350-501 Practice Test Free – 50 Real Exam Questions to Boost Your Confidence
Preparing for the 350-501 exam? Start with our 350-501 Practice Test Free – a set of 50 high-quality, exam-style questions crafted to help you assess your knowledge and improve your chances of passing on the first try.
Taking a 350-501 practice test free is one of the smartest ways to:
- Get familiar with the real exam format and question types
- Evaluate your strengths and spot knowledge gaps
- Gain the confidence you need to succeed on exam day
Below, you will find 50 free 350-501 practice questions to help you prepare for the exam. These questions are designed to reflect the real exam structure and difficulty level. You can click on each Question to explore the details.
A company is expanding its existing office space to a new floor of the building, and the networking team is installing a new set of switches. The new switches are running IGMPv2, and the engineers configured them for VLAN10 only. The rest of the existing network includes numerous Layer 2 switches in multiple other VLANs, all running IGMPv3. Which additional task must the team perform when deploying the new switches so that traffic is switched correctly through the entire network?
A. Configure the new switches to use IGMPv3 on all VLANs on the network.
B. Configure all switches on the network to support IGMPv2 and IGMPv3 on all VLANs on the network.
C. Configure the new switches to use IGMPv3 on VLAN10 only.
D. Configure all switches on the network to support IGMPv2 and IGMPv3 on VLAN10 only.
Refer to the exhibit. What does the REST API command do?
A. It removes the information identified by Descriptions.xml.
B. It executes the information specified in Descriptions.xml.
C. It retrieves the information requested by Descriptions.xml.
D. It displays the information identified by Descriptions.xml.
How can shared services in an MPLS Layer 3 VPN provide Internet access to the Customers of a central service provider?
A. Static routes on CE routers allow route leakage from a PE global routing table.
B. The CE router can establish a BGP peering to a PE router and use the PE device to reach the Internet.
C. The customer VRF uses route targets to import and export routes to and from a shared services VRF.
D. Route distinguishers are used to identify the routes that CEs can use to reach the Internet.
How does Inter-AS Option-A function when two PE routers in different autonomous systems are directly connected?
A. The two routers share all Inter-AS VPNv4 routes and redistribute routes within an IBGP session to provide end-to-end reach.
B. The two routers establish an MP-EBGP session to share their customers’ respective VPNv4 routes.
C. The two routers treat one another as CE routers and advertise unlabeled IPv4 routes through an EBGP session.
D. The two routers share VPNv4 routes over a multihop EBGP session and set up an Inter-AS tunnel using one another’s label.
Refer to the exhibit. When the Link Aggregation configuration router is running on Cisco IOS XR Software, which LACP interface configuration is needed to add the interface to the bundle? A.
B.
C.
D.
Which component is similar to an EVPN instance?
A. router distinguisher
B. MPLS label
C. IGP router ID
D. VRF
Refer to the exhibit. An engineer is configuring router R1 for OSPFv3 as shown. Which additional configuration must be performed so that the three active interfaces on the router will advertise routes and participate in OSPF IPv6 processes? A.
B.
C.
D.
Which statement about the Cisco MPLS TE forwarding adjacency feature is true?
A. It enables the MPLS core to use EIGRP as the routing protocol.
B. It enables the Cisco MPLS TE tunnel to be advertised into the running IGP.
C. It enables the tailend router to advertise routes to the headend router over the tunnel.
D. It enables the headend and tailend routers to establish a bidirectional tunnel.
Refer to the exhibit. Users on a network connected to router R3 report slow speeds when they connect to the server connected to R2. After analyzing traffic on the network, a network engineer identified congestion on the link between R2 and R3 as the cause. Which QoS service must the engineer implement to drop traffic on the link when it exceeds a configured threshold?
A. traffic shaping
B. class-based weighted fair queueing
C. first-in, first-out
D. traffic policing
An engineer is moving all of an organization's Cisco IOS XE BGP routers to the address-family identifier format. Which command should be used to perform this upgrade quickly with the minimum service disruption?
