Network Engineer Interview Questions for Visa-Sponsored Candidates: Routing, Cloud and Specialty Occupation

Twenty graded networking questions from subnetting to VPC design, plus the question behind every sponsored offer, whether the job reads like a specialty occupation.

Computer networking interview questions for network engineer and network administrator roles fall into five groups: fundamentals (OSI and TCP/IP, subnetting, DNS, DHCP), routing and switching (OSPF, BGP, VLANs, spanning tree), a live troubleshooting scenario, cloud networking (VPC design, security groups, hybrid links) and security. Below are 20 graded questions and what a strong answer covers. If you are on F-1 OPT, STEM OPT or H-1B, one more question sits behind every offer: do the job's title and duties read like an H-1B specialty occupation, or like help-desk work that invites a Request for Evidence (RFE)?

Status as of 2026-11-01. The specialty-occupation test in 8 CFR 214.2(h)(4)(ii)-(iii) is in effect, as summarized on USCIS's H-1B Specialty Occupations page (updated 2026-09-21). Policy alert PA-2026-05 is in effect and challenged (AAUP v. Mullin). Wage-weighted H-1B selection is in effect; FY2028 registration is not announced. For anyone already on H-1B, removing deference to prior approvals on I-129 extensions (RIN 1615-AD26) is only proposed; comments close 2026-11-13, and current deference applies unless a final rule changes it.

What questions are asked in a network engineer interview?

Most network engineer loops follow the same arc: a recruiter screen that includes the work-authorization question, a fundamentals screen (OSI, TCP/IP, subnetting, DNS, DHCP), a deep round on routing, switching and cloud networking with a live troubleshooting scenario, and a behavioral round where you explain an outage you fixed. Senior loops add design and automation.

The technical rounds also show you what the job really is, and an H-1B petition will later have to describe that job. The market is split. Indeed Hiring Lab's data-center postings index stood at 247 (June 2024 = 100) in its October 22, 2026 snapshot, though it counts all data-center-related postings, not only network roles. Labor Condition Application (LCA) filings, the DOL step before an H-1B petition, fell: DOL's Office of Foreign Labor Certification reports 426,659 LCA applications received in FY2026 through Q3 (selected statistics), down 8.8% year over year. That counts filings, not hires or approvals.

The 20 computer networking interview questions, graded

Entry means new grad or NOC technician, Mid two to five years, Senior designing and leading changes. Each note is what interviewers listen for, not a script.

Fundamentals

1. What happens when you type a URL into a browser? (Entry) DNS caches, then a recursive resolver; ARP for the gateway if needed; the TCP handshake (SYN, SYN-ACK, ACK), TLS, then the HTTP request.
2. Place a switch, router, firewall and load balancer on the OSI model. (Entry) Switches forward on Layer 2 MAC addresses, routers on Layer 3. Stateful firewalls track Layer 3/4 sessions; next-generation firewalls inspect up to Layer 7. Load balancers work at Layer 4 or Layer 7.
3. TCP or UDP, and when would you pick UDP? (Entry) TCP gives ordered, acknowledged delivery; UDP trades that for low overhead. DNS queries, voice, video and QUIC use UDP; DNS falls back to TCP for large responses and zone transfers.
4. Subnet 10.20.0.0/22. (Entry) Mask 255.255.252.0, 1,022 usable hosts, network 10.20.0.0, broadcast 10.20.3.255.
5. Why does a new VLAN get no DHCP addresses? (Entry) Walk through Discover, Offer, Request, Acknowledge. If the server sits on another subnet, the VLAN's gateway interface needs a relay (ip helper-address on Cisco).

Routing and switching

6. Two OSPF routers are stuck in ExStart. Why? (Mid) Usually an MTU mismatch. Know the neighbor states through Full and the adjacency checklist: area ID, hello and dead timers, subnet, authentication, area type, unique router IDs.
7. How does BGP pick a best path, and how do you steer traffic? (Mid to Senior) Cisco's order starts with weight, local preference, locally originated, AS-path length, origin, MED, eBGP over iBGP, then IGP cost to the next hop. Steer outbound with local preference; steer inbound with AS-path prepending, MED, more-specific prefixes or provider communities.
8. A static route covers 10.1.0.0/16 and OSPF has 10.1.1.0/24. Which carries 10.1.1.5? (Mid) The OSPF /24. Longest prefix match wins first; administrative distance only breaks ties for the same prefix.
9. Explain trunks and spanning tree, and describe a loop. (Entry to Mid) 802.1Q tags frames; a native VLAN mismatch leaks traffic. STP elects the root by lowest bridge ID and blocks redundant links; RSTP converges faster. A loop looks like a broadcast storm with MAC flapping.

