I85PREP
⌘ K
CCDE study materials
CCDE study resources

CCDE practice questions

One question at a time. Build your CCDE understanding.

First 50 of 200 questions. Each one lists the choices, the correct answer, and an explanation. The checker at the top of this page saves progress in this browser when it is available.

Continue in the practice tool above to load more questions, 50 at a time.

Question 1Network Design Fundamentals and Business Alignment

A retail company wants its network design to support a new buy-online-pickup-in-store workflow. Which artifact should the network designer produce first to align technical requirements with this business initiative?

  1. A QoS policy template applied to all WAN links
  2. A business capability map linking the new workflow to the services and systems it depends on Correct answer.
  3. A complete bill of materials for campus switches and wireless access points
  4. A detailed physical rack elevation for each store's wiring closet

Explanation

Design work should begin by mapping the business initiative to the capabilities and systems it depends on, so technical requirements trace back to real business outcomes. Hardware lists, rack elevations, and QoS templates are downstream design outputs that presuppose an understanding of what the business needs.

Question 2Network Design Fundamentals and Business Alignment

Which statement best describes the role of a requirement traceability matrix in a network design engagement?

  1. It tracks the change history of device configurations in version control
  2. It documents the mean time between failures for each hardware model
  3. It records how each business and technical requirement is satisfied by a specific design decision or component Correct answer.
  4. It lists the physical cabling pinouts for every patch panel in the data center

Explanation

A traceability matrix links requirements to the design elements that satisfy them, which supports validation and change impact analysis. It is a design governance tool rather than a cabling, configuration, or reliability reference.

Question 3Network Design Fundamentals and Business Alignment

During discovery, a stakeholder says the new network 'must never go down.' Which action best converts this statement into a usable design requirement?

  1. Accept the statement verbatim as a mandatory design constraint
  2. Quantify availability targets per service tier and define acceptable outage duration and redundancy level Correct answer.
  3. Design every layer with fully redundant hardware regardless of cost
  4. Defer the requirement to operations and exclude it from the design

Explanation

Vague absolutes must be translated into measurable objectives such as availability percentage, maximum tolerable downtime, and redundancy expectations per service tier. That gives the designer a testable criterion and a basis for cost trade-offs.

Question 4Network Design Fundamentals and Business Alignment

A company plans to migrate a latency-sensitive trading application to a new data center. Which requirement category should the designer prioritize capturing before selecting a WAN transport?

  1. End-to-end latency, jitter, and loss budgets between the application tiers Correct answer.
  2. The color scheme of the network documentation
  3. The preferred vendor for wireless access points
  4. The number of unused switch ports in each access closet

Explanation

Transport selection for latency-sensitive applications depends on measurable performance budgets such as round-trip latency, jitter, and loss. Port counts, wireless vendors, and documentation style do not constrain WAN transport choice for this workload.

Question 5Network Design Fundamentals and Business Alignment

Which design principle best supports aligning network investment with business value?

  1. Minimize capital expenditure by standardizing on the lowest-cost hardware everywhere
  2. Tier services by business criticality and apply resilience and performance investment proportionally Correct answer.
  3. Outsource all design decisions to the lowest bidder
  4. Apply the highest redundancy level uniformly to all services to avoid analysis

Explanation

Tiering services by criticality lets the designer direct resilience and performance spending where it protects the most business value. Uniform over-provisioning and blanket cost minimization both ignore differentiated business impact.

Question 6Network Design Fundamentals and Business Alignment

A merger requires integrating two companies with overlapping address space and different routing policies. Which early design activity most reduces later risk?

  1. Documenting current-state topologies, address allocations, and routing domains for both organizations Correct answer.
  2. Replacing all existing routers before integration begins
  3. Immediately merging all OSPF areas into a single backbone area
  4. Standardizing on one vendor's hardware across both networks

Explanation

Understanding both current-state networks, including address overlaps and routing boundaries, is prerequisite to planning a safe integration. Premature protocol or hardware changes without that baseline increase disruption risk.