A. vrf upgrade-cli
B. bgp upgrade-cli
C. address-family ipv4
D. ip bgp-community new-format
Refer to the exhibit. A network engineer with an employee ID 4402:98:032 is setting up an IS-IS network with these requirements: • Routes with a tag of 80 and IP prefixes other than 192.168.10.20/24 must be redistributed from Level 1 into Level 2 • Route leaking must be configured from Level 2 into the Level 1 domain for routes that are tagged with only 50 or 40 Which configuration must be implemented on RB to meet the requirements?
A. Remove match tag 40 from route-map leak2-1
B. Add match tag 80 in route-map leak2-1
C. Change match tag 80 to match tag 50 in route-map redist1-2
D. Add match ip address 152 in route-map redist1-2
How does model-driven telemetry use YANG?
A. to poll network devices on a 30-minute interval
B. to set informs and traps on clients to report back to a centralized server
C. to subscribe to data that is streamed from a device
D. to reset network devices that malfunction
The engineering team at a large ISP has been alerted that a customer network is experiencing high traffic congestion. After a discussion between the ISP and technical personnel at the customer site, the team agrees that traffic to the customer network that exceeds a specific threshold will be dropped. Which task must the engineer perform on the network to implement traffic policing changes?
A. Configure RSVP to reserve bandwidth on all interfaces when a path is congested.
B. Enable Cisco Discovery Protocol on the interface sending the packets.
C. Enable Cisco Express Forwarding on the interfaces sending and receiving the packets.
D. Set IP precedence values to take effect when traffic exceeds a given threshold.
![]()
Refer to the exhibit. LDP peering between routers R1 and R2 is dropped when the link between R1 and R2 is taken offline. However, LDP peering between R2 and R3 stays up when the link between R2 and R3 is taken offline. Which action allows MPLS traffic forwarding to continue normally if the link between R1 and R2 goes down?
A. Enable IGP and LDP Synchronization on R1.
B. Implement LDP Session Protection on R1.
C. Enable IGP and LDP Synchronization on R2.
D. Implement LDP Session Protection on R2.
Refer to the exhibit. Which type of DDoS attack will be mitigated by this configuration?
A. teardrop attack
B. smurf attack
C. SYN flood
D. SIP INVITE flood attacks
The NOC team must update the BGP forwarding configuration on the network with these requirements: ✑ BGP peers must establish a neighborship with NSF capability and restart the session for the capability to be exchanged after 120 seconds. ✑ BGP peers must delete routes after 360 seconds of inactivity. Which action meets these requirements?
A. Set the BGP restart-time to 120 seconds and the BGP ha-mode sso to 360 seconds.
B. Set the stalepath-time to 120 seconds and the BGP restart-time to 360 seconds.
C. Set the BGP ha-mode sso to 120 seconds and the BGP restart-time to 360 seconds.
D. Set the BGP restart-time to 120 seconds and the stalepath-time to 360 seconds.
A customer of an ISP requests support to setup a BGP routing policy. Which BGP attribute should be configured to choose specific BGP speakers as preferred points for the customer AS?
A. lowest multi-exit discriminator
B. highest local preference outbound
C. lowest local preference inbound
D. highest local preference inbound
Refer to the exhibit. After a networking team configured this MPLS topology, the supervisor wants to view MPLS labels to verify the path that packets take from router R1 to router R7. The team already issued an ICMP ping to verify connectivity between the devices. Which task must the team perform to allow the supervisor to view the label switch path?
A. Implement MPLS OAM to display the labels for each hop along the path.
B. Configure MPLS TE to display the labels in the stack between the head and tail-end routers.
C. Configure MPLS LDP Sync to sync labels from the routing table to the MPLS forwarding table.
D. Implement MPLS LDP to assign labels to all the routes in the transit path.
Refer to the exhibit. The operations team is implementing an LDP-based configuration in the service provider core network with these requirements: ✑ R1 must establish LDP peering with the loopback IP address as its Router-ID. ✑ Session protection must be enabled on R2. How must the team update the network configuration to successfully enable LDP peering between R1 and R2?