Troubleshooting scenarios

10. "Only some users at one branch say the app is slow." (Mid) Scope it (who, since when, what changed), then work up the stack: interface errors, duplex, MTU, asymmetric paths, DNS, QoS. Name your tools and say how you would update stakeholders and roll back.
11. "The BGP session to our ISP flaps every few minutes." (Senior) Check logs for hold-timer expiry, physical errors, an MTU problem dropping large updates, a max-prefix limit, CPU and aggressive BFD timers.
12. "Two hosts on one VLAN can't ping each other but reach the gateway." (Mid) A host firewall blocking ICMP, port isolation or private VLANs, a VLAN ACL, dynamic ARP inspection drops, or a duplicate IP.

Cloud networking

13. Design a VPC for a three-tier app across two availability zones. (Mid) Pick a CIDR that will not overlap on-premises or future VPCs, then add public and private subnets plus a NAT gateway and route table in each zone, so one zone failing does not strand the other.
14. Security groups versus network ACLs? (Mid) In AWS, security groups are stateful, attach to network interfaces and only allow; network ACLs are stateless, apply per subnet, support allow and deny rules, and are evaluated in rule-number order.
15. Connect 40 VPCs and an on-premises data center. (Senior) Peering is not transitive, so it becomes a mesh; a transit gateway gives hub-and-spoke routing. Add VPN or a dedicated circuit, and flag overlapping CIDRs early. For a general architecture round, see our system design interview prep for backend roles.
16. How do you make DNS work across a hybrid network? (Senior) Private hosted zones plus conditional forwarding in both directions (in AWS, Route 53 Resolver inbound and outbound endpoints).

Security and operations

17. How would you segment a flat network? (Mid) VLANs with ACLs, VRFs where routing must stay separate, firewalls between trust zones and least-privilege rules.
18. The IPsec tunnel is up, but no traffic passes. (Mid) Both IKE phases can show up while a missing route, a missing NAT exemption, a filter or asymmetric routing drops packets. Check the encrypt and decrypt counters on each side; if phase 2 keeps renegotiating, compare the traffic selectors (proxy IDs).
19. What would you monitor on a network you just inherited? (Mid to Senior) Interface errors and utilization, flow data (NetFlow or VPC Flow Logs), syslog into a SIEM, and config backups with drift detection.
20. Push a config change to 200 switches safely. (Senior) A source of truth, templated configs (Python or Ansible), pre- and post-checks, a canary batch and a tested rollback.

Is network administrator a specialty occupation for H-1B?

The title does not decide it. USCIS asks whether the specific position needs a bachelor's degree in a directly related specialty, judged from the duties, the industry norm and the employer's own requirement. Network roles sit in occupations where the government's own education data is mixed, so the duties carry the case.

The regulation, 8 CFR 214.2(h)(4)(ii) on eCFR, says: "A position is not a specialty occupation if attainment of a general degree, without further specialization, is sufficient to qualify for the position." A position may accept a range of degree fields if each is "directly related" to the duties, which the regulation defines as "a logical connection between the required degree, or its equivalent, and the duties of the position." The job must also meet one of four criteria in 8 CFR 214.2(h)(4)(iii)(A): the degree is normally the minimum for the occupation, it is normally required in parallel positions at similar organizations, the employer normally requires it, or the duties are so specialized, complex or unique that they are normally associated with that degree.

That is where your degree field enters. Computer science, computer or electrical engineering, information systems and telecommunications are the fields most often tied to network duties, but there is no approved list; whether a degree is directly related to a given job is argued by the employer's attorney and decided by USCIS, case by case.

