This course prepares you for the Cisco 350-401 ENCOR core exam (Implementing and Operating Cisco Enterprise Network Core Technologies). It covers enterprise architecture, virtualization, infrastructure, network assurance, security and automation in modern Cisco environments.
Exam voucher : Exam voucher: included or optional depending on the package — contact us.
Objectives
Describe and design scalable, resilient and highly available enterprise network architectures
Implement network virtualization with VRF, VXLAN, Cisco SD-WAN and Cisco SD-Access
Configure and troubleshoot EIGRP, OSPF and BGP routing and redistribution mechanisms
Configure enterprise switching, trunks, EtherChannel, STP and high-availability features
Implement network services and network assurance with IP SLA, NetFlow, SNMP, Syslog and telemetry
Apply infrastructure security features, access controls and control-plane protection mechanisms
Use automation tools and APIs to operate and monitor Cisco networks
Program
Architecture (15%)
Campus, data-center, WAN and cloud architecture design
Two-tier and three-tier deployment models and spine-leaf architectures
High-availability, redundancy and convergence principles
Cisco SD-WAN and Cisco SD-Access architectures
Data, control and management planes
Designing for resilience, modularity and scalability
Virtualization (10%)
Device and network-function virtualization
VRF-Lite and routing-table segmentation
VXLAN and EVPN fabric principles
Control-plane virtualization with Cisco technologies
Containers, virtual machines and virtualized network functions
Virtualization use cases in enterprise environments
Infrastructure (30%)
VLANs, 802.1Q trunks, EtherChannel and interface negotiation
STP, RSTP, MST and Layer 2 loop protection
IPv4 and IPv6 routing with EIGRP, OSPF and BGP
Redistribution, summarization, filtering and best-path selection
Multicast routing and quality-of-service concepts
Cisco Wireless, WAN connectivity and transport technologies
DHCP, DNS, NTP, NAT and other infrastructure services
Troubleshooting switching, routing and connectivity
Network assurance (10%)
Network visibility and telemetry principles
IP SLA, performance tracking and failure detection
NetFlow and Flexible NetFlow for traffic analysis
SNMP, Syslog, NTP and event collection
Data models and model-driven telemetry
Cisco tools for monitoring and proactive troubleshooting
Security (20%)
Network security concepts and zero-trust principles
Securing administrative access with AAA, SSH and RBAC
IPv4 and IPv6 ACLs, traffic control and segmentation
Port security, DHCP snooping, Dynamic ARP Inspection and IP Source Guard
Control Plane Policing and control-plane protection
Wireless security, VPNs and IPsec principles
Detecting and limiting threats against the infrastructure
Automation (15%)
Network automation and programmability principles
REST APIs, JSON, HTTP and authentication methods
YANG, NETCONF, RESTCONF and data models
Using Python to interact with network devices
Ansible and automation of repetitive tasks
Cisco DNA Center, Cisco vManage and centralized management
Introduction to event-driven architectures and tool integration
Prerequisites
Cisco does not impose formal prerequisites for taking the 350-401 exam
Strong experience with IPv4/IPv6 routing, switching and Cisco IOS is strongly recommended
Knowledge close to CCNA level and practical enterprise-network experience are recommended
Cisco command-line practice and structured troubleshooting experience are essential to get the most from the hands-on labs
Some knowledge of Python, REST APIs and network virtualization is useful but not mandatory
Target audience
Network engineers and administrators responsible for enterprise infrastructures
Professionals preparing for the 350-401 ENCOR CCNP Enterprise core exam
Network architects and engineers designing campus, WAN and cloud networks
Network professionals looking to strengthen Cisco IOS XE and SD-WAN skills
Advanced operations, security and support teams
The exam
The 350-401 ENCOR (Implementing and Operating Cisco Enterprise Network Core Technologies) is the core exam in the CCNP Enterprise track. It lasts 120 minutes and is delivered in English through Pearson VUE, at a test center or online. Tested domains include architecture, virtualization, infrastructure, network assurance, security and automation. Passing ENCOR and one concentration exam is required to earn CCNP Enterprise. Cisco does not publish a fixed passing score; the required score may vary by exam version.
Preparation tips
Review CCNA fundamentals before tackling enterprise architecture, virtualization and automation
Build lab topologies and practice each failure scenario until you can isolate it methodically
Learn the verification commands, but focus especially on interpreting routing tables and troubleshooting output
Study the interactions between switching, routing, security, network assurance and automation instead of treating each technology in isolation
Practice with timed questions and review every uncertain answer
Become familiar with Cisco APIs, data models and programmability concepts before the exam
Frequently asked questions (FAQ)
Is 350-401 ENCOR alone enough to earn CCNP Enterprise?
No. CCNP Enterprise is earned by passing the 350-401 ENCOR core exam and one concentration exam, such as 300-410 ENARSI. This course focuses on the ENCOR exam.
What experience is recommended before this course?
Practical experience with routing, Cisco IOS, switching and network troubleshooting is strongly recommended. Knowledge covered by CCNA provides a suitable foundation.
Does the course include hands-on labs?
Yes. Labs cover switching, routing, high availability, virtualization, security, network assurance and automation of Cisco devices.
Does 350-401 ENCOR cover automation?
Yes. The outline covers programmability principles, REST APIs, YANG models, NETCONF, RESTCONF, Python, Ansible and Cisco management tools.
Is the exam available in French?
The Cisco 350-401 exam is generally delivered in English through Pearson VUE. Check the language options available when registering with Cisco or Pearson VUE.
Securevalley training — online and in-person sessions. Contact us for pricing and registration terms.
Securevalley is not a training partner of Cisco. Cisco, CCNP Enterprise and ENCOR are trademarks of Cisco.