Search...

Quick Feedback

350-401 ENCOR

Cisco CCNP Enterprise (350-401 ENCOR) Exam Guide

A 6-week study plan aligned to official 350-401 ENCOR exam domains.

Exam Information

120 minutes

Duration

100 questions (approx.)

Questions

See official exam guide

Passing Score

See official exam pricing

Exam Cost

Recommended Study Plan

Week 1

Enterprise Network Architecture

15% of exam

6-8 hours

Focus: SD-Access overlay = VXLAN + LISP; SD-WAN data plane on edges, control on vSmart
Enterprise network design principles (3-tier, collapsed core, spine-leaf)
SD-Access: underlay, overlay, fabric, DNA Center
SD-WAN: control plane, data plane, vSmart, vBond, vManage
QoS: classification, marking, queuing, policing, shaping
Wireless architectures: autonomous AP, LWAP, FlexConnect
WLC deployment models: centralized, distributed, cloud

Recommended Resources:

Cisco official objectives

/certifications/cisco/cisco-ccnp-enterprise/notes#architecture

/certifications/cisco/cisco-ccnp-enterprise/practice

/certifications/cisco/cisco-ccnp-enterprise/study-guide

Week 2

Network Virtualization

10% of exam

6-8 hours

Focus: VXLAN VNI solves VLAN scale; EVPN Type-2 = MAC/IP, Type-5 = IP prefix
LISP: EID, RLOC, ITR, ETR, map-server, map-resolver
VXLAN: VNI, VTEP, MP-BGP EVPN control plane
VRF: route leaking, route distinguisher (RD), route target (RT)
GRE tunnels: point-to-point, multipoint (DMVPN)
Virtual switching and virtual routing instances
MPLS L3VPN fundamentals (PE, CE, RD, RT)

Recommended Resources:

Cisco official objectives

/certifications/cisco/cisco-ccnp-enterprise/notes#virtualization

/certifications/cisco/cisco-ccnp-enterprise/practice

/certifications/cisco/cisco-ccnp-enterprise/study-guide

Week 3

Network Infrastructure

30% of exam

10-12 hours

Focus: OSPF Type 3 = inter-area summary from ABR; Type 5 = external from ASBR
Layer 2: VLANs, trunks, STP, EtherChannel, private VLANs
Layer 3: IPv4/IPv6 routing, static routes, policy-based routing
OSPF: areas, LSA types, path selection, authentication
EIGRP: metrics, feasible successor, stub routing, named mode
BGP: eBGP vs iBGP, attributes, path selection, communities
Multicast: IGMP, PIM sparse/dense mode, rendezvous point
WLAN: SSID, CAPWAP tunnels, QoS profiles, RF fundamentals

Recommended Resources:

Cisco official objectives

/certifications/cisco/cisco-ccnp-enterprise/notes#infrastructure

/certifications/cisco/cisco-ccnp-enterprise/practice

/certifications/cisco/cisco-ccnp-enterprise/study-guide

Week 4

Network Assurance

10% of exam

6-8 hours

Focus: NetFlow v9/IPFIX use templates — exporter must send template before data records
NetFlow: flow records, collector, analyzer, versions (v5, v9, IPFIX)
SPAN and RSPAN for traffic mirroring
Syslog: severity levels, logging destinations
SNMP: v2c vs v3, MIBs, traps, polling
IP SLA for network performance monitoring
DNA Center Assurance: path trace, AI-driven insights

Recommended Resources:

Cisco official objectives

/certifications/cisco/cisco-ccnp-enterprise/notes#network-assurance

/certifications/cisco/cisco-ccnp-enterprise/practice

/certifications/cisco/cisco-ccnp-enterprise/study-guide

Week 5

Network Security

20% of exam

6-8 hours

Focus: TrustSec policy is SGT-to-SGT — not IP-to-IP; survives renumbering
AAA: RADIUS vs TACACS+, authentication, authorization, accounting
TrustSec: SGT, SXP, SGACL, CTS
MACsec: MKA, CAK, link-layer encryption
802.1X: EAP methods, supplicant, authenticator, authentication server
DHCP snooping, dynamic ARP inspection, IP source guard
Control Plane Policing (CoPP) and infrastructure ACLs

Recommended Resources:

