Pass Your Cisco 350-401 Exam Easy!

Cisco 350-401 Exam Questions & Answers, Accurate & Verified By IT Experts

Instant Download, Free Fast Updates, 99.6% Pass Rate

350-401 Premium Bundle

$79.99

Cisco 350-401 Premium Bundle

350-401 Premium File: 763 Questions & Answers

Last Update: Oct 20, 2026

350-401 Training Course: 196 Video Lectures

350-401 PDF Study Guide: 636 Pages

350-401 Bundle gives you unlimited access to "350-401" files. However, this does not replace the need for a .vce exam simulator. To download VCE exam simulator click here
Cisco 350-401 Premium Bundle
Cisco 350-401 Premium Bundle

350-401 Premium File: 763 Questions & Answers

Last Update: Oct 20, 2026

350-401 Training Course: 196 Video Lectures

350-401 PDF Study Guide: 636 Pages

$79.99

350-401 Bundle gives you unlimited access to "350-401" files. However, this does not replace the need for a .vce exam simulator. To download your .vce exam simulator click here

Cisco 350-401 Practice Test 28

Question 270

One member of an EtherChannel is disabled by a link failure but the bundle should remain usable through the surviving member. The incident evidence is: The whole logical interface drops because its configured minimum active member count exceeds the remaining links. Which targeted configuration or design change best addresses the failure?

  1. Make physical member switchport settings consistent with the port-channel configuration.
  2. Configure compatible EtherChannel negotiation protocol and modes at both peers rather than mixing LACP and PAgP.
  3. Explain the per-flow load-balancing hash and distribute independent flows; do not promise packet-by-packet striping of one flow.
  4. Use a supported port-channel with acceptable minimum-link requirements for the intended redundancy policy.

Explanation

Correct Answer

D:

The required correction is: Use a supported port-channel with acceptable minimum-link requirements for the intended redundancy policy. The underlying failure mechanism is: The EtherChannel minimum-links threshold is stricter than the planned single-member failover. Verify success by carrying out this direct test: inspect `show etherchannel summary` and forwarding through the surviving member under link-failure test.

Incorrect Answers

A:

Making physical member switchport settings consistent with the port-channel configuration would not meet the need for a supported port-channel with acceptable minimum-link requirements for the intended redundancy policy.

B:

Configuring compatible EtherChannel negotiation protocol and modes at both peers rather than mixing LACP and PAgP would not meet the need for a supported port-channel with acceptable minimum-link requirements for the intended redundancy policy.

C:

Explaining the per-flow load-balancing hash and distributing independent flows would not meet the need for a supported port-channel with acceptable minimum-link requirements for the intended redundancy policy.

Question 271

One member of an EtherChannel is disabled by a link failure but the bundle should remain usable through the surviving member. The proposed remedy is: Use a supported port-channel with acceptable minimum-link requirements for the intended redundancy policy. Which observation would most directly confirm that remedy works as intended?

  1. Check negotiated protocol and channel summary on both sides for correctly bundled links.
  2. Inspect per-member counters with one flow and several distinct flows to confirm hash distribution.
  3. Inspect the EtherChannel consistency reason and verify suspended members rejoin after restoring common settings.
  4. Inspect `show etherchannel summary` and forwarding through the surviving member under link-failure test.

Explanation

Correct Answer

D:

The decisive acceptance observation is: Inspect `show etherchannel summary` and forwarding through the surviving member under link-failure test. This tests the working mechanism, while the original incident was: the whole logical interface drops because its configured minimum active member count exceeds the remaining links.

Incorrect Answers

A:

This test measures a different behavior: Check negotiated protocol and channel summary on both sides for correctly bundled links. It does not establish the target outcome. For the documented fault, the direct acceptance test is: inspect `show etherchannel summary` and forwarding through the surviving member under link-failure test.

B:

This test measures a different behavior: Inspect per-member counters with one flow and several distinct flows to confirm hash distribution. It does not establish the target outcome. For the documented fault, the direct acceptance test is: inspect `show etherchannel summary` and forwarding through the surviving member under link-failure test.

C:

This test measures a different behavior: Inspect the EtherChannel consistency reason and verify suspended members rejoin after restoring common settings. It does not establish the target outcome. For the documented fault, the direct acceptance test is: inspect `show etherchannel summary` and forwarding through the surviving member under link-failure test.