A. Change the LDP password on R2 to Cisco.
B. Configure mpls ldp router-id loopback0 on R1 and R2.
C. Configure LDP session protection on R1.
D. Change the discover hello hold time and interval to their default values.
An engineer must apply an 802.1ad-compliant configuration to a new switchport with these requirements: ✑ The switchport must tag all traffic when it enters the port. ✑ The switchport is expected to provide the same level of service to traffic from any customer VLAN. Which configuration must the engineer use?
A. interface GigabitEthernet1/0/1 switchport mode trunk switchport trunk encapsulation dot1q encapsulation ISL bridge-domain 12
B. interface GigabitEthernet1/0/1 ethernet dot1ad uni c-port service instance 12 encapsulation dot1q rewrite ingress tag push dot1ad 21 symmetric bridge-domain 12
C. interface GigabitEthernet1/0/1 ethernet dot1ad uni s-port service instance 12 encapsulation default rewrite ingress tag push dot1ad 21 symmetric bridge-domain 12
D. interface GigabitEthernet1/0/1 ethernet dot1ad nni service instance 12 encapsulation dot1ad bridge-domain 12
DRAG DROP - Drag and drop the functions from the left onto the correct Path Computation Element Protocol roles on the right. Select and Place:
Refer to the exhibit. This configuration is being applied on an IOS XR router. Which statement about this configuration is true?
A. It is used to enable gRPC.
B. It is used to create a streaming subscription with a 600-second interval.
C. It is used to set up configuration to poll network data.
D. It is used to create a streaming subscription with a 60-Second interval.
![]()
Refer to the exhibit. A network engineer received a complaint about these problems in OSPF stub area 100: • The Ethernet link is down between routers RX and RY because the fiber was cut. • CE site A traffic to the hub site is being dropped. Which action resolves these issues?
A. Change the OSPF area 100 type to stub on RZ.
B. Set the OSPF MTU to 1500 on the link between RX and RZ.
C. Set the OSPF authentication type to MD5 between RX and RY.
D. Change the OSPF priority to 100 on the Interfaces that connect RX and RY.
Which function does RSVP perform in a Cisco MPLS TE environment?
A. It establishes targeted LDP sessions between neighbors that are directly connected.
B. It signals to LDP protocol along the path that a Cisco MPLS TE will be configured.
C. It reserves bandwidth for LDP sessions between routers participating in a Cisco MPLS TE.
D. It reserves the bandwidth along the path between the head-end and tail-end router.
Refer to the exhibit. Tier 1 ISP A is connected to small Tier 3 ISP B. The EBGP routing protocol is used for route exchange. The networking team at ISP A noticed the flapping of BGP sessions with ISP B. The team decides to improve stability on the network by suppressing the subnet for 30 minutes when a session begins to flap. Which action must the team perform to meet this goal?
A. Implement BGP route dampening on ISP A router R1 with the bgp dampening 15 700 1500 30 command.
B. Implement a BGP route withdraw-delay timer on ISP B router R3 with the bgp withdraw-delay 30 15 90 30 command.
C. Implement a BGP route-penalty timer on ISP A router R1 with the bgp penalty-timer 30 250 750 15 command.
D. Implement BGP route suppression on ISP A router R2 with the bgp suppression 30 600 1200 30 command.
Refer to the exhibit. Router R1 is reporting that its BGP neighbor adjacency to router R2 is down, but its state is Active. Which configuration must be applied to routers R1 and R2 to fix the problem?
A. R1 router bgp 5400 neighbor 11.11.11.11 remote-as 5400 neighbor 11.11.11.11 update-source Loopback0 R2 router bgp 5400 neighbor 11.11.11.12 remote-as 5400 neighbor 11.11.11.12 update-source Loopback0
B. R1 router bgp 5400 neighbor 2.2.2.2 remote-as 5400 neighbor 2.2.2.2 update-source Loopback0 R2 router bgp 5400 neighbor 1.1.1.1 remote-as 5400 neighbor 1.1.1.1 update-source Loopback0
C. R1 router bgp 5400 neighbor 2.2.2.2 remote-as 5400 R2 router bgp 5400 neighbor 1.1.1.1 remote-as 5400
D. R1 router bgp 5400 neighbor 1.1.1.1 remote-as 5400 neighbor 1.1.1.1 update-source Loopback0 R2 router bgp 5400 neighbor 2.2.2.2 remote-as 5400 neighbor 2.2.2.2 update-source Loopback0
Which two features describe TI-LFA? (Choose two.)