Question 7Network Design Fundamentals and Business Alignment

Which document typically defines the agreed scope, deliverables, assumptions, and acceptance criteria for a network design project?

  1. Capacity plan
  2. Interface description standard
  3. Routing policy matrix
  4. Statement of work Correct answer.

Explanation

A statement of work captures scope, deliverables, assumptions, and acceptance criteria, forming the contractual basis for the engagement. The other documents are technical artifacts that sit inside that agreed scope.

Question 8Network Design Fundamentals and Business Alignment

A designer is choosing between two valid designs that meet all functional requirements. Which criterion most directly reflects business alignment?

  1. The number of configuration lines in the device startup files
  2. The personal preference of the implementing engineer
  3. The alphabetical order of vendor names
  4. Total cost of ownership over the service lifecycle relative to business benefit Correct answer.

Explanation

When functional requirements are equally met, lifecycle cost weighed against business benefit is the defensible discriminator. Configuration size, personal preference, and vendor naming are not business-alignment criteria.

Question 9Network Design Fundamentals and Business Alignment

Which approach best captures non-functional requirements such as scalability and manageability during design interviews?

  1. Ask only which routing protocol the team prefers
  2. Record the current device count without discussing future growth
  3. Collect vendor brochures from each incumbent supplier
  4. Ask stakeholders to state growth forecasts, operational staffing levels, and change-frequency expectations Correct answer.

Explanation

Scalability and manageability are elicited through concrete forecasts and operational context, such as growth rates, staffing, and change frequency. Protocol preference and static device counts do not reveal these qualities.

Question 10Network Design Fundamentals and Business Alignment

What is the primary purpose of defining design principles at the start of a network design effort?

  1. To replace the need for stakeholder requirements
  2. To guarantee the project finishes under budget
  3. To specify exact device models and software versions
  4. To provide consistent decision criteria that guide trade-offs across the whole design Correct answer.

Explanation

Design principles are agreed decision criteria that keep trade-offs consistent across the architecture. They do not specify hardware, substitute for requirements, or guarantee budget outcomes.

Question 11Network Design Fundamentals and Business Alignment

A business unit requests a dedicated low-latency path for a new application while finance demands cost containment. Which response best reflects sound design alignment?

  1. Escalate without gathering any performance data
  2. Reject the request because cost containment always overrides performance
  3. Model the application's actual performance sensitivity and compare transport options against its business value Correct answer.
  4. Approve the dedicated path immediately to satisfy the business unit

Explanation

Conflicting stakeholder demands are resolved by quantifying the application's real sensitivity and weighing transport cost against business value. Immediate approval, blanket rejection, or data-free escalation all bypass the analysis needed for a defensible decision.

Question 12Network Design Fundamentals and Business Alignment

Which metric best expresses a service availability objective in a way a network design can be validated against?

  1. Count of redundant power supplies installed
  2. Number of routing protocols in use
  3. Total cable length in the data center
  4. Percentage of uptime measured over a defined period with a defined service boundary Correct answer.

Explanation

Availability objectives are testable only when expressed as a percentage over a defined period and scope. Redundant components, protocol counts, and cable length are design attributes that may support availability but do not express the objective itself.

Question 13Network Design Fundamentals and Business Alignment

Which activity belongs to the architecture phase rather than the detailed design phase?

  1. Selecting the specific model of each access switch
  2. Assigning individual VLAN IDs to every closet
  3. Writing per-interface configuration templates
  4. Defining logical segmentation and the overall topology model Correct answer.

Explanation

Architecture defines logical structure and topology models, while detailed design selects specific equipment and assigns concrete values. Keeping the phases distinct prevents premature commitment to implementation details.

Question 14Network Design Fundamentals and Business Alignment

A stakeholder asks for 'five nines' availability but the budget supports only single-homed internet access. What is the most professional design response?