Question 272

One member of an EtherChannel is disabled by a link failure but the bundle should remain usable through the surviving member. During troubleshooting: The whole logical interface drops because its configured minimum active member count exceeds the remaining links. Which underlying cause best explains the recorded behavior?

  1. The peers use incompatible EtherChannel negotiation protocols.
  2. The EtherChannel minimum-links threshold is stricter than the planned single-member failover.
  3. The member's trunk/VLAN configuration is incompatible with the aggregated channel settings.
  4. EtherChannel flow hashing pins that flow to one member, not aggregate throughput of all links.

Explanation

Correct Answer

B:

The actual technical cause is: The EtherChannel minimum-links threshold is stricter than the planned single-member failover. It specifically explains the observation: the whole logical interface drops because its configured minimum active member count exceeds the remaining links. The correcting configuration is: use a supported port-channel with acceptable minimum-link requirements for the intended redundancy policy.

Incorrect Answers

A:

That diagnosis is supported by a different symptom: Both interfaces are up individually but no port-channel forms. Here the recorded observation is: the whole logical interface drops because its configured minimum active member count exceeds the remaining links. The applicable cause is: the EtherChannel minimum-links threshold is stricter than the planned single-member failover.

C:

That diagnosis is supported by a different symptom: The port-channel remains up but one physical link is excluded from the bundle. Here the recorded observation is: the whole logical interface drops because its configured minimum active member count exceeds the remaining links. The applicable cause is: the EtherChannel minimum-links threshold is stricter than the planned single-member failover.

D:

That diagnosis is supported by a different symptom: A single backup TCP session never exceeds one member link speed. Here the recorded observation is: the whole logical interface drops because its configured minimum active member count exceeds the remaining links. The applicable cause is: the EtherChannel minimum-links threshold is stricter than the planned single-member failover.

Question 273

One member of an EtherChannel is disabled by a link failure but the bundle should remain usable through the surviving member. Select TWO complementary decisions: the direct technical remedy and a safeguard against recurrence. A verification-only step cannot substitute for either action.

  1. Use a supported port-channel with acceptable minimum-link requirements for the intended redundancy policy.
  2. Make physical member switchport settings consistent with the port-channel configuration.
  3. Set minimum-links policy to the real throughput and availability objective and test reductions.
  4. Document active EtherChannel protocol per link and run compatibility checks on both ends.
  5. Select and test a supported load-balance hash including useful source/destination fields for the actual traffic mix.

Explanation

Correct Answers

A:

The required correction is: Use a supported port-channel with acceptable minimum-link requirements for the intended redundancy policy. The underlying failure mechanism is: The EtherChannel minimum-links threshold is stricter than the planned single-member failover. Verify success by carrying out this direct test: inspect `show etherchannel summary` and forwarding through the surviving member under link-failure test.

C:

The continuing protective control is: Set minimum-links policy to the real throughput and availability objective and test reductions. This addresses the underlying failure mechanism: the EtherChannel minimum-links threshold is stricter than the planned single-member failover. The corresponding operational check is: inspect `show etherchannel summary` and forwarding through the surviving member under link-failure test.

Incorrect Answers

B:

Consistent member configuration is necessary, but the bundle will still drop if its minimum-links threshold exceeds the one surviving member.

D:

That control reduces a separate risk: The peers use incompatible EtherChannel negotiation protocols. For the described design, the recurring risk arises from: the EtherChannel minimum-links threshold is stricter than the planned single-member failover. The specific required safeguard is: set minimum-links policy to the real throughput and availability objective and test reductions.

E:

A load-balancing hash affects how active members share traffic, not whether the bundle is allowed to operate after one link fails.

Question 274

A campus wants one predictable rapid-spanning-tree root for VLAN100 rather than leaving root choice to chassis MAC order. The incident evidence is: A small access switch becomes VLAN100's spanning-tree root after a new switch is connected. Which targeted configuration or design change best addresses the failure?

  1. Set an appropriate lower bridge priority on the intended root switch for that STP instance/VLAN.
  2. Use RSTP proposal/agreement behavior on suitable point-to-point links rather than legacy 802.1D timer-only expectations.
  3. Enable STP root guard on the appropriate designated downstream-facing interface.
  4. Configure an appropriate secondary root priority higher than primary but below ordinary access switches.