Same word "network," different education signals (checked 2026-11-01)

Two details matter most. O*NET lists "Network Engineer" as a reported title under 15-1244, the administrator occupation, so the word "engineer" does not move a job into the architect category. And the occupation code picks the prevailing-wage table that sets which wage level an offered salary reaches; under wage-weighted selection (in effect since 2026-02-27; Level IV gets four entries, Level I one), that level shapes lottery odds. For the pay side, see our network engineer H-1B salary and sponsorship guide.

Why does a role that reads like help-desk work invite an RFE?

A specialty-occupation RFE usually follows when an officer cannot tell from the petition that the job needs a specialized degree. If most listed duties are password resets, ticket queues, workstation installs and "escalate to Tier 2," they read as support work, where BLS says "Computer user support specialist jobs require some computer knowledge but not necessarily a college degree." A title cannot outweigh those duties.

Completeness matters more now. Under PA-2026-05, in effect since 2026-08-05, an officer may deny without an RFE when required initial evidence is missing. How attorneys answer these requests is in how to respond to an H-1B specialty occupation RFE.

Your part is narrower: learn in interviews what the job actually is. Never ask anyone to describe a role as more specialized than it is; the petition must describe the job you will do.

Common misconception: "The offer letter says Network Engineer and I have a CCNA, so the H-1B is safe."

Correction: USCIS judges the position's duties and degree requirement under 8 CFR 214.2(h)(4)(iii)(A), not the title or a certificate, and no outcome is ever "safe" in advance.

Do certifications like CCNA help with sponsorship?

They help you get hired, not approved. A CCNA, CCNP or cloud networking certification proves depth in technical screens but does not replace the degree requirement. The regulation's degree-equivalency route, 8 CFR 214.2(h)(4)(iii)(D), is a case-by-case evaluation of education, training and experience that belongs with an immigration attorney. More in whether certifications help with H-1B sponsorship.

How do I explain an outage I fixed in STAR format?

Give the Situation and impact in a sentence or two, state your Task, spend most of the time on your own Actions, and close with the Result and what you changed afterward. Interviewers listen for method, calm communication and ownership.

An illustrative answer (use your own facts):

• Situation: "During a change window, a firmware upgrade on one of two core switches black-holed traffic for several warehouse VLANs, and scanners stopped syncing."
• Task: "I was on call, responsible for restoring service and finding the cause."
• Action: "The change log showed the upgraded switch came back with preemption on and took over as active gateway before its uplinks were up. I lowered its priority, confirmed the gateway from each VLAN, rolled the switch back to the previous firmware and posted updates every 15 minutes."
• Result: "Service returned inside the window. I wrote the review and added a redundancy-state pre-check to our upgrade runbook."

Say "I" for your actions and "we" for the team's. For more practice, see our STAR answers for tricky behavioral questions international candidates get.

How do you check a network role before you accept?

Ask in the interview, then verify on public data. Ask the manager what share of a week is design and project work versus the ticket queue, who owns routing and firewall changes, and whether the team requires a degree in a specific field; our list of questions that signal you know sponsorship logistics has more. When the recruiter asks "Will you require sponsorship?", answer truthfully with your dates.

1. Request the full written job description from the recruiter, including the minimum-education line.
2. Look up the closest occupation on O*NET OnLine and the BLS Occupational Outlook Handbook.
3. Search DOL OFLC's LCA disclosure files on its performance data page for the employer's past filings under the same title, and note the occupation code and wage level it used.
4. Check the employer's history in the USCIS H-1B Employer Data Hub, which says it now covers through FY2026 Q4.
5. Confirm your OPT or STEM OPT end date and unemployment days with your DSO; the SEVIS Help Hub explains the 90-day and 150-day limits (in effect, unchanged).
6. Answer the employer's immigration attorney accurately when they ask about your degree and the role after the offer; the job description, occupation code and degree arguments are the employer's to prepare.

Worked timeline: a STEM OPT network engineer (as of 2026-11)

Say your STEM OPT EAD ends 2027-08-31 and you have an onsite on 2026-11-12 for "Network Engineer II," where about 70% of the work is BGP, firewall and data-center migration.