  1. Quietly document five nines and proceed with the single-homed design
  2. Present the gap between the objective and the funded design, and offer options with their cost and availability trade-offs Correct answer.
  3. Reduce the objective without informing the stakeholder
  4. Refuse to deliver any design until the budget increases

Explanation

Professional practice is to make the objective-versus-funding gap explicit and offer costed options so the stakeholder can choose. Silently documenting an unachievable target, refusing to work, or unilaterally lowering the objective all undermine trust and traceability.

Question 15Network Design Fundamentals and Business Alignment

Which tool is most appropriate for documenting how a proposed design satisfies each stakeholder requirement?

  1. A packet capture archive
  2. A requirements traceability matrix Correct answer.
  3. A cable schedule
  4. A syslog server

Explanation

A traceability matrix maps requirements to design elements and verification evidence. Packet captures, cable schedules, and syslog servers support operations or troubleshooting rather than requirement-to-design mapping.

Question 16Network Design Fundamentals and Business Alignment

A global firm requires that no single WAN link failure isolate a region, but regional budgets vary widely. Which design approach best balances this constraint with cost?

  1. Define a minimum resilience standard per region tier and allow higher tiers to add further redundancy Correct answer.
  2. Mandate identical full-mesh connectivity for every region
  3. Eliminate regional WAN links in favor of internet-only access
  4. Provide single-homed connectivity everywhere and rely on manual failover

Explanation

A tiered minimum standard enforces the no-isolation constraint while allowing spending to scale with regional criticality. Full mesh everywhere, single-homing, or removing WAN links either over-spends or violates the stated constraint.

Question 17Network Design Fundamentals and Business Alignment

Which question best uncovers a business driver during requirements discovery?

  1. What business outcome will this network change enable or protect? Correct answer.
  2. How many MAC addresses are in the forwarding table today?
  3. Which spanning-tree flavor does the team prefer?
  4. Which cable category is installed in the risers?

Explanation

Business drivers are revealed by asking what outcome the change enables or protects. Protocol preference, table sizes, and cabling category are technical details that do not identify the underlying business motivation.

Question 18Network Design Fundamentals and Business Alignment

A design must support an acquisition that will double headcount within eighteen months. Which requirement attribute should the design explicitly address?

  1. Scalability headroom for users, addresses, and bandwidth over the stated growth horizon Correct answer.
  2. The number of help-desk tickets closed last quarter
  3. The current color of the network operations dashboard
  4. The retirement date of the incumbent firewall vendor

Explanation

A known growth horizon should be translated into explicit headroom for users, address space, and bandwidth. Dashboard appearance, vendor retirement dates, and past ticket counts do not define scalability requirements.

Question 19Network Design Fundamentals and Business Alignment

Which practice best maintains alignment between a network design and changing business priorities after deployment?

  1. Freezing the design permanently at handover
  2. Disabling change management to reduce overhead
  3. Replacing the design team after go-live
  4. Periodic design reviews that re-validate requirements against current business objectives Correct answer.

Explanation

Periodic reviews re-check that the design still serves current business objectives as priorities evolve. Permanent freezes, team replacement, and disabling change control all erode alignment over time.

Question 20Network Design Fundamentals and Business Alignment

Which characteristic distinguishes a constraint from an assumption in network design documentation?

  1. A constraint applies only to routing, while an assumption applies only to switching
  2. A constraint is optional, while an assumption is mandatory
  3. A constraint is a fixed limitation the design must respect, while an assumption is a belief taken as true pending confirmation Correct answer.
  4. A constraint is always technical, while an assumption is always financial

Explanation

Constraints are fixed boundaries the design must honor, whereas assumptions are unverified beliefs that must be confirmed or they become risks. The distinction is about certainty and obligation, not technology type or optionality.

Question 21Network Design Fundamentals and Business Alignment

A design team is evaluating whether to adopt a new overlay technology. Which evaluation step most directly supports business alignment?