Explanation

Correct Answer

A:

The required correction is: Set an appropriate lower bridge priority on the intended root switch for that STP instance/VLAN. The underlying failure mechanism is: Root priority policy was not established, so the lowest bridge ID won unexpectedly. Verify success by carrying out this direct test: check `show spanning-tree vlan 100` root bridge ID and root port choices across the topology.

Incorrect Answers

B:

Using RSTP proposal/agreement behavior on suitable point-to-point links rather than legacy 802.1D timer-only expectations would not set an appropriate lower bridge priority on the intended root switch for that STP instance/VLAN.

C:

Enabling STP root guard on the appropriate designated downstream-facing interface would not set an appropriate lower bridge priority on the intended root switch for that STP instance/VLAN.

D:

Configuring an appropriate secondary root priority higher than primary but below ordinary access switches would not set an appropriate lower bridge priority on the intended root switch for that STP instance/VLAN.

Question 275

A campus wants one predictable rapid-spanning-tree root for VLAN100 rather than leaving root choice to chassis MAC order. The proposed remedy is: Set an appropriate lower bridge priority on the intended root switch for that STP instance/VLAN. Which observation would most directly confirm that remedy works as intended?

  1. Check `show spanning-tree vlan 100` root bridge ID and root port choices across the topology.
  2. Watch port state changes during controlled re-convergence and verify synchronization completes without a prolonged listening stage.
  3. Present a superior BPDU and verify the port enters root-inconsistent state without replacing the desired root.
  4. Disable primary in a lab and inspect the next-lowest bridge ID selection.

Explanation

Correct Answer

A:

The decisive acceptance observation is: Check `show spanning-tree vlan 100` root bridge ID and root port choices across the topology. This tests the working mechanism, while the original incident was: a small access switch becomes VLAN100's spanning-tree root after a new switch is connected.

Incorrect Answers

B:

This test measures a different behavior: Watch port state changes during controlled re-convergence and verify synchronization completes without a prolonged listening stage. It does not establish the target outcome. For the documented fault, the direct acceptance test is: check `show spanning-tree vlan 100` root bridge ID and root port choices across the topology.

C:

This test measures a different behavior: Present a superior BPDU and verify the port enters root-inconsistent state without replacing the desired root. It does not establish the target outcome. For the documented fault, the direct acceptance test is: check `show spanning-tree vlan 100` root bridge ID and root port choices across the topology.

D:

This test measures a different behavior: Disable primary in a lab and inspect the next-lowest bridge ID selection. It does not establish the target outcome. For the documented fault, the direct acceptance test is: check `show spanning-tree vlan 100` root bridge ID and root port choices across the topology.

Question 276

A campus wants one predictable rapid-spanning-tree root for VLAN100 rather than leaving root choice to chassis MAC order. During troubleshooting: A small access switch becomes VLAN100's spanning-tree root after a new switch is connected. Which underlying cause best explains the recorded behavior?

  1. Root priority policy was not established, so the lowest bridge ID won unexpectedly.
  2. Rapid proposal/agreement handshakes are not available across that legacy/boundary link.
  3. No designated secondary root priority existed to guide the failover election.
  4. The distribution-facing designated link lacks root guard for the downstream boundary.

Explanation

Correct Answer

A:

The actual technical cause is: Root priority policy was not established, so the lowest bridge ID won unexpectedly. It specifically explains the observation: a small access switch becomes VLAN100's spanning-tree root after a new switch is connected. The correcting configuration is: set an appropriate lower bridge priority on the intended root switch for that STP instance/VLAN.

Incorrect Answers

B:

That diagnosis is supported by a different symptom: A peer connected through a legacy shared segment converges slowly despite local RSTP configuration. Here the recorded observation is: a small access switch becomes VLAN100's spanning-tree root after a new switch is connected. The applicable cause is: root priority policy was not established, so the lowest bridge ID won unexpectedly.

C:

That diagnosis is supported by a different symptom: An unintended access switch becomes root after the designed primary goes offline. Here the recorded observation is: a small access switch becomes VLAN100's spanning-tree root after a new switch is connected. The applicable cause is: root priority policy was not established, so the lowest bridge ID won unexpectedly.

D:

That diagnosis is supported by a different symptom: A newly attached access switch advertises superior BPDUs and takes over root elections. Here the recorded observation is: a small access switch becomes VLAN100's spanning-tree root after a new switch is connected. The applicable cause is: root priority policy was not established, so the lowest bridge ID won unexpectedly.

