SkillTestPro | CCNP 350-401 ENCOR Practice Test 1

CCNP ENCOR 350-401 Practice Test 1 (Hard)

CCNP Enterprise logo

1 / 30

In a two-tier (collapsed core) campus architecture, which layer combines the traditional distribution and core layer functions into a single layer?

The leaf layer

The collapsed core (distribution/core) layer

The WAN edge layer

The access layer

The data center core layer

The spine layer

2 / 30

Which Cisco SD-Access fabric component is responsible for encapsulating and forwarding traffic between fabric edge nodes using VXLAN?

The fabric control plane (LISP)

The fabric policy plane (Cisco TrustSec/SGT)

The identity services engine alone

The border node alone

The fabric management plane (DNA Center)

The fabric data plane (VXLAN)

3 / 30

Which Cisco SD-Access fabric component uses LISP to maintain a mapping of endpoint identity to its current location within the fabric?

The fabric control plane (LISP)

The fabric policy plane (Cisco TrustSec/SGT)

The fabric management plane (DNA Center)

The fabric edge node alone

The intermediate node alone

The fabric data plane (VXLAN)

4 / 30

On a Cisco IOS-XE switch, which type of VLAN interface is required to allow inter-VLAN routing to occur on a Layer 3 switch, without using a router-on-a-stick configuration?

An access port alone

A trunk port alone

An EtherChannel port alone

A switch virtual interface (SVI)

A routed port alone

A subinterface alone

5 / 30

Which First Hop Redundancy Protocol (FHRP) is a Cisco-proprietary protocol that allows multiple routers to share a virtual IP and MAC address, with one active and others in standby?

BFD

LACP

GLBP alone

HSRP (Hot Standby Router Protocol)

STP

VRRP

6 / 30

Which First Hop Redundancy Protocol allows multiple routers to simultaneously load balance traffic across all group members, rather than having only one active router at a time?

HSRP

VRRP

GLBP (Gateway Load Balancing Protocol)

BFD

LACP

STP

7 / 30

Which technology allows a network to detect a link or forwarding failure between two adjacent devices much faster than standard routing protocol hello timers alone?

NAT

HSRP

LACP

GLBP

BFD (Bidirectional Forwarding Detection)

STP

8 / 30

Which wireless LAN controller deployment model has APs establish a CAPWAP tunnel to a controller that may be located anywhere in the network, rather than in the same physical location?

A mesh deployment alone

A FlexConnect (local mode at branch) deployment

An embedded wireless deployment alone

A mobility express deployment alone

An autonomous AP deployment

A centralized (cloud-based or centralized) WLC deployment

9 / 30

Which QoS mechanism identifies and categorizes traffic, typically at the network edge, so that appropriate policies can later be applied to it?

Traffic policing alone

Queuing and scheduling

Congestion avoidance

Compression alone

Classification and marking

Traffic shaping alone

10 / 30

Which QoS mechanism drops or delays traffic that exceeds a defined rate, either dropping excess traffic (policing) or buffering it for later transmission (shaping)?

Compression alone

Classification and marking

Link aggregation alone

Queuing and scheduling

Traffic policing and shaping

Congestion avoidance

11 / 30

Which Cisco SD-WAN component is responsible for actually forwarding data plane traffic at a branch site, based on policy received from the control plane?

vBond

An edge device (cEdge or vEdge router)

A vPortal

vManage

vSmart

vAnalytics

12 / 30

Which cloud connectivity model involves an organization purchasing a dedicated, private circuit directly to a cloud provider's network, bypassing the public internet?

A satellite-based connectivity model

A standard internet-based VPN model

A standard cellular data connectivity model

A standard public internet browsing model

A dial-up connectivity model

A direct connect (private connectivity) model

13 / 30

Which term describes a network architecture where campus, branch, WAN, and cloud connectivity are all managed through a single, unified, intent-based approach?

An intent-based networking (IBN) architecture

A purely manual, undocumented configuration approach

A single-vendor-only hardware requirement

A traditional CLI-based, device-by-device management approach

A hardware-only architecture with no software component

A purely physical, non-virtualized architecture

14 / 30

Which Cisco DNA Center concept describes a hierarchical representation of an organization's physical locations, such as areas, buildings, and floors, used to organize network devices?

The topology map alone (a related visualization, but distinct from the organizational hierarchy concept itself)

The service catalog alone

The command runner alone

The device inventory alone

The site hierarchy

The policy matrix alone

15 / 30

Which architecture consideration involves designing a network so that a single misconfiguration or failure in one module does not cascade and affect unrelated parts of the network?

Cost optimization alone

Simplicity alone

High availability alone (a related but distinct benefit focused on redundancy rather than isolation specifically)

Vendor interoperability alone

Scalability alone

Fault isolation (a benefit of modularity and hierarchical design)

16 / 30

Which Cisco wireless architecture term describes a scenario where multiple access points work together to extend Wi-Fi coverage without requiring a wired connection at every single access point?