  1. Adopt the technology because a competitor announced it
  2. Choose it because it has the most protocol options
  3. Assess operational readiness, skills, and lifecycle cost alongside the technical capability Correct answer.
  4. Reject it because it is unfamiliar to one engineer

Explanation

Business-aligned adoption weighs operational readiness, staff skills, and lifecycle cost together with technical capability. Competitor announcements, feature counts, and individual unfamiliarity are insufficient bases for adoption decisions.

Question 22Network Design Fundamentals and Business Alignment

Which element of a design document explains why a particular architectural choice was made?

  1. The IP address plan
  2. The design rationale section Correct answer.
  3. The bill of materials
  4. The rack elevation diagram

Explanation

Design rationale records the reasoning and trade-offs behind architectural choices, which supports future review and change. Bills of materials, address plans, and rack elevations document what is built rather than why.

Question 23Network Design Fundamentals and Business Alignment

A regulated customer requires that cardholder data remain on approved network segments. Which requirement type does this represent?

  1. A scalability requirement on bandwidth
  2. A compliance-driven constraint on segmentation Correct answer.
  3. A manageability requirement for device access
  4. An availability objective for WAN links

Explanation

Mandating that regulated data stay on approved segments is a compliance constraint that shapes segmentation design. It is not primarily about bandwidth, WAN availability, or device access management.

Question 24Network Design Fundamentals and Business Alignment

Which approach best ensures that a network design remains supportable by the existing operations team?

  1. Involve operations early and validate the design against their skills, tools, and runbook processes Correct answer.
  2. Choose the most complex available features to future-proof the design
  3. Assume operations will hire new specialists after deployment
  4. Design in isolation and hand over documentation at go-live

Explanation

Early operations involvement validates the design against real skills, tooling, and processes, which protects supportability. Isolated design, assumed future hiring, and gratuitous complexity all increase operational risk.

Question 25Network Design Fundamentals and Business Alignment

A stakeholder insists on a specific vendor product without stating a requirement. What is the most effective way to keep the design requirement-driven?

  1. Document the product as a constraint without further discussion
  2. Ask what outcome the product is expected to deliver and derive a measurable requirement from it Correct answer.
  3. Adopt the product as specified and skip requirements analysis
  4. Reject the product because it was named by a stakeholder

Explanation

Probing for the underlying outcome converts a product preference into a testable requirement, preserving competition among solutions. Blind adoption, reflexive rejection, or silent constraint capture all bypass requirement analysis.

Question 26Network Design Fundamentals and Business Alignment

A network design team is documenting a new data center fabric. The business sponsor states that the project must be completed before the holiday peak season. In design documentation, how should this be classified?

  1. As a functional requirement, because it defines a behavior of the system
  2. As an assumption, because the team assumes the date is achievable
  3. As a constraint, because it is a fixed boundary the design must satisfy Correct answer.
  4. As a risk, because dates often slip and must be tracked

Explanation

A constraint is an externally imposed limitation, such as a fixed deadline, budget cap, or regulatory mandate, that the design must respect rather than negotiate. Assumptions are beliefs taken as true without proof, and risks are uncertain events with potential impact; neither category describes a hard boundary. Functional requirements describe what the system must do, not when it must be delivered.

Question 27Network Design Fundamentals and Business Alignment

During requirements discovery for a WAN refresh, a business stakeholder says the network must be resilient. Which follow-up question best converts this into a measurable design requirement?

  1. Which vendor's equipment do you prefer for the WAN edge?
  2. How many sites will be connected by the new WAN?
  3. Which routing protocol should be used between sites?
  4. What monthly outage minutes per site are acceptable during business hours? Correct answer.

Explanation

Resilience is a quality attribute that must be expressed as a measurable objective, such as allowed outage minutes, so the design can be validated against it. Asking for acceptable outage minutes per site and time window turns a vague desire into a testable availability target. Vendor, protocol, and site-count questions gather facts but do not define what level of resilience is required.

