Cisco Implementing Cisco Enterprise Network Core Technologies Exam Practice Test
The 350-401 ENCOR practice page covers enterprise networking concepts used to connect and manage campus, branch, and data-center networks. Its question bank samples switching and segmentation, IPv4 and IPv6 behavior, routing, network access control, address translation, quality of service, and VXLAN overlays. These topics involve interpreting packet and device behavior as well as selecting configurations that support reliable connectivity.
Exam overview
About the Cisco Implementing Cisco Enterprise Network Core Technologies Exam
Enterprise network work requires distinguishing Layer 2 forwarding from Layer 3 routing and understanding how configuration choices affect traffic. VLANs divide a switching infrastructure into broadcast domains, while port settings determine whether an interface operates as an access port or negotiates a trunk. Routing questions call for recognizing protocol behavior and interpreting path metrics; IPv6 questions may involve multicast delivery. Other scenarios address 802.1X roles, PAT session translation, and QoS classification for differentiated treatment during congestion. VXLAN questions test the purpose of the VNI when carrying Layer 2 segments over an IP underlay. Across these areas, administrators must connect packet fields and control-plane behavior to practical outcomes, such as endpoint authentication, traffic prioritization, address conservation, and segmentation.
Sample Practice Questions
Review a selection from this exam's published US Practice Tests practice bank.
A switch port connects to a single end-user computer and should not negotiate a trunk. Which configuration approach best enforces that intent?
Show answer
Correct answer: AAn access port carries traffic for an assigned VLAN rather than negotiating a trunk. Disabling trunk negotiation, where supported, prevents the endpoint-facing port from forming a trunk through negotiation.
A network operator needs to distinguish traffic flows using packet header fields and apply a consistent identifier that can be used by QoS mechanisms across a network. Which IPv4 header field is commonly used for this purpose?
Show answer
Correct answer: AThe IPv4 Type of Service byte includes the Differentiated Services field, whose DSCP bits can mark packets for differentiated forwarding treatment by QoS mechanisms.
A switch learns a source MAC address on one port, then later receives a frame with that same source MAC address on a different port. What does the switch typically do?
Show answer
Correct answer: BA switch learns source MAC addresses from incoming frames. If an address appears on a different port, the switch generally updates its table to reflect the most recently observed location.
A switch is configured to use 802.1X on an access port. Which role does the switch perform in the authentication exchange between an endpoint and an authentication server?
Show answer
Correct answer: BIn an 802.1X deployment, the endpoint is the supplicant, the switch or wireless access point is the authenticator, and an authentication server such as RADIUS makes the authentication decision. The authenticator controls access to the network based on that result.
A network administrator wants to translate private IPv4 addresses to a smaller set of public IPv4 addresses by using transport-layer port numbers to distinguish sessions. Which technique is being used?
Show answer
Correct answer: APort Address Translation (PAT), a form of NAT overload, maps multiple private addresses to one or more public addresses and uses transport-layer port numbers to keep sessions distinct.
An enterprise needs to prioritize voice packets over less time-sensitive traffic during congestion. Which QoS action most directly identifies traffic classes for differentiated treatment?
Show answer
Correct answer: AQoS classification identifies traffic flows or packets, and marking assigns values such as DSCP to indicate their treatment class. Queuing and scheduling can then apply appropriate behavior during congestion.
A data center uses VXLAN to extend Layer 2 segments across an IP network. What does a VXLAN Network Identifier (VNI) primarily provide?
Show answer
Correct answer: AThe VNI identifies a VXLAN segment and enables many logical Layer 2 segments to coexist over the same IP underlay. VXLAN encapsulation also includes outer transport headers, but the VNI is not an address, speed negotiation mechanism, or checksum.
How to use this practice test
Access is free. A practice session draws up to 20 random questions from the 50-question bank, and results appear after the session. Use each question to identify whether you need to revisit switching behavior, routing concepts, access control, or traffic handling; check your reasoning against the network outcome described in the scenario.
Preparation tips
- For access-port and trunk scenarios, distinguish the intended endpoint connection from trunk negotiation behavior and predict how the switch handles the link.
- Trace a frame’s source MAC learning across ports, then explain how that change affects the switch’s forwarding table.
- Compare routing protocol path-selection clues, such as bandwidth and delay, with the metric behavior described in each question.
- Practice mapping 802.1X participants to their roles, and distinguish PAT’s use of transport ports from basic address translation.
- For QoS and VXLAN scenarios, identify the traffic-classification field or VNI function and connect it to the resulting network treatment.