Question 277

A campus wants one predictable rapid-spanning-tree root for VLAN100 rather than leaving root choice to chassis MAC order. The initial change is: Set an appropriate lower bridge priority on the intended root switch for that STP instance/VLAN. Which continuing control most directly prevents a recurrence of the documented problem: A small access switch becomes VLAN100's spanning-tree root after a new switch is connected.

  1. Validate spanning-tree primary and secondary roles per instance during annual failure tests.
  2. Test STP root protection on every uncontrolled downstream switch-facing interface.
  3. Document root and secondary root priorities and review new-switch default priority.
  4. Validate peer protocol support and link type in rapid-convergence designs.

Explanation

Correct Answer

C:

The continuing protective control is: Document root and secondary root priorities and review new-switch default priority. This addresses the underlying failure mechanism: root priority policy was not established, so the lowest bridge ID won unexpectedly. The corresponding operational check is: check `show spanning-tree vlan 100` root bridge ID and root port choices across the topology.

Incorrect Answers

A:

That control reduces a separate risk: No designated secondary root priority existed to guide the failover election. For the described design, the recurring risk arises from: root priority policy was not established, so the lowest bridge ID won unexpectedly. The specific required safeguard is: document root and secondary root priorities and review new-switch default priority.

B:

That control reduces a separate risk: The distribution-facing designated link lacks root guard for the downstream boundary. For the described design, the recurring risk arises from: root priority policy was not established, so the lowest bridge ID won unexpectedly. The specific required safeguard is: document root and secondary root priorities and review new-switch default priority.

D:

That control reduces a separate risk: Rapid proposal/agreement handshakes are not available across that legacy/boundary link. For the described design, the recurring risk arises from: root priority policy was not established, so the lowest bridge ID won unexpectedly. The specific required safeguard is: document root and secondary root priorities and review new-switch default priority.

Question 278

A user access port should forward promptly after a PC link-up and shut down if an unauthorized switch begins sending BPDUs. The incident evidence is: An unauthorized unmanaged switch forms a loop through a supposedly trusted desk port. Which targeted configuration or design change best addresses the failure?

  1. Enable supported loop guard on eligible non-designated point-to-point spanning-tree ports.
  2. Use PortFast edge behavior with BPDU Guard on the host-facing port where supported.
  3. Enable STP root guard on the appropriate designated downstream-facing interface.
  4. Interpret per-instance RSTP/MST port roles and forwarding states before changing cabling.

Explanation

Correct Answer

B:

The required correction is: Use PortFast edge behavior with BPDU Guard on the host-facing port where supported. The underlying failure mechanism is: The access edge port lacked BPDU Guard and accepted unexpected BPDUs. Verify success by carrying out this direct test: plug in a host and then an unauthorized BPDU sender; verify rapid forwarding then err-disable protection.

Incorrect Answers

A:

Enabling supported loop guard on eligible non-designated point-to-point spanning-tree ports would not meet the need for portFast edge behavior with BPDU Guard on the host-facing port where supported.

C:

Enabling STP root guard on the appropriate designated downstream-facing interface would not meet the need for portFast edge behavior with BPDU Guard on the host-facing port where supported.

D:

Interpreting per-instance RSTP/MST port roles and forwarding states would not meet the need for portFast edge behavior with BPDU Guard on the host-facing port where supported.

Question 279

A user access port should forward promptly after a PC link-up and shut down if an unauthorized switch begins sending BPDUs. The proposed remedy is: Use PortFast edge behavior with BPDU Guard on the host-facing port where supported. Which observation would most directly confirm that remedy works as intended?

  1. Present a superior BPDU and verify the port enters root-inconsistent state without replacing the desired root.
  2. Inspect the interface BPDU filter state and verify received BPDUs are visible to STP during a controlled test.
  3. Suppress BPDUs in a lab and confirm the port enters loop-inconsistent rather than transitioning to designated forwarding.
  4. Plug in a host and then an unauthorized BPDU sender; verify rapid forwarding then err-disable protection.

Explanation

Correct Answer

D:

The decisive acceptance observation is: Plug in a host and then an unauthorized BPDU sender; verify rapid forwarding then err-disable protection. This tests the working mechanism, while the original incident was: an unauthorized unmanaged switch forms a loop through a supposedly trusted desk port.