Question 28Network Design Fundamentals and Business Alignment

A retail company is designing a network for a new store format that will open gradually over two years. Store count, transaction volume per store, and peak-season traffic are all uncertain. Which design approach best aligns with the business plan while controlling capital cost?

  1. Build the maximum-capacity design up front so no future changes are needed
  2. Outsource all network decisions to the facilities vendor to reduce internal effort
  3. Design a fixed architecture and defer all capacity decisions until after opening
  4. Use a modular design with defined growth steps and capacity triggers tied to store openings Correct answer.

Explanation

A modular design with explicit growth steps and triggers allows capacity to be added in line with actual store openings and measured demand, matching spend to business timing. It also preserves architectural consistency as the estate grows. Building maximum capacity up front overinvests ahead of demand, while deferring all decisions risks rework and unplanned outages.

Question 29Network Design Fundamentals and Business Alignment

An organization is preparing to migrate a business-critical application to a new network architecture. The application owner asks how the design will be proven acceptable before cutover. Which activity most directly supports business sign-off on the design?

  1. Publishing the final bill of materials for procurement
  2. Completing a low-level physical cabling schedule for each site
  3. Running a design validation against agreed acceptance criteria in a test environment Correct answer.
  4. Selecting the routing protocol for the new architecture

Explanation

Business sign-off depends on evidence that the design meets the acceptance criteria agreed with stakeholders, which is produced by validating the design against those criteria in a representative test environment. Cabling schedules, protocol selection, and bills of materials are detailed design or procurement outputs that do not demonstrate requirement satisfaction to the business.

Question 30Network Design Fundamentals and Business Alignment

A financial services firm is designing a campus network that must support a trading floor with sub-millisecond application response and a separate back-office workforce with cost-sensitive connectivity. The business has stated that trading revenue justifies premium resilience, while back-office budgets are fixed. Which design decision best reflects this business alignment?

  1. Design both areas with the lowest-cost topology and rely on application caching to meet trading latency
  2. Delay the design until the business agrees to a single uniform service level for the whole campus
  3. Apply the same premium resilient design to all campus users to simplify operations
  4. Design the trading floor with redundant low-latency paths and the back office with a resilient but lower-cost standard topology Correct answer.

Explanation

Business alignment means spending where the business values the outcome: the trading floor justifies redundant low-latency paths because revenue depends on response time, while the back office can use a resilient but less costly standard topology within its fixed budget. Differentiated service levels let the design satisfy both groups. Uniform premium design overinvests in the back office, and a uniform low-cost design fails the trading requirement.

Question 31Enterprise LAN and Campus Design

In a large campus design, which mechanism is the primary tool for containing Layer 2 broadcast domains while preserving VLAN-based segmentation?

  1. Extending a single VLAN across every access block
  2. Trunking all VLANs to every access switch
  3. Bridging all building VLANs into one flat domain
  4. Using routed boundaries between distribution blocks Correct answer.

Explanation

Campus designs contain broadcast domains by inserting Layer 3 boundaries, typically at the distribution layer or in a collapsed-core design at the core. VLANs remain locally significant within each block, and routing between them is explicit. This limits failure propagation and STP scale.

Question 32Enterprise LAN and Campus Design

A campus uses a two-tier design where access switches dual-home to a pair of distribution switches running a first-hop redundancy protocol. What is the main purpose of that redundancy protocol here?

  1. To provide a shared default gateway address that survives one distribution failure Correct answer.
  2. To load-balance traffic across the two distribution uplinks simultaneously
  3. To authenticate endpoints before granting VLAN assignment
  4. To prevent STP loops between the two distribution switches

Explanation

First-hop redundancy protocols such as HSRP, VRRP, or GLBP present a virtual gateway address that remains reachable if a distribution switch fails. They do not by themselves balance uplink traffic or block STP loops. Endpoint authentication is handled by separate access-control features.