Cisco official objectives

/certifications/cisco/cisco-ccnp-enterprise/notes#security

/certifications/cisco/cisco-ccnp-enterprise/practice

/certifications/cisco/cisco-ccnp-enterprise/study-guide

Week 6

Network Automation & Programmability

15% of exam

6-8 hours

Focus: Ansible network modules are idempotent — check mode (--check) previews changes
Python scripting: Netmiko, NAPALM, Paramiko for device automation
Ansible: playbooks, inventory, modules for network devices
REST APIs: GET, POST, PUT, DELETE, JSON payloads
RESTCONF and NETCONF for configuration management
YANG models: data modeling, deviation, augmentation
DNA Center APIs: intent-based configuration, assurance APIs

Recommended Resources:

Cisco official objectives

/certifications/cisco/cisco-ccnp-enterprise/notes#automation

/certifications/cisco/cisco-ccnp-enterprise/practice

/certifications/cisco/cisco-ccnp-enterprise/study-guide

Week 7

Final Review & Practice Exams

All domains

8-10 hours

Complete all three full-length practice exams
Review incorrect answers and weak domains
Revisit flashcards for key terms
Timed review of highest-weight domains

Recommended Resources:

Practice exams

Flashcards

Study notes PDF

Exam Tips & Strategies

Domain Insight 1

SD-Access overlay = VXLAN + LISP; SD-WAN data plane on edges, control on vSmart

Domain Insight 2

LLQ = priority queue for voice/video; never oversubscribe LLQ bandwidth

Follow Domain Weights

Spend more study time on higher-weighted domains — they drive the majority of exam questions.

Practice Under Time Pressure

Use timed practice exams to build pacing before test day.

Key Topics to Master

Enterprise network design principles (3-tier, collapsed core, spine-leaf)

SD-Access: underlay, overlay, fabric, DNA Center

LISP: EID, RLOC, ITR, ETR, map-server, map-resolver

VXLAN: VNI, VTEP, MP-BGP EVPN control plane

Layer 2: VLANs, trunks, STP, EtherChannel, private VLANs

Layer 3: IPv4/IPv6 routing, static routes, policy-based routing

NetFlow: flow records, collector, analyzer, versions (v5, v9, IPFIX)

SPAN and RSPAN for traffic mirroring

AAA: RADIUS vs TACACS+, authentication, authorization, accounting

TrustSec: SGT, SXP, SGACL, CTS

Python scripting: Netmiko, NAPALM, Paramiko for device automation

Ansible: playbooks, inventory, modules for network devices

For the most up-to-date exam information, visit the official exam guide.

View Official Exam Guide

350-401 ENCOR

Cisco CCNP Enterprise (350-401 ENCOR) Exam Guide

A 6-week study plan aligned to official 350-401 ENCOR exam domains.

Exam Information

120 minutes

Duration

100 questions (approx.)

Questions

See official exam guide

Passing Score

See official exam pricing

Exam Cost

Recommended Study Plan

Week 1

Enterprise Network Architecture

15% of exam

6-8 hours

Focus: SD-Access overlay = VXLAN + LISP; SD-WAN data plane on edges, control on vSmart
Enterprise network design principles (3-tier, collapsed core, spine-leaf)
SD-Access: underlay, overlay, fabric, DNA Center
SD-WAN: control plane, data plane, vSmart, vBond, vManage
QoS: classification, marking, queuing, policing, shaping
Wireless architectures: autonomous AP, LWAP, FlexConnect
WLC deployment models: centralized, distributed, cloud

Recommended Resources:

Cisco official objectives

/certifications/cisco/cisco-ccnp-enterprise/notes#architecture

/certifications/cisco/cisco-ccnp-enterprise/practice

/certifications/cisco/cisco-ccnp-enterprise/study-guide

Week 2

Network Virtualization

10% of exam

6-8 hours

Focus: VXLAN VNI solves VLAN scale; EVPN Type-2 = MAC/IP, Type-5 = IP prefix
LISP: EID, RLOC, ITR, ETR, map-server, map-resolver
VXLAN: VNI, VTEP, MP-BGP EVPN control plane
VRF: route leaking, route distinguisher (RD), route target (RT)
GRE tunnels: point-to-point, multipoint (DMVPN)
Virtual switching and virtual routing instances
MPLS L3VPN fundamentals (PE, CE, RD, RT)

Recommended Resources:

Cisco official objectives

/certifications/cisco/cisco-ccnp-enterprise/notes#virtualization

/certifications/cisco/cisco-ccnp-enterprise/practice

/certifications/cisco/cisco-ccnp-enterprise/study-guide

Week 3

Network Infrastructure

30% of exam

10-12 hours

Focus: OSPF Type 3 = inter-area summary from ABR; Type 5 = external from ASBR
Layer 2: VLANs, trunks, STP, EtherChannel, private VLANs
Layer 3: IPv4/IPv6 routing, static routes, policy-based routing
OSPF: areas, LSA types, path selection, authentication
EIGRP: metrics, feasible successor, stub routing, named mode
BGP: eBGP vs iBGP, attributes, path selection, communities
Multicast: IGMP, PIM sparse/dense mode, rendezvous point
WLAN: SSID, CAPWAP tunnels, QoS profiles, RF fundamentals