Incorrect Answers

A:

This test measures a different behavior: Present a superior BPDU and verify the port enters root-inconsistent state without replacing the desired root. It does not establish the target outcome. For the documented fault, the direct acceptance test is: plug in a host and then an unauthorized BPDU sender; verify rapid forwarding then err-disable protection.

B:

This test measures a different behavior: Inspect the interface BPDU filter state and verify received BPDUs are visible to STP during a controlled test. It does not establish the target outcome. For the documented fault, the direct acceptance test is: plug in a host and then an unauthorized BPDU sender; verify rapid forwarding then err-disable protection.

C:

This test measures a different behavior: Suppress BPDUs in a lab and confirm the port enters loop-inconsistent rather than transitioning to designated forwarding. It does not establish the target outcome. For the documented fault, the direct acceptance test is: plug in a host and then an unauthorized BPDU sender; verify rapid forwarding then err-disable protection.

Question 280

A user access port should forward promptly after a PC link-up and shut down if an unauthorized switch begins sending BPDUs. During troubleshooting: An unauthorized unmanaged switch forms a loop through a supposedly trusted desk port. Which underlying cause best explains the recorded behavior?

  1. The access edge port lacked BPDU Guard and accepted unexpected BPDUs.
  2. The distribution-facing designated link lacks root guard for the downstream boundary.
  3. BPDU Filter masked incoming STP BPDUs, preventing the switch from seeing the topology change.
  4. Without loop guard the switch interprets missing BPDUs as permission to transition forwarding.

Explanation

Correct Answer

A:

The actual technical cause is: The access edge port lacked BPDU Guard and accepted unexpected BPDUs. It specifically explains the observation: an unauthorized unmanaged switch forms a loop through a supposedly trusted desk port. The correcting configuration is: use PortFast edge behavior with BPDU Guard on the host-facing port where supported.

Incorrect Answers

B:

That diagnosis is supported by a different symptom: A newly attached access switch advertises superior BPDUs and takes over root elections. Here the recorded observation is: an unauthorized unmanaged switch forms a loop through a supposedly trusted desk port. The applicable cause is: the access edge port lacked BPDU Guard and accepted unexpected BPDUs.

C:

That diagnosis is supported by a different symptom: A loop persists after an unmanaged bridge joins two access ports because their inbound BPDUs were suppressed. Here the recorded observation is: an unauthorized unmanaged switch forms a loop through a supposedly trusted desk port. The applicable cause is: the access edge port lacked BPDU Guard and accepted unexpected BPDUs.

D:

That diagnosis is supported by a different symptom: A blocked alternate port starts forwarding after BPDUs cease, creating a loop. Here the recorded observation is: an unauthorized unmanaged switch forms a loop through a supposedly trusted desk port. The applicable cause is: the access edge port lacked BPDU Guard and accepted unexpected BPDUs.


Implementing Cisco Enterprise Network Core Technologies (ENCOR) (350-401) Practice Tests

Purchase Individually

350-401 Premium File

Premium File
350-401 Premium File
763 Q&A
$76.99$69.99

350-401 Training Video Course

Training Course
350-401 Training Video Course
196 Lectures
$27.49$24.99

350-401 Study Guide

Study Guide
350-401 Study Guide
636 PDF Pages
$27.49$24.99

Site Search:

 

VISA, MasterCard, AmericanExpress, UnionPay

SPECIAL OFFER: GET 10% OFF

ExamCollection Premium

ExamCollection Premium Files

Pass your Exam with ExamCollection's PREMIUM files!

  • ExamCollection Certified Safe Files
  • Guaranteed to have ACTUAL Exam Questions
  • Up-to-Date Exam Study Material - Verified by Experts
  • Instant Downloads
Enter Your Email Address to Receive Your 10% Off Discount Code
A Confirmation Link will be sent to this email address to verify your login
We value your privacy. We will not rent or sell your email address

SPECIAL OFFER: GET 10% OFF

Use Discount Code:

MIN10OFF

A confirmation link was sent to your e-mail.
Please check your mailbox for a message from support@examcollection.com and follow the directions.

Next

Download Free Demo of VCE Exam Simulator

Experience Avanset VCE Exam Simulator for yourself.

Simply submit your e-mail address below to get started with our interactive software demo of your free trial.

Free Demo Limits: In the demo version you will be able to access only first 5 questions from exam.