USCIS's STEM OPT page says the I-983 "must describe the direct relationship between the STEM OPT opportunity and the student's qualifying STEM degree", so the duties question reaches your DSO before any petition does. Cap-gap does not cover cap-exempt petitions, and it does not move with you if you change employers after selection (see interviewing elsewhere during cap-gap). Watch USCIS's H-1B electronic registration page for the FY2028 announcement.

Common mistakes

• Reciting commands without the why. Say which BGP attribute you would change and what traffic it moves.
• Troubleshooting without a method. "I'd reboot it" fails. Scope, isolate by layer, communicate, roll back.
• Accepting a title without the duties. An "engineer" title over a ticket-queue job helps no one at petition time.
• Inflating duties. Asking a manager to make the job "sound more technical" creates a mismatch between the petition and the job you actually do.
• Burning unemployment days. Post-completion OPT allows 90 days and STEM OPT 150 in aggregate; track them with your DSO.

Frequently asked questions

What questions are asked in a network engineer interview?

Expect fundamentals (OSI and TCP/IP, subnetting, DNS, DHCP), routing and switching (OSPF, BGP, VLANs, spanning tree), a live troubleshooting scenario, cloud networking such as VPC design, and a behavioral question about an outage you handled. Senior loops add design and automation. If you need sponsorship, the recruiter screen usually asks about work authorization too.

Is network administrator a specialty occupation for H-1B?

The title alone does not decide it. Under 8 CFR 214.2(h)(4)(ii) and (iii)(A), USCIS asks whether the specific position, judged from its duties, normally requires a bachelor's degree in a directly related specialty. O*NET's survey for Network and Computer Systems Administrators (checked November 1, 2026) shows 27% of respondents saying a bachelor's is required, so admin roles built on routine support work tend to draw questions. The employer and its immigration attorney build the case; USCIS decides it.

Do certifications like CCNA help with sponsorship?

They help you pass technical screens, but a certification is not a degree and does not make a position a specialty occupation, because that test looks at the job. Whether your own education and experience equal a degree is a separate, case-by-case question under 8 CFR 214.2(h)(4)(iii)(D) for the employer's immigration attorney. Treat a CCNA, CCNP or cloud networking certification as a hiring asset, not a visa credential.

What cloud networking questions come up in interviews?

Designing a VPC across two availability zones, security groups versus network ACLs, connecting many VPCs and an on-premises data center (peering versus a transit gateway, VPN versus a dedicated circuit), and hybrid DNS. Interviewers care most about CIDR planning that avoids overlaps and about how traffic is routed and filtered at each hop.

How do I explain an outage I fixed in STAR format?

Give the Situation and impact briefly, state your Task, spend most of the answer on the Actions you took (isolating the fault, communicating, rolling back), and finish with the Result and what you changed afterward. Keep it under two minutes and describe your role honestly, including for incidents at jobs outside the US.

Sources

• USCIS, H-1B Specialty Occupations (updated 2026-09-21)
• eCFR, 8 CFR 214.2, paragraphs (h)(4)(ii) and (h)(4)(iii)
• USCIS, PA-2026-05, STEM OPT and H-1B registration pages
• Federal Register, deference NPRM (proposed 2026-10-14)
• DOL OFLC, performance data and LCA disclosure files and LCA selected statistics, FY2026 Q3
• O*NET OnLine, occupations 15-1241, 15-1244, 15-1231 and 15-1232; BLS Occupational Outlook Handbook pages linked in the table
• USCIS, H-1B Employer Data Hub; SEVIS Help Hub, unemployment counter
• Indeed Hiring Lab, October 2026 snapshot

How we checked this: we read the USCIS, eCFR, DOL (including the FY2026 Q3 LCA selected statistics), O*NET, BLS (pages last modified 2026-08-27), SEVIS Help Hub and Indeed Hiring Lab pages above on 2026-11-01, and quoted the regulation from the eCFR text in force on that date.

This is general information, not legal or tax advice. Your own I-20, EAD and USCIS notices govern your situation; take F-1, OPT and STEM OPT questions to your DSO and H-1B classification questions to the employer's immigration attorney.

If you are on OPT or STEM OPT and want help aiming a network engineering search at employers with a sponsorship track record, F1Jobs works with international candidates on exactly that.