Recommended Resources:

Cisco official objectives

/certifications/cisco/cisco-ccnp-enterprise/notes#infrastructure

/certifications/cisco/cisco-ccnp-enterprise/practice

/certifications/cisco/cisco-ccnp-enterprise/study-guide

Week 4

Network Assurance

10% of exam

6-8 hours

Focus: NetFlow v9/IPFIX use templates — exporter must send template before data records
NetFlow: flow records, collector, analyzer, versions (v5, v9, IPFIX)
SPAN and RSPAN for traffic mirroring
Syslog: severity levels, logging destinations
SNMP: v2c vs v3, MIBs, traps, polling
IP SLA for network performance monitoring
DNA Center Assurance: path trace, AI-driven insights

Recommended Resources:

Cisco official objectives

/certifications/cisco/cisco-ccnp-enterprise/notes#network-assurance

/certifications/cisco/cisco-ccnp-enterprise/practice

/certifications/cisco/cisco-ccnp-enterprise/study-guide

Week 5

Network Security

20% of exam

6-8 hours

Focus: TrustSec policy is SGT-to-SGT — not IP-to-IP; survives renumbering
AAA: RADIUS vs TACACS+, authentication, authorization, accounting
TrustSec: SGT, SXP, SGACL, CTS
MACsec: MKA, CAK, link-layer encryption
802.1X: EAP methods, supplicant, authenticator, authentication server
DHCP snooping, dynamic ARP inspection, IP source guard
Control Plane Policing (CoPP) and infrastructure ACLs

Recommended Resources:

Cisco official objectives

/certifications/cisco/cisco-ccnp-enterprise/notes#security

/certifications/cisco/cisco-ccnp-enterprise/practice

/certifications/cisco/cisco-ccnp-enterprise/study-guide

Week 6

Network Automation & Programmability

15% of exam

6-8 hours

Focus: Ansible network modules are idempotent — check mode (--check) previews changes
Python scripting: Netmiko, NAPALM, Paramiko for device automation
Ansible: playbooks, inventory, modules for network devices
REST APIs: GET, POST, PUT, DELETE, JSON payloads
RESTCONF and NETCONF for configuration management
YANG models: data modeling, deviation, augmentation
DNA Center APIs: intent-based configuration, assurance APIs

Recommended Resources:

Cisco official objectives

/certifications/cisco/cisco-ccnp-enterprise/notes#automation

/certifications/cisco/cisco-ccnp-enterprise/practice

/certifications/cisco/cisco-ccnp-enterprise/study-guide

Week 7

Final Review & Practice Exams

All domains

8-10 hours

Complete all three full-length practice exams
Review incorrect answers and weak domains
Revisit flashcards for key terms
Timed review of highest-weight domains

Recommended Resources:

Practice exams

Flashcards

Study notes PDF

Exam Tips & Strategies

Domain Insight 1

SD-Access overlay = VXLAN + LISP; SD-WAN data plane on edges, control on vSmart

Domain Insight 2

LLQ = priority queue for voice/video; never oversubscribe LLQ bandwidth

Follow Domain Weights

Spend more study time on higher-weighted domains — they drive the majority of exam questions.

Practice Under Time Pressure

Use timed practice exams to build pacing before test day.

Key Topics to Master

Enterprise network design principles (3-tier, collapsed core, spine-leaf)

SD-Access: underlay, overlay, fabric, DNA Center

LISP: EID, RLOC, ITR, ETR, map-server, map-resolver

VXLAN: VNI, VTEP, MP-BGP EVPN control plane

Layer 2: VLANs, trunks, STP, EtherChannel, private VLANs

Layer 3: IPv4/IPv6 routing, static routes, policy-based routing

NetFlow: flow records, collector, analyzer, versions (v5, v9, IPFIX)

SPAN and RSPAN for traffic mirroring

AAA: RADIUS vs TACACS+, authentication, authorization, accounting

TrustSec: SGT, SXP, SGACL, CTS

Python scripting: Netmiko, NAPALM, Paramiko for device automation

Ansible: playbooks, inventory, modules for network devices

For the most up-to-date exam information, visit the official exam guide.

View Official Exam Guide