Cisco Professional Certification

CCNP
Enterprise350-401 ENCOR — Advanced Enterprise Networking

Demonstrate mastery of enterprise infrastructure, SD-WAN, SD-Access, virtualization, security, and network automation. ENCOR is the core exam for the CCNP Enterprise certification and a prerequisite for CCIE Enterprise.

Start Your Learning Path

Professional LevelCore exam for CCNP Enterprise

SD-WAN & SD-AccessSoftware-defined networking depth

Security-IntegratedTrustSec, MACsec & 802.1X

75 Video Classes47:30 hrs of expert instruction

Empower the world's biggest networks

The CCNP Enterprise 350-401 ENCOR validates your ability to architect, implement, and troubleshoot enterprise networks at scale. It covers the full breadth from infrastructure and virtualization to SD-WAN, security, and automation.

2/3-tier design, SD-WAN, SD-Access, and QoS

OSPF, BGP, wireless LAN, and advanced routing

AAA, TrustSec, MACsec, and 802.1X security

Python, DNA Center APIs, YANG, and Ansible automation

Professional Networking Skills

Master every layer of the enterprise stack

Scale beyond associate-level networking. ENCOR builds deep expertise across architecture, routing, security, and automation — the full skillset of a professional-level enterprise engineer.

Enterprise Architecture

Design 2-tier, 3-tier, SD-WAN, and SD-Access architectures for large-scale enterprise networks.

Advanced Routing

Configure OSPFv2/v3, EIGRP, eBGP, and multicast routing with optimal path selection.

Wireless LAN

Deploy WLAN with proper RF design, AP discovery, roaming, and WLC-based management.

Infrastructure Security

Implement AAA, CoPP, 802.1X, TrustSec, MACsec, and NGFW integration.

Network Automation

Write Python scripts, use REST APIs, and automate with Ansible and EEM applets.

Network Virtualization

Deploy VRF, GRE tunnels, IPsec, VXLAN overlays, and SD-Access fabric segmentation.

Exam Blueprint

Six domains. Complete enterprise networking expertise.

The curriculum covers every domain in the ENCOR blueprint with particular depth in the Infrastructure domain which carries the highest exam weight.

Explore the curriculum

DOMAIN 0115%

Architecture

Design 2-tier, 3-tier, SD-WAN, and SD-Access enterprise architectures with QoS and switching.

DOMAIN 0210%

Virtualization

Configure VRF, GRE/IPsec tunneling, VXLAN, LISP, and network virtualization concepts.

DOMAIN 0330%

Infrastructure

Configure L2/L3, OSPF, BGP, wireless LAN, IP services, and multicast routing.

DOMAIN 0410%

Network Assurance

Use debugging, NetFlow, SPAN, IPSLA, DNA Center, NETCONF, and RESTCONF tools.

DOMAIN 0520%

Security

Configure AAA, CoPP, ACLs, 802.1X, TrustSec, MACsec, and wireless security.

DOMAIN 0615%

Automation

Apply Python, YANG, REST APIs, EEM applets, and orchestration tools for network automation.

Domain percentages can change. Always review Cisco's official exam page before scheduling.

What You Will Learn

A clear, exam-aligned curriculum

Expand each domain to see the configuration skills, protocols, and automation knowledge you will develop throughout this course.

2-tier and 3-tier enterprise network design principles
High availability: FHRP, redundancy, and SSO
SD-WAN control and data plane architecture
SD-Access architecture and traditional campus integration
QoS components, policies, and wired/wireless configuration
Hardware and software switching mechanisms: CEF, CAM, TCAM

Hypervisor type 1 and type 2 virtualization concepts
Virtual machine and virtual switching architecture
VRF configuration and data path virtualization
GRE and IPsec tunnel configuration and verification
LISP architecture and VXLAN encapsulation concepts
Network virtualization overlays for segmentation

Troubleshoot 802.1Q trunking and EtherChannels
STP: RSTP, MST, root guard, and BPDU guard
OSPF and EIGRP comparison, configuration, and path selection
eBGP neighbor relationships and best path selection
Wireless: RF, AP modes, Layer 2/3 roaming, and WLC selection
IP services: NTP, NAT/PAT, HSRP, VRRP, and multicast (PIM, IGMP)

Diagnose network problems with debugs, ping, traceroute, and SNMP
Configure and verify Flexible NetFlow for traffic visibility
SPAN, RSPAN, and ERSPAN traffic capture configuration
IP SLA configuration and verification for proactive monitoring
Cisco DNA Center workflows for network management
Configure and verify NETCONF and RESTCONF interfaces

Device access control: AAA, local authentication, and lines
Infrastructure security: ACLs, CoPP, and REST API security
802.1X, WebAuth, PSK, and EAPOL wireless security
TrustSec SGT-based segmentation and MACsec encryption
Next-generation firewall and endpoint security design
Network access control: 802.1X, MAB, and WebAuth integration

Interpret basic Python components and network automation scripts
Construct valid JSON-encoded files for API payloads
YANG data modelling and its benefits for network management
DNA Center and vManage REST API interpretation
Construct EEM applets for automated configuration and troubleshooting
Compare agent vs. agentless orchestration: Ansible, Puppet, Chef

Career Outcomes

Move into professional-level enterprise roles

CCNP Enterprise certification opens doors to senior networking roles in enterprise environments, ISPs, and cloud-connected organizations worldwide.

Who should learn?CCNA holders and network professionals targeting senior and architect roles

Network Engineer

Design and implement enterprise routing, switching, and wireless infrastructure at professional level.

Enterprise Architect

Architect SD-WAN, SD-Access, and hybrid cloud connectivity solutions for large organizations.

Network Automation Engineer

Automate enterprise network operations using Python, APIs, and configuration management tools.

Network Security Engineer

Implement enterprise security controls including 802.1X, TrustSec, and NGFW integration.

Your Roadmap

From architecture to automation mastery

Follow a structured path that progressively builds professional-level enterprise networking skills across all six ENCOR domains.

Architecture & Design

Master 2/3-tier design, SD-WAN, SD-Access, QoS, and high-availability enterprise architectures.

Infrastructure Depth

Configure OSPF, BGP, EIGRP, STP, EtherChannel, wireless LAN, and IP services at scale.

Virtualization & Security

Deploy VRF, GRE, VXLAN, AAA, CoPP, TrustSec, MACsec, and 802.1X security frameworks.

Assurance & Automation

Use NetFlow, SPAN, DNA Center, Python, YANG, and Ansible for monitoring and automation.

Exam domains are based on Cisco's official ENCOR 350-401 page.

Ready to advance your enterprise networking career?

Talk with a course advisor about the CCNP Enterprise path, prerequisite recommendations, and how ENCOR prepares you for senior and architect roles.

Chat on WhatsApp