Search...
Master key concepts with interactive flashcards
What is VXLAN and how does it differ from traditional VLANs?
Click to reveal answer
VXLAN (Virtual Extensible LAN): overlay technology encapsulating Layer 2 Ethernet frames in Layer 3 UDP (port 4789). VXLAN vs VLAN: 16M segments (24-bit VNI) vs 4K VLANs, Layer 3 transport (routed underlay) vs Layer 2 domain, scales data centers. VTEPs (VXLAN Tunnel Endpoints) perform encap/decap. Control plane: multicast, unicast with EVPN. Use: multi-tenancy, Layer 2 extension, cloud connectivity.
Click to show question
Cisco CCNP Enterprise (350-401 ENCOR) is a Cisco certification. These facts come from the current exam guide and are the numbers to plan around.
| Domain | Weight | What to focus on |
|---|---|---|
| Infrastructure | 30% | Layer 2: VLANs, trunks, STP, EtherChannel, private VLANs, Layer 3: IPv4/IPv6 routing, static routes, policy-based routing, OSPF: areas, LSA types, path selection, authentication |
| Security | 20% | AAA: RADIUS vs TACACS+, authentication, authorization, accounting, TrustSec: SGT, SXP, SGACL, CTS, MACsec: MKA, CAK, link-layer encryption |
| Architecture | 15% | Enterprise network design principles (3-tier, collapsed core, spine-leaf), SD-Access: underlay, overlay, fabric, DNA Center, SD-WAN: control plane, data plane, vSmart, vBond, vManage |
| Automation and Artificial Intelligence | 15% | Python scripting: Netmiko, NAPALM, Paramiko for device automation, Ansible: playbooks, inventory, modules for network devices, REST APIs: GET, POST, PUT, DELETE, JSON payloads |
| Virtualization | 10% | LISP: EID, RLOC, ITR, ETR, map-server, map-resolver, VXLAN: VNI, VTEP, MP-BGP EVPN control plane, VRF: route leaking, route distinguisher (RD), route target (RT) |
| Network Assurance | 10% | NetFlow: flow records, collector, analyzer, versions (v5, v9, IPFIX), SPAN and RSPAN for traffic mirroring, Syslog: severity levels, logging destinations |
Yes. You can start 350-401 ENCOR practice and flashcards free without creating an account. A free account keeps your progress, and the full bank (300+ questions) unlocks with a subscription.
They cover all 6 domains of the 350-401 ENCOR exam: Infrastructure (30%), Security (20%), Architecture (15%), Automation and Artificial Intelligence (15%), Virtualization (10%), Network Assurance (10%). Each section is weighted in the same proportion as the real exam, so nothing high-value is buried.
The 350-401 ENCOR exam has approximately 100 questions in 120 minutes. Use the practice questions to confirm you are consistently above that line before booking the real exam.
Study in short, spaced sessions: a card you have not seen for two days is worth more than a card you reread immediately. Filter by Infrastructure first, then mix domains so you practise identifying the topic before recalling the definition.
They are the recall half of preparation. Pair the cards with practice questions and at least one timed practice exam — candidates who only review cards usually recognise terms but miss scenario questions.