummultiple choice
Study the full virtualization explanation →

A company uses Cisco NFVIS to host a virtual ASA (vASA) and a virtual router (vRouter). The engineer notices that the vASA cannot communicate with the vRouter even though both are on the same NFVIS host. The vASA is connected to a bridge network, and the vRouter is connected to a different bridge. What should the engineer do to enable communication between the two VNFs?

An engineer is deploying a virtual network function (VNF) on a Cisco NFVIS host. The VNF requires four virtual NICs, each connected to a different network segment. The engineer creates four bridges on NFVIS and attaches each vNIC to a separate bridge. After deployment, the VNF can only communicate on the first bridge. What is the most likely cause?

A network engineer is troubleshooting a performance issue with a virtual firewall (vFW) running on a Cisco NFVIS host. The vFW is experiencing high packet loss during peak traffic. The engineer checks the NFVIS monitoring dashboard and sees that the vFW's CPU usage is low, but the host's memory usage is high. What is the most likely cause of the packet loss?

An engineer is deploying a virtual router (vRouter) on a Cisco NFVIS host. The vRouter needs to advertise routes to a physical router connected to the host's management port. The engineer configures the vRouter with an IP address on the same subnet as the management port. However, the physical router does not receive any routing updates. What should the engineer do to enable route exchange?

A company is deploying a virtual WAN optimizer (vWAAS) on a Cisco NFVIS host. The engineer needs to ensure that the vWAAS can intercept traffic between two VNFs running on the same host. The traffic currently flows directly between the VNFs without passing through the vWAAS. What should the engineer configure to redirect the traffic?

Question 10mediummultiple choice
Study the full virtualization explanation →

A company is deploying a virtualized network function (VNF) on a KVM-based host. The VNF requires dedicated CPU cores and must avoid performance interference from other VMs. Which hypervisor configuration best meets these requirements?

Question 11mediummultiple choice
Study the full SD-WAN breakdown →

An architect is designing an SD-WAN deployment for a multinational enterprise. The design must ensure that control plane traffic remains separate from data plane traffic and that the solution can scale to thousands of sites. Which architectural component is responsible for maintaining the control plane and distributing routing information?

Question 12easymultiple choice
Study the full QoS explanation →

A network team must design QoS for a campus network that carries voice, video, and data traffic. The design must use the DiffServ model and ensure that voice traffic is prioritized over all other traffic classes. Which DSCP marking and queuing strategy should be used for voice?

Question 13mediummultiple choice
Study the full virtualization explanation →

An enterprise is migrating its data center to a leaf-spine architecture. The design must provide high availability and support for east-west traffic patterns. Which design choice best meets these requirements?

Question 14hardmultiple choice
Study the full virtualization explanation →

A service provider wants to deploy a virtualized firewall as a VNF in a service chain. The VNF must be inserted transparently into the traffic path without requiring changes to the existing IP addressing. Which service chaining method should the architect choose?

Question 15mediummultiple choice
Study the full SD-Access breakdown →

An architect is designing an SD-Access fabric for a large enterprise campus. The design must support segmentation based on user identity and device type, and must integrate with Cisco ISE. Which fabric component and protocol should be used to enforce micro-segmentation?

Question 16mediummultiple choice
Study the full virtualization explanation →

A company is deploying a virtualized router (CSR1000v) on VMware vSphere. The VNF must support high throughput and low latency. Which vSphere configuration option should the architect select to optimize network performance?

Question 17mediummultiple choice
Study the full SD-WAN breakdown →

An architect is designing an SD-WAN policy to ensure that real-time video traffic from headquarters to branch offices is always sent over the most reliable transport, while all other traffic uses the least-cost path. Which type of policy should be used to achieve this?

Question 18easymultiple choice
Study the full QoS explanation →

A network team must design a QoS policy for a WAN link that carries voice, video, and data. The policy must ensure that voice traffic is never dropped, even during congestion. Which queuing mechanism should be used for the voice class?

Question 19mediummultiple choice
Review the full OSPF breakdown →

Examine the following configuration snippet:

interface GigabitEthernet0/1
 ip address 192.168.1.1 255.255.255.0
 ip ospf hello-interval 20
 ip ospf dead-interval 80

What is the effect of this configuration?

Question 20mediummultiple choice
Study the full EIGRP explanation →

Consider the following configuration:

router eigrp TEST
 network 10.0.0.0 0.255.255.255

metric weights 0 1 0 1 0 0

What is the effect of the 'metric weights' command?

Free account

Track your progress over time

Create a free account to save your results and see which topics improve across sessions.

Focused Network Function Virtualization sessions

Start a Network Function Virtualization only practice session

Every question in these sessions is drawn from the Network Function Virtualization domain — nothing else.

Related practice questions

Related 350-401 topic practice pages

Move into related areas when this topic feels solid.

Frequently asked questions

What does the 350-401 exam test about Network Function Virtualization?
Tests understanding of hypervisors, virtual machines, resource allocation, and host vs. guest OS requirements.
How should I use these practice questions?
Select your answer before revealing the explanation. Then read why each option is right or wrong — this active recall approach builds retention far faster than re-reading notes.
Can I practise just Network Function Virtualization questions in a focused session?
Yes — the session launcher on this page draws every question from the Network Function Virtualization domain. Use a 10-question session first to gauge your baseline, then move to 20 or 30 once the weak spots are clear.
Where can I practise other 350-401 topics?
Use the topic links above to move to related areas, or go back to the 350-401 question bank to see all topics.
Are these real exam questions or dumps?
These are original practice questions written to test the same concepts the 350-401 exam covers. They are not copied from any real exam or dump site.