A. TI-LFA uses PQ or P and Q nodes on the post-convergence path to compute the backup path.
B. Post-convergence, TI-LFA considers the next-hop neighbor to calculate the backup repair path.
C. TI-LFA works with point of local repair when the PQ node supports only LDP capability.
D. Unlike RLFA, TI-LFA works without the PQ node and provides double segment failure protection.
E. TI-LFA leverages the post-convergence path that carries data traffic after a failure.
Refer to the exhibit. A network engineer is configuring customer edge routers to finalize a L2VPN over MPLS deployment. Assume that the AToM L2VPN service that connects the two CEs is configured correctly on the service provider network. Which action causes the solution to fail?
A. OSPF does not work with L2VPN services.
B. The routing protocol network types are not compatible.
C. A loopback with a /32 IP address has not been used.
D. The xconnect statement has not been defined.
Which set of facts must the network architect consider when deciding whether to implement SaltStack or Chef?
A. Chef is an agent-based tool based on Ruby and SaltStack is a module tool based on Python
B. Chef refers to its automation instructions as manifests and SaltStack refers to its instructions as a playbook
C. Chef uses a message-based system and SaltStack uses an agent to deliver messages.
D. Chef is written in Python and SaltStack is written in Ruby.
DRAG DROP - Drag and drop the OSPF and IS-IS Cisco MPLS TE extensions from the left to their functional descriptions on the right. Select and Place:
Refer to the exhibit. What does the script configure?
A. a VLAN namespace
B. a physical domain
C. selectors for the in-band management
D. a static VLAN
What is a characteristic of prefix segment identifier?
A. It contains the interface address of the device per each link.
B. It contains a router to a neighbor.
C. It is locally unique.
D. It is globally unique.
Which two routing protocols support Cisco MPLS TE tunnels? (Choose two.)
A. RIP
B. EIGRP
C. BGP
D. IS-IS
E. OSPF
What causes multicast traffic to permanently stay on the shared tree and not switch to the source tree?
A. SSM range is being used
B. The RP announcements are being filtered
C. The SPT threshold is set to infinity
D. The RP IP address is configured incorrectly
Refer to the exhibit A user is performing QoS marking on internet traffic and sending it with IPv4 and IPv6 headers on the provider edge device PE1. IPv4 traffic is classified with DSCP 4 and IPv6 traffic is classified with DSCP 6. Which action must the engineer take to begin implementing a QoS configuration on PE1 for the IPv6 traffic?
A. Create an access list that includes any IPv6 traffic and apply it to CM-20.
B. Create access list IPv6-match and configure match ip dscp 4 and match ip dscp 6 in class maps CM-10 and CM-20.
C. Configure match ip dscp 4 in class map CM-10 and match ip dscp 6 in class map CM-20.
D. Create access list IPv6-filter and remove DSCP value 4 and 6 in class maps CM-10 and CM-20.
Refer to the exhibit. A network engineer configures CPE-1 for QoS with these requirements: ✑ IPv4 and IPv6 traffic originated by the CPE-1 WAN IP address must be marked with DSCP CS3. ✑ IPv4 LAN traffic must be marked with DSCP CS1. IPv6 LAN traffic must be marked with DSCP default.
Which configuration must the engineer implement on CPE-1?