FlexConnect mode alone

Embedded Wireless Controller mode alone

A centralized WLC deployment alone (assumes wired connectivity to each AP)

Cisco Mobility Express alone

A wireless mesh network

An autonomous AP deployment alone

17 / 30

Which term describes an organization's overall approach to ensuring new network designs and technologies are properly tested and validated before being deployed into the live production environment?

A one-time configuration backup

Immediate, untested production rollout

A basic hardware unboxing checklist alone

A proof of concept (PoC) or pilot deployment

A basic ping test alone

A single vendor sales presentation alone

18 / 30

Which architecture principle recommends designing systems and processes so that human error has a reduced likelihood of causing a significant, network-wide outage?

Cost optimization alone

Single point of failure design alone (the opposite of what fail-safe design aims to avoid)

Vendor lock-in alone (a risk to be avoided, not a design principle to pursue)

Manual-only configuration alone (the opposite of a fail-safe, automation-supported approach)

Undocumented configuration alone

Fail-safe design

19 / 30

Which term describes a network architecture decision to standardize on a consistent hardware platform and software version across similar network roles, simplifying operations?

Cost optimization alone

Platform standardization

Modularity alone (a related but distinct broader design principle)

High availability alone

Vendor lock-in alone (a potential risk, not the same concept as intentional platform standardization for operational simplicity)

Scalability alone

20 / 30

Which Cisco SD-Access concept describes the specific policy applied to control communication between different Scalable Groups within the fabric?

A VLAN-based segmentation policy alone

A QoS policy alone

A group-based access control policy (using SGACLs)

A NAT policy alone

A routing policy alone

A VRF-based segmentation policy alone (a related, coarser Layer 3 segmentation mechanism, distinct from the finer-grained group-based policy)

21 / 30

Which term describes an organization's practice of periodically re-evaluating whether its current network architecture still meets evolving business requirements, adjusting the design as needed?

A single software upgrade alone

Architecture lifecycle review

A single vendor contract renewal alone

A single hardware refresh alone (a related but narrower activity than the broader architectural review)

A single physical security inspection alone

A one-time initial design phase alone

22 / 30

Which term describes a WAN edge design where a single router or device handles both traditional WAN connectivity and integrated security functions, such as a firewall and IPS?

A basic hub-and-spoke topology alone

A basic leased line alone

MPLS alone (a specific transport technology, not this broader unified edge/security concept)

A Secure Access Service Edge (SASE) or a unified WAN edge/security platform

A basic full-mesh topology alone

A traditional, separate router-and-firewall design alone (the older approach being contrasted against this more unified concept)

23 / 30

Which Kubernetes concept describes a persistent storage resource that exists independently of any single pod's lifecycle, allowing data to survive a pod restart?

A ConfigMap

A ReplicaSet

A Persistent Volume (PV)

A Secret

A Namespace

A DaemonSet

24 / 30

Which Kubernetes object stores non-sensitive configuration data, such as environment variables, separately from application code, allowing it to be updated without rebuilding a container image?

A DaemonSet

A Secret (used specifically for sensitive data, rather than general configuration)

A ConfigMap

A Namespace

A Persistent Volume

A ReplicaSet

25 / 30

Which Kubernetes object is specifically designed to store sensitive data, such as passwords or API keys, in a slightly more protected way than a ConfigMap?

A DaemonSet

A Namespace

A Persistent Volume

A ConfigMap (used for general, non-sensitive configuration)

A ReplicaSet

A Secret

26 / 30

Which Kubernetes object ensures that a copy of a specific pod runs on every node (or a selected subset of nodes) in a cluster, commonly used for logging or monitoring agents?

A Persistent Volume

A Namespace

A ReplicaSet (ensures a specified number of pod replicas total, not necessarily one per node)

A Secret

A DaemonSet

A ConfigMap

27 / 30

Which Kubernetes concept provides a way to logically divide a single cluster's resources among multiple teams or projects, isolating their objects from one another?

A Namespace

A Secret

A ReplicaSet

A DaemonSet

A ConfigMap

A Persistent Volume

28 / 30

Which virtualization concept describes a hypervisor dynamically adjusting the amount of RAM allocated to a virtual machine based on its actual current usage, rather than a fixed static allocation?

Memory ballooning (dynamic memory allocation)

Resource reservation alone (guarantees a fixed minimum, rather than describing dynamic adjustment)

A VM template alone

Live migration alone

A VM snapshot alone

NIC virtualization alone

29 / 30

Which term describes packaging an entire application stack, including its container images, configuration, and deployment instructions, into a single reusable unit for Kubernetes?

A DaemonSet alone

A Namespace alone

A Dockerfile alone (defines how to build one specific container image, a narrower scope than a full application stack)

A ConfigMap alone

A Helm chart

A Secret alone

30 / 30

Which term describes a virtualized environment's ability to automatically detect a failed physical host and restart its virtual machines on a different, healthy host?

A VM snapshot alone

NIC virtualization alone

Live migration alone (a planned, proactive move of a running VM, distinct from this automatic failure-response mechanism)

A VM template alone

Resource pooling alone

High availability (HA) clustering for virtual machines

Your score is

The average score is 0%