Cisco CCNP Enterprise ENCOR 350-401 Exam 2026: Professional
Certification Practice Test — Network Architecture, Infrastructure,
Virtualization, Security, Network Assurance & Automation — 192
Multiple-Choice Questions with Answers & Detailed Rationales
SECTION 1: ARCHITECTURE (29 Questions)
Question 1
A network architect is designing a campus network for a university with a single large
building housing both academic and administrative departments. The design requires high
availability at the distribution layer without introducing excessive complexity or licensing
costs. Which design approach best satisfies these requirements?
A. Three-tier design with dedicated core switches
B. Two-tier collapsed core design with redundant distribution switches
C. Spine-and-leaf fabric with external core
D. Single-tier access-only design with stacked switches
Correct Answer: B
Explanation: A two-tier collapsed core design provides redundancy at the distribution layer
while eliminating separate core switches, reducing cost and complexity for a single-building
campus.
Question 2
An enterprise is evaluating Cisco SD-WAN for its 50 branch sites. The network team is
concerned about the initial deployment overhead and ongoing operational complexity.
Which characteristic of Cisco SD-WAN addresses these concerns?
A. Manual CLI configuration at each branch
B. Centralized policy management through vManage
C. Distributed control plane at each branch
D. Static routing between all sites
Correct Answer: B
Explanation: Cisco SD-WAN uses centralized management (vManage) to orchestrate policies
and configurations across all branches, significantly reducing per-site operational effort.
,Question 3
In a Cisco SD-Access fabric, which component is responsible for maintaining the mapping
between endpoint IP addresses and their fabric locations?
A. Fabric edge node
B. Control plane node
C. Border node
D. Intermediate node
Correct Answer: B
Explanation: The control plane node in SD-Access maintains the LISP-based mapping
database that tracks endpoint locations within the fabric.
Question 4
A network engineer observes that voice traffic is being dropped during periods of congestion
while bulk file transfers continue unaffected. Which QoS mechanism should be implemented
to address this issue?
A. Traffic shaping on all interfaces
B. Priority queuing for voice traffic
C. Weighted random early detection on file transfer traffic
D. Policing on all traffic classes
Correct Answer: B
Explanation: Priority queuing ensures voice traffic receives strict priority treatment,
guaranteeing low latency and preventing drops during congestion.
Question 5
A company is migrating from a traditional campus network to Cisco SD-Access. The existing
campus uses OSPF for routing between distribution switches. Which statement describes
how the traditional campus interoperates with the SD-Access fabric?
A. OSPF adjacencies are automatically formed with fabric edge nodes
B. A border node provides Layer 3 handoff between the fabric and traditional network
C. The control plane node runs OSPF with the traditional campus
D. Fabric edge nodes replace all traditional distribution switches
Correct Answer: B
,Explanation: SD-Access border nodes serve as the gateway between the fabric and external
networks, peering with traditional routing protocols like OSPF.
Question 6
Which QoS trust boundary configuration is most appropriate for an IP phone connected to a
Cisco switch port?
A. Trust CoS at the access port
B. Trust DSCP at the access port
C. Trust CoS at the distribution port
D. Trust DSCP at the core port
Correct Answer: B
Explanation: IP phones mark voice traffic with DSCP EF, and trusting DSCP at the access port
preserves the phone's markings for end-to-end QoS.
Question 7
A network designer is selecting a high-availability technique for a data center environment
where sub-second failover is critical. Which technology provides the fastest convergence?
A. HSRP with default timers
B. VRRP with default timers
C. HSRP with tuned timers and object tracking
D. Static routing with floating routes
Correct Answer: C
Explanation: HSRP with tuned hello/hold timers (milliseconds) and object tracking achieves
sub-second failover, faster than default timer configurations.
Question 8
In a Cisco SD-WAN deployment, which plane is responsible for establishing and maintaining
the overlay tunnels between branch devices?
A. Orchestration plane
B. Management plane
C. Control plane
D. Data plane
, Correct Answer: D
Explanation: The data plane in SD-WAN handles the actual forwarding of user traffic through
the overlay tunnels established between vEdge/cEdge devices.
Question 9
A campus network uses a three-tier design. The core layer connects to the data center and
internet edge. Which design principle should govern the core layer?
A. Implement extensive ACLs for security
B. Maintain high-speed, low-latency forwarding with minimal policy
C. Perform inter-VLAN routing for all access VLANs
D. Terminate all wireless traffic at the core
Correct Answer: B
Explanation: The core layer should prioritize high-speed forwarding and avoid complex
policies that could introduce latency or processing delays.
Question 10
An engineer must configure QoS to ensure that a specific application receives guaranteed
bandwidth of 50 Mbps during congestion. Which mechanism accomplishes this?
A. Priority queuing
B. Class-based weighted fair queuing with bandwidth guarantee
C. Traffic policing
D. FIFO queuing
Correct Answer: B
Explanation: CBWFQ with a bandwidth guarantee reserves the specified minimum
bandwidth for a traffic class during congestion periods.
Question 11
Which SD-Access node type provides connectivity between fabric endpoints and external
networks such as the internet or data center?