A. class-map match-any SELF_TRAFFIC match access-group name SELF_V4 match access-group name SELF_V6 class-map match-all V4_ TRAFFIC match protocol ip class-map match-all V6_TRAFFIC match protocol ipv6 class-map match-all QG_4 match qos-group 4 class-map match-all QG_6 match qos-group 6 ! policy-map LAN-INPUT class V4_TRAFFIC set qos-group 4 class V6_TRAFFIC set qos-group 6 ! policy-map WAN-OUTPUT class SELF_TRAFFIC set ip dscp cs3 class QG_4 set ip dscp cs1 class QG_6 set ip dscp default
B. class-map match-all SELF_TRAFFIC match access-group name SELF_V4 match access-group name SELF_V6 class-map match-all V4_ TRAFFIC match protocol ip class-map match-all V6_TRAFFIC match protocol ipv6 class-map match-all QG_4 match qos-group 4 class-map match-all QG_6 match qos-group 6 ! policy-map LAN-INPUT class V4_TRAFFIC set qos-group 4 class V6_TRAFFIC set qos-group 6 ! policy-map WAN-OUTPUT class SELF_TRAFFIC set dscp cs3 class QG_4 set ip dscp cs1 class QG_6 set dscp default
C. class-map match-all SELF_TRAFFIC match access-group name SELF_V4 match access-group name SELF_V6 class-map match-all V4_ TRAFFIC match protocol ip class-map match-all V6_TRAFFIC match protocol ipv6 class-map match-all QG_4 match qos-group 4 class-map match-all QG_6 match qos-group 6 ! policy-map LAN-INPUT class V4_TRAFFIC set qos-group 4 class V6_TRAFFIC set qos-group 6 ! policy-map WAN-OUTPUT class SELF_TRAFFIC set ip dscp cs3 class QG_4 set ip dscp cs1 class QG_6 set ip dscp default
D. class-map match-any SELF_TRAFFIC match access-group name SELF_V4 match access-group name SELF_V6 class-map match-all V4_ TRAFFIC match protocol ip class-map match-all V6_TRAFFIC match protocol ipv6 class-map match-all QG_4 match qos-group 4 class-map match-all QG_6 match qos-group 6 ! policy-map LAN-INPUT class V4_TRAFFIC set qos-group 4 class V6_TRAFFIC set qos-group 6 ! policy-map WAN-OUTPUT class SELF_TRAFFIC set dscp cs3 class QG_4 set ip dscp cs1 class QG_6 set dscp default
Refer to the exhibit. CE1 and CE2 require connectivity to the internet through the ISP connected to PE3. What should an engineer configure to complete this task?
A. CE1 and CE2 must be configured with a route distinguisher in the PE1 VRF that dynamically imports the route from the internet.
B. CE1 and CE2 must be configured to use a static default route with a next-hop of PE3 to reach internet routes.
C. PE1 must be configured with an import route target in the CE1 VRF that matches the export route target for the internet VRF on PE3.
D. PE2 must be configured to serve as a route reflector for PE3 routes learned from the internet. PE2 then shares the routes with CE1 and CE2.
Which service is a VNF role?
A. Network
B. Firewall
C. Storage
D. Compute
How do intent APIs make it easier for network engineers to deploy and manage networks?
A. They pull stored SNMP data from a single network location to multiple monitoring tools.
B. They allow the engineer to use a single interface as the entry point for control access to the entire device.
C. They streamline repetitive workflows and support more efficient implementation.
D. They extend the Layer 2 infrastructure and reduce the necessary number of virtual connections to Layer 3 devices.
Refer to the exhibit Which effect of this configuration is true?
A. R1 can support a peer that is configured for LDP SSO/NSF as the peer recovers from an outage.
B. R1can support a graceful restart operation on the peer, even if graceful restart is disabled on the peer.
C. R1 can failover to any peer.
D. R1 can failover only to a peer that is configured for LDF SSO/NSF.
Refer to the exhibit. An engineer applied a gRPC dial-in configuration on customer's router to provide connection multiplexing and two-way streaming. What does this configuration accomplish in a gRPC?
A. It is used for encoding with the default protocol buffers
B. It is the encoding requested by the gRPC server
C. It is the encoding requested by the gRPC client
D. It is the encoding that is used for dial-in and dial-out
Refer to the exhibit. What reestablishes the OSPF neighbor relationship between Router 1 and Router 2?
A. OSPF process IDs match
B. authentication is added to the configuration
C. correct wildcard mask is used on Router 2
D. hello intervals match
Refer to the exhibit. An ISP engineer configured a VRF to isolate traffic for the customer ciscotest as shown. Now, the engineer must implement the Intra-AS VPN feature on PE1 to pass traffic between customer sites. Which additional configuration must the engineer apply to PE1 to meet this requirement?