Question 33Enterprise LAN and Campus Design

Which statement best describes the role of a spine layer in a modern campus fabric based on a spine-leaf topology?

  1. It aggregates access leaves and provides a consistent, low-latency path between them Correct answer.
  2. It provides WAN edge connectivity and NAT for the campus
  3. It terminates all endpoint VLANs and performs 802.1X authentication
  4. It serves as the STP root for all access VLANs

Explanation

In spine-leaf campus fabrics, every leaf connects to every spine, giving predictable equal-cost paths between leaves. The spine layer is a high-capacity transit tier. Endpoint services and WAN functions typically reside on leaves or dedicated edge nodes.

Question 34Enterprise LAN and Campus Design

A design team must support voice, data, and guest traffic in each building while keeping guest traffic isolated from internal resources. Which approach best matches standard campus segmentation practice?

  1. Using a single flat VLAN for all buildings and applying ACLs at the host
  2. Assigning guest endpoints to the voice VLAN to reuse QoS policies
  3. Placing guest endpoints in a dedicated VLAN with a filtered path to the internet Correct answer.
  4. Mixing guest and data endpoints in one VLAN to simplify addressing

Explanation

Guest isolation is normally achieved with a dedicated VLAN and a security policy that permits only internet-bound traffic. This keeps guest traffic off internal subnets while preserving a consistent access design. Mixing traffic types removes the segmentation boundary.

Question 35Enterprise LAN and Campus Design

What is the primary benefit of using an EtherChannel (link aggregation) between an access switch and a distribution switch pair in a campus design?

  1. It removes the need for a spanning-tree root bridge
  2. It replaces the need for a first-hop redundancy protocol
  3. It allows a single VLAN to span multiple wiring closets
  4. It provides additional bandwidth and link redundancy while STP sees one logical link Correct answer.

Explanation

Bundling parallel links into one logical channel increases capacity and provides link-level resilience. Spanning tree treats the bundle as a single interface, so no member links are blocked. It does not eliminate the need for STP or FHRP.

Question 36Enterprise LAN and Campus Design

Which characteristic distinguishes a routed access layer design from a traditional Layer 2 access design?

  1. Access switches forward all frames to the core without any local decisions
  2. Access switches rely solely on STP to prevent loops across buildings
  3. Access switches perform Layer 3 routing to the distribution layer and host their own subnets Correct answer.
  4. Access switches place all endpoints in a single global VLAN

Explanation

In a routed access design, the Layer 3 boundary is pushed to the access switch, which owns its endpoint subnets and routes uplinks. This shrinks broadcast domains and reduces dependence on STP. Traditional Layer 2 access instead relies on trunked VLANs up to a central distribution boundary.

Question 37Enterprise LAN and Campus Design

A campus is designed so that each wiring closet's access switch connects to only one distribution switch, with no redundant path. Which design tradeoff does this represent?

  1. Higher throughput at the cost of increased STP complexity
  2. Maximum resilience at the cost of additional cabling
  3. Improved security at the cost of reduced VLAN flexibility
  4. Reduced cost and complexity at the cost of single points of failure Correct answer.

Explanation

Single-homed access switches reduce cabling and port cost but leave the closet without a redundant path to distribution. A distribution switch or uplink failure isolates the closet. Designs that require high availability must dual-home access switches or use alternate topologies.

Question 38Enterprise LAN and Campus Design

Which statement about Power over Ethernet in campus access design is most accurate?

  1. PoE eliminates the need for UPS protection in wiring closets
  2. PoE delivers power only to devices that also use trunking
  3. PoE budget planning must account for the maximum simultaneous draw of all powered endpoints Correct answer.
  4. PoE is only usable on fiber uplinks between switches

Explanation

Access switch PoE budgets are finite, so designers sum the worst-case per-port draw of phones, cameras, and APs to size the power supply and UPS. Oversubscription can cause ports to be denied power during peak demand. PoE is delivered over copper access ports, not fiber uplinks.