A. Fabric edge
B. Control plane
C. Border
Certification Practice Test — Network Architecture, Infrastructure,
Virtualization, Security, Network Assurance & Automation — 192
Multiple-Choice Questions with Answers & Detailed Rationales
SECTION 1: ARCHITECTURE (29 Questions)
Question 1
A network architect is designing a campus network for a university with a single large
building housing both academic and administrative departments. The design requires high
availability at the distribution layer without introducing excessive complexity or licensing
costs. Which design approach best satisfies these requirements?
A. Three-tier design with dedicated core switches
B. Two-tier collapsed core design with redundant distribution switches
C. Spine-and-leaf fabric with external core
D. Single-tier access-only design with stacked switches
Correct Answer: B
Explanation: A two-tier collapsed core design provides redundancy at the distribution layer
while eliminating separate core switches, reducing cost and complexity for a single-building
campus.
Question 2
An enterprise is evaluating Cisco SD-WAN for its 50 branch sites. The network team is
concerned about the initial deployment overhead and ongoing operational complexity.
Which characteristic of Cisco SD-WAN addresses these concerns?
A. Manual CLI configuration at each branch
B. Centralized policy management through vManage
C. Distributed control plane at each branch
D. Static routing between all sites
Correct Answer: B
Explanation: Cisco SD-WAN uses centralized management (vManage) to orchestrate policies
and configurations across all branches, significantly reducing per-site operational effort.
,Question 3
In a Cisco SD-Access fabric, which component is responsible for maintaining the mapping
between endpoint IP addresses and their fabric locations?
A. Fabric edge node
B. Control plane node
C. Border node
D. Intermediate node
Correct Answer: B
Explanation: The control plane node in SD-Access maintains the LISP-based mapping
database that tracks endpoint locations within the fabric.
Question 4
A network engineer observes that voice traffic is being dropped during periods of congestion
while bulk file transfers continue unaffected. Which QoS mechanism should be implemented
to address this issue?
A. Traffic shaping on all interfaces
B. Priority queuing for voice traffic
C. Weighted random early detection on file transfer traffic
D. Policing on all traffic classes
Correct Answer: B
Explanation: Priority queuing ensures voice traffic receives strict priority treatment,
guaranteeing low latency and preventing drops during congestion.
Question 5
A company is migrating from a traditional campus network to Cisco SD-Access. The existing
campus uses OSPF for routing between distribution switches. Which statement describes
how the traditional campus interoperates with the SD-Access fabric?
A. OSPF adjacencies are automatically formed with fabric edge nodes
B. A border node provides Layer 3 handoff between the fabric and traditional network
C. The control plane node runs OSPF with the traditional campus
D. Fabric edge nodes replace all traditional distribution switches
Correct Answer: B
,Explanation: SD-Access border nodes serve as the gateway between the fabric and external
networks, peering with traditional routing protocols like OSPF.
Question 6
Which QoS trust boundary configuration is most appropriate for an IP phone connected to a
Cisco switch port?
A. Trust CoS at the access port
B. Trust DSCP at the access port
C. Trust CoS at the distribution port
D. Trust DSCP at the core port
Correct Answer: B
Explanation: IP phones mark voice traffic with DSCP EF, and trusting DSCP at the access port
preserves the phone's markings for end-to-end QoS.
Question 7
A network designer is selecting a high-availability technique for a data center environment
where sub-second failover is critical. Which technology provides the fastest convergence?
A. HSRP with default timers
B. VRRP with default timers
C. HSRP with tuned timers and object tracking
D. Static routing with floating routes
Correct Answer: C
Explanation: HSRP with tuned hello/hold timers (milliseconds) and object tracking achieves
sub-second failover, faster than default timer configurations.
Question 8
In a Cisco SD-WAN deployment, which plane is responsible for establishing and maintaining
the overlay tunnels between branch devices?
A. Orchestration plane
B. Management plane
C. Control plane
D. Data plane
, Correct Answer: D
Explanation: The data plane in SD-WAN handles the actual forwarding of user traffic through
the overlay tunnels established between vEdge/cEdge devices.
Question 9
A campus network uses a three-tier design. The core layer connects to the data center and
internet edge. Which design principle should govern the core layer?
A. Implement extensive ACLs for security
B. Maintain high-speed, low-latency forwarding with minimal policy
C. Perform inter-VLAN routing for all access VLANs
D. Terminate all wireless traffic at the core
Correct Answer: B
Explanation: The core layer should prioritize high-speed forwarding and avoid complex
policies that could introduce latency or processing delays.
Question 10
An engineer must configure QoS to ensure that a specific application receives guaranteed
bandwidth of 50 Mbps during congestion. Which mechanism accomplishes this?
A. Priority queuing
B. Class-based weighted fair queuing with bandwidth guarantee
C. Traffic policing
D. FIFO queuing
Correct Answer: B
Explanation: CBWFQ with a bandwidth guarantee reserves the specified minimum
bandwidth for a traffic class during congestion periods.
Question 11
Which SD-Access node type provides connectivity between fabric endpoints and external
networks such as the internet or data center?
A. Fabric edge
B. Control plane
C. Border