A. router bgp 64525 address-family ipv4 unicast neighbor 192.168.1.1 remote-as 64520 update-source Loopback0 address-family ipv4 unicast
B. router bgp 64525 address-family vpnv4 unicast neighbor 192.168.1.1 remote-as 64525 update-source Loopback0 address-family vpnv4 unicast
C. router bgp 64525 address-family ipv4 unicast neighbor 192.168.1.1 remote-as 64526 address-family ipv4 unicast
D. router bgp 64525 address-family vpnv4 unicast neighbor 192.168.1.1 remote-as 64516 update-source Loopback0 address-family vpnv4 unicast
A new PE router is configured to run OSPF as an IGP with LDP on all interfaces. The engineer is trying to prevent black holes after convergence when the PERSON device loses an LDP session with other PE routers. Which action must the engineer take to implement LDP session protection on a new PE router?
A. Configure the mpls ldp session protection and mpls label protocol ldp commands on the interfaces on the new PE router that connect to the CENTER routers.
B. Configure the mpls ldp discovery targeted-hello accept and mpls ldp session protection commands on the interfaces on the new PE router that connect to the CE routers.
C. Configure the new PE router with the mpls ldp session protection command and on neighboring routers that connect to this new PE router.
D. Configure the new PE router with the mpls ldp session protection command on interfaces with directly connected neighbors.
Refer to the exhibit. A network engineer must update the routing toward the web server with IP address 35.22.13.1. The primary path must be configured via the neighbor router with ID 1.1.1.1. However, local-preference configuration is not permitted on R1. Which task must the engineer perform on R1 to complete the implementation?
A. Configure the device to choose the best MED from the same AS.
B. Set the device to ignore the conditional MED if the route originated in a different autonomous system.
C. Enable MED comparison between routes from neighbors in different AS.
D. Implement deterministic MED to choose the best route from the different AS.
What is a role of NSO?
A. It resides on a hypervisor that runs the Windows OS
B. It automates the deployment of access points with its built-in wireless LAN controller
C. It manages WAN infrastructure using a virtual switch
D. It provides full lifecycle management of a device
Refer to the exhibit. Tier 1 ISP A purchased several Tier 2 ISPs to increase their customer base and provide more regional coverage. ISP A plans to implement MPLS services in the access layer, with scalability up to 100,000 devices in one packet network and service recovery up to 50 ms. The network architect decided to use different independent IGP and LDP domains and interconnect LSPs that are based on RFC 3107. Which two actions must the network engineer perform to meet the requirements? (Choose two.)
A. Implement BGP inline RR functionality with next-hop-self capabilities on routers R2 and R3.
B. Implement the IS-IS routing protocol on the access domain.
C. Implement BGP connectivity between routers R1 and R4 with VPNv4 address family enabled.
D. Configure three OSPF areas, with Area 0 in the core domain, and Areas 2 and 3 in the aggregation domain.
E. Implement BGP PIC core functionality on routers R2 and R3.
What is the purpose of RSVP tear messages?
A. to inform the headend router of LSP issues
B. to confirm successful end-to-end resource allocation
C. to reuse router resources for other reservation requests
D. to notify the tail-end router of resource unavailability on the transit router
Egress PE NAT is being used via a single centralized router to provide Internet access to L3VPN customers. Which description of the NAT operation is true?
A. The NAT table contains a field to identify the inside VRF of a translation.
B. Multiple address pools are needed for the same L3VPN because each site has a separate NAT.
C. The different L3VPNs using the Internet access must not have IP overlaps internally.
D. Users in different VRFs cannot share the same outside global IP address.
Which action does the ingress VTEP perform on traffic between EVPN VXLAN overlays?
A. routing and bridging when doing asymmetric IRB
B. bridging when doing symmetric IRB
C. routing and tunneling when doing symmetric IRB
D. routing when doing asymmetric IRB
Free Access Full 350-501 Practice Test Free Questions
If you’re looking for more 350-501 practice test free questions, click here to access the full 350-501 practice test.
We regularly update this page with new practice questions, so be sure to check back frequently.
Good luck with your 350-501 certification journey!