Question 39Enterprise LAN and Campus Design

An engineer must choose between a collapsed-core and a three-tier campus design for a site with 40 access closets across four buildings. Which factor most strongly favors a three-tier design?

  1. The need to aggregate many closets per building before reaching a central core Correct answer.
  2. The absence of any routing requirements between buildings
  3. A requirement that all endpoints share a single VLAN
  4. A desire to minimize the number of physical devices

Explanation

A three-tier design adds a distribution tier that aggregates building-level access closets before traffic reaches the core. This is valuable when there are many closets and multiple buildings, because it contains failure domains and limits core port count. Collapsed-core designs suit smaller sites with fewer closets.

Question 40Enterprise LAN and Campus Design

A campus design requires that a failed distribution switch not cause a routing black hole for endpoints in a building. Which combination best addresses this requirement?

  1. A single trunk from each access switch to the core
  2. Redundant distribution switches with a first-hop redundancy protocol and dynamic routing Correct answer.
  3. Access switches configured as STP root for all VLANs
  4. A single distribution switch with static routes on access switches

Explanation

Pairing distribution switches with FHRP provides a surviving default gateway, while dynamic routing reconverges around the failed node. Together they prevent endpoints from losing their path. Single-switch designs and static-only routing cannot reconverge automatically.

Question 41Enterprise LAN and Campus Design

In a campus fabric using VXLAN with an EVPN control plane, what role does the overlay play compared with the underlay?

  1. The overlay carries tenant Layer 2 and Layer 3 segments while the underlay provides IP reachability between tunnel endpoints Correct answer.
  2. The overlay provides physical link redundancy while the underlay carries tenant traffic
  3. The overlay replaces the need for any routing in the campus
  4. The overlay is used only for management access to switches

Explanation

In VXLAN-EVPN designs, the underlay is a routed IP fabric that provides loopback-to-loopback reachability between VTEPs. The overlay encapsulates tenant segments and distributes reachability via EVPN. Separating the two simplifies scale and failure isolation.

Question 42Enterprise LAN and Campus Design

A wireless design must support seamless roaming for voice clients across a large campus. Which design choice best supports this?

  1. Placing each floor's APs on a separate isolated VLAN with no inter-controller communication
  2. Deploying each access point as an independent autonomous AP with its own SSID
  3. Using a centralized or distributed controller architecture with consistent mobility configuration Correct answer.
  4. Requiring clients to re-authenticate at every AP transition

Explanation

Seamless roaming requires coordinated mobility state across APs, typically through a controller-based or distributed control architecture. Consistent SSID, security, and VLAN mappings let clients move without full reauthentication. Autonomous APs without coordination break roaming.

Question 43Enterprise LAN and Campus Design

Which QoS design element is most important at the campus access edge to protect voice quality?

  1. Applying strict priority to all traffic classes equally
  2. Disabling QoS on uplinks to reduce configuration complexity
  3. Placing voice and bulk data in the same queue
  4. Marking voice traffic at the endpoint and trusting or re-marking it at the access switch Correct answer.

Explanation

Voice QoS begins with consistent marking, either trusted from the phone or re-marked at the access port. Access switches then map voice to a priority queue and police untrusted sources. Equal treatment of all classes or disabling QoS removes the protection voice needs.

Question 44Enterprise LAN and Campus Design

A network architect is evaluating a design where all inter-VLAN routing occurs on a firewall instead of the campus core. What is the most significant scalability concern with this approach?

  1. The firewall becomes a throughput and session-table bottleneck for east-west campus traffic Correct answer.
  2. Endpoints lose the ability to use DHCP
  3. VLANs can no longer be trunked to access switches
  4. Wireless clients cannot associate to APs

Explanation

Centralizing all inter-VLAN routing on a firewall forces east-west traffic through a stateful device sized for perimeter security, not campus aggregation. Throughput, session limits, and failure impact become constraints. Trunking, DHCP, and wireless association are unaffected by where routing occurs.

