Search...

Quick Feedback

Back to Cisco CCNP Enterprise (350-401 ENCOR)

Cisco CCNP Enterprise (350-401 ENCOR) Study Guide

Domain-by-domain study guide for Cisco Certified Network Professional Enterprise (350-401 ENCOR). Covers all 6 exam objectives with topic checklists, quick notes, and practice links.

Download PDF Notes

Exam Overview

Key facts before you start studying

Duration

120 min

Questions

100

Exam Code

350-401 ENCOR

Domains

Quick Navigation

Jump to a specific exam domain

1. Architecture (15%)
2. Virtualization (10%)
3. Infrastructure (30%)
4. Network Assurance (10%)
5. Security (20%)
6. Automation and Artificial Intelligence (15%)

Domain 1

15%

Architecture

Enterprise network architecture, SD-Access, SD-WAN, QoS, and wireless

Topics to Master

Enterprise network design principles (3-tier, collapsed core, spine-leaf)
SD-Access: underlay, overlay, fabric, DNA Center
SD-WAN: control plane, data plane, vSmart, vBond, vManage
QoS: classification, marking, queuing, policing, shaping
Wireless architectures: autonomous AP, LWAP, FlexConnect
WLC deployment models: centralized, distributed, cloud

Domain 2

10%

Virtualization

Network virtualization technologies: LISP, VXLAN, VRF, GRE

Topics to Master

LISP: EID, RLOC, ITR, ETR, map-server, map-resolver
VXLAN: VNI, VTEP, MP-BGP EVPN control plane
VRF: route leaking, route distinguisher (RD), route target (RT)
GRE tunnels: point-to-point, multipoint (DMVPN)
Virtual switching and virtual routing instances
MPLS L3VPN fundamentals (PE, CE, RD, RT)

Domain 3

30%

Infrastructure

Layer 2/3 technologies, routing protocols, multicast, and wireless

Topics to Master

Layer 2: VLANs, trunks, STP, EtherChannel, private VLANs
Layer 3: IPv4/IPv6 routing, static routes, policy-based routing
OSPF: areas, LSA types, path selection, authentication
EIGRP: metrics, feasible successor, stub routing, named mode
BGP: eBGP vs iBGP, attributes, path selection, communities
Multicast: IGMP, PIM sparse/dense mode, rendezvous point
WLAN: SSID, CAPWAP tunnels, QoS profiles, RF fundamentals

Domain 4

10%

Network Assurance

Network monitoring, troubleshooting, and diagnostics

Topics to Master

NetFlow: flow records, collector, analyzer, versions (v5, v9, IPFIX)
SPAN and RSPAN for traffic mirroring
Syslog: severity levels, logging destinations
SNMP: v2c vs v3, MIBs, traps, polling
IP SLA for network performance monitoring
DNA Center Assurance: path trace, AI-driven insights

Domain 5

20%

Security

Network security features and protocols

Topics to Master

AAA: RADIUS vs TACACS+, authentication, authorization, accounting
TrustSec: SGT, SXP, SGACL, CTS
MACsec: MKA, CAK, link-layer encryption
802.1X: EAP methods, supplicant, authenticator, authentication server
DHCP snooping, dynamic ARP inspection, IP source guard
Control Plane Policing (CoPP) and infrastructure ACLs

Domain 6

15%

Automation and Artificial Intelligence

Network automation, APIs, and programmability

Topics to Master

Python scripting: Netmiko, NAPALM, Paramiko for device automation
Ansible: playbooks, inventory, modules for network devices
REST APIs: GET, POST, PUT, DELETE, JSON payloads
RESTCONF and NETCONF for configuration management
YANG models: data modeling, deviation, augmentation
DNA Center APIs: intent-based configuration, assurance APIs

Continue Your Prep

Free CertStud resources for 350-401

Study Notes Exam Study Plan Start Practice Test

Back to Cisco CCNP Enterprise (350-401 ENCOR)

Cisco CCNP Enterprise (350-401 ENCOR) Study Guide

Domain-by-domain study guide for Cisco Certified Network Professional Enterprise (350-401 ENCOR). Covers all 6 exam objectives with topic checklists, quick notes, and practice links.

Download PDF Notes

Exam Overview

Key facts before you start studying

Duration

120 min

Questions

100

Exam Code

350-401 ENCOR

Domains

Quick Navigation

Jump to a specific exam domain

1. Architecture (15%)
2. Virtualization (10%)
3. Infrastructure (30%)
4. Network Assurance (10%)
5. Security (20%)
6. Automation and Artificial Intelligence (15%)

Domain 1

15%

Architecture

Enterprise network architecture, SD-Access, SD-WAN, QoS, and wireless

Topics to Master

Enterprise network design principles (3-tier, collapsed core, spine-leaf)
SD-Access: underlay, overlay, fabric, DNA Center
SD-WAN: control plane, data plane, vSmart, vBond, vManage
QoS: classification, marking, queuing, policing, shaping
Wireless architectures: autonomous AP, LWAP, FlexConnect
WLC deployment models: centralized, distributed, cloud

Domain 2

10%

Virtualization

Network virtualization technologies: LISP, VXLAN, VRF, GRE

Topics to Master

LISP: EID, RLOC, ITR, ETR, map-server, map-resolver
VXLAN: VNI, VTEP, MP-BGP EVPN control plane
VRF: route leaking, route distinguisher (RD), route target (RT)
GRE tunnels: point-to-point, multipoint (DMVPN)
Virtual switching and virtual routing instances
MPLS L3VPN fundamentals (PE, CE, RD, RT)

Domain 3

30%

Infrastructure

Layer 2/3 technologies, routing protocols, multicast, and wireless

Topics to Master

Layer 2: VLANs, trunks, STP, EtherChannel, private VLANs
Layer 3: IPv4/IPv6 routing, static routes, policy-based routing
OSPF: areas, LSA types, path selection, authentication
EIGRP: metrics, feasible successor, stub routing, named mode
BGP: eBGP vs iBGP, attributes, path selection, communities
Multicast: IGMP, PIM sparse/dense mode, rendezvous point
WLAN: SSID, CAPWAP tunnels, QoS profiles, RF fundamentals

Domain 4

10%

Network Assurance

Network monitoring, troubleshooting, and diagnostics

Topics to Master

NetFlow: flow records, collector, analyzer, versions (v5, v9, IPFIX)
SPAN and RSPAN for traffic mirroring
Syslog: severity levels, logging destinations
SNMP: v2c vs v3, MIBs, traps, polling
IP SLA for network performance monitoring
DNA Center Assurance: path trace, AI-driven insights

Domain 5

20%

Security

Network security features and protocols

Topics to Master

AAA: RADIUS vs TACACS+, authentication, authorization, accounting
TrustSec: SGT, SXP, SGACL, CTS
MACsec: MKA, CAK, link-layer encryption
802.1X: EAP methods, supplicant, authenticator, authentication server
DHCP snooping, dynamic ARP inspection, IP source guard
Control Plane Policing (CoPP) and infrastructure ACLs

Domain 6

15%

Automation and Artificial Intelligence

Network automation, APIs, and programmability

Topics to Master

Python scripting: Netmiko, NAPALM, Paramiko for device automation
Ansible: playbooks, inventory, modules for network devices
REST APIs: GET, POST, PUT, DELETE, JSON payloads
RESTCONF and NETCONF for configuration management
YANG models: data modeling, deviation, augmentation
DNA Center APIs: intent-based configuration, assurance APIs

Continue Your Prep

Free CertStud resources for 350-401

Study Notes Exam Study Plan Start Practice Test