Question 45Enterprise LAN and Campus Design

Which design practice best limits the blast radius of a spanning-tree failure in a large Layer 2 campus?

  1. Disabling BPDU guard on access ports to avoid err-disabled ports
  2. Segmenting STP domains per building or block and using root guard and BPDU guard at edges Correct answer.
  3. Running a single large STP domain across all buildings
  4. Increasing the STP maximum age to reduce topology changes

Explanation

Smaller STP domains confine topology changes to one area, and root guard plus BPDU guard prevent rogue bridges from influencing the topology. A single large domain propagates failures campus-wide. Disabling guard features increases instability risk.

Question 46Enterprise LAN and Campus Design

A campus must support IoT devices that cannot perform 802.1X. Which design approach best maintains segmentation without blocking those devices?

  1. Putting IoT devices in the voice VLAN to reuse existing QoS
  2. Assigning IoT devices to the management VLAN for simplicity
  3. Disabling 802.1X globally so all devices can connect
  4. Placing IoT devices in a dedicated VLAN with MAC authentication bypass or profiling and restricted policy Correct answer.

Explanation

A dedicated IoT VLAN combined with MAC authentication bypass or device profiling allows non-supplicant devices to be identified and placed under a restrictive policy. This preserves segmentation without weakening authentication for other endpoints. Global 802.1X disablement removes control for all devices.

Question 47Enterprise LAN and Campus Design

What is the main reason campus designs often place the Layer 3 boundary at the distribution layer rather than at the core?

  1. The core must remain a pure Layer 2 domain for STP
  2. Distribution switches cannot perform routing
  3. Placing routing at distribution eliminates the need for VLANs
  4. Routing at distribution contains broadcast domains per building and reduces core state Correct answer.

Explanation

Moving the Layer 3 boundary to distribution keeps each building's broadcast domain local and limits routing state and failure scope in the core. The core then focuses on high-speed transit. Distribution switches are fully capable of routing, and VLANs remain necessary at access.

Question 48Enterprise LAN and Campus Design

A design uses MLAG or a similar multi-chassis aggregation technology at the distribution layer. What problem does this primarily solve?

  1. It allows two switches to appear as one logical device for redundant access connections without blocked links Correct answer.
  2. It encrypts all traffic between access and distribution
  3. It replaces the need for VLAN configuration on access switches
  4. It removes the need for any routing protocol in the campus

Explanation

Multi-chassis aggregation lets a pair of distribution switches act as a single logical node, so dual-homed access switches can use all uplinks without STP blocking. It does not eliminate routing, encryption, or access VLAN configuration.

Question 49Enterprise LAN and Campus Design

In a campus design, which factor most directly determines the number of access switches needed per wiring closet?

  1. The routing protocol used at distribution
  2. The speed of the campus core links
  3. The number of VLANs configured on the core
  4. The number of endpoints and their port types, plus PoE and uplink requirements Correct answer.

Explanation

Closet switch count is driven by endpoint port count and type, PoE budget, and uplink capacity to distribution. Core link speed, routing protocol choice, and core VLAN counts do not determine how many access switches a closet needs.

Question 50Enterprise LAN and Campus Design

A campus network must support a disaster-recovery site that shares the same Layer 2 subnets as the primary site. Which design concern is most significant?

  1. It guarantees that broadcast traffic will not cross the WAN
  2. It removes the need for any redundancy protocol
  3. It eliminates the need for routing between the sites
  4. Stretching Layer 2 across sites enlarges failure domains and complicates first-hop gateway behavior Correct answer.

Explanation

Extending VLANs between sites expands broadcast and STP domains across the WAN and complicates which site owns the default gateway. Designs must carefully place FHRP and control failure scope. Stretching Layer 2 does not remove routing or redundancy requirements.