SP Networking Academy logoSP Networking AcademyLEARN • CONFIGURE • CONNECTGUI v1.1.6

CCNP Enterprise Training

Advanced enterprise networking learning pathways focused on design, implementation and troubleshooting.

Choose your CCNP programme

Select the certification track and training schedule that suits your learning plan.

350-401 ENCOR

CCNP ENCOR — Weekend

90 Hours

Duration3 MonthsSchedule15 WeekendsCoverageENCOR 350-401

Practical enterprise core training with structured weekend learning, configuration, verification and troubleshooting.

View Course
350-401 ENCOR

CCNP ENCOR — Regular

120 Hours

Duration3 MonthsSchedule60 SessionsCoverageENCOR 350-401

Comprehensive enterprise core training with additional time for routing, infrastructure, security and automation practice.

View Course
300-410 ENARSI

CCNP ENARSI — Weekend

90 Hours

Duration3 MonthsSchedule15 WeekendsCoverageENARSI 300-410

Advanced routing and services training with a weekend-based learning schedule and focused practical labs.

View Course
300-410 ENARSI

CCNP ENARSI — Regular

120 Hours

Duration3 MonthsSchedule60 SessionsCoverageENARSI 300-410

In-depth advanced routing, VPN, infrastructure security and services training with extensive practice.

View Course
OFFICIAL EXAM TOPICS

CCNP ENCOR 350-401 Syllabus

Implementing Cisco Enterprise Network Core Technologies v1.2 (350-401). The exam description identifies a 120-minute exam.

Source: 350-401 ENCOR v1.2
15% 1.0 Architecture View topics
  • 1.1 — Explain the different design principles used in an enterprise network
  • 1.1.a — High-level enterprise network design such as 2-tier, 3-tier, fabric, and cloud
  • 1.1.b — High availability techniques such as redundancy, FHRP, and SSO
  • 1.2 — Explain the working principles of the Cisco Catalyst SD-WAN solution
  • 1.2.a — SD-WAN control and data planes elements
  • 1.2.b — Benefits and limitations of Catalyst SD-WAN solution
  • 1.3 — Explain the working principles of the Cisco SD-Access solution
  • 1.3.a — SD-Access control and data planes elements
  • 1.3.b — Traditional campus interoperating with SD-Access
  • 1.4 — Interpret QoS configurations
10% 2.0 Virtualization View topics
  • 2.1 — Describe device virtualization technologies
  • 2.1.a — Hypervisor type 1 and 2
  • 2.1.b — Virtual machine
  • 2.1.c — Virtual switching
  • 2.2 — Configure and verify data path virtualization technologies
  • 2.2.a — VRF
  • 2.2.b — GRE and IPsec tunneling
  • 2.3 — Describe network virtualization concepts
  • 2.3.a — LISP
  • 2.3.b — VXLAN
30% 3.0 Infrastructure View topics
  • 3.1 — Layer 2
  • 3.1.a — Troubleshoot static and dynamic 802.1q trunking protocols
  • 3.1.b — Troubleshoot static and dynamic EtherChannels
  • 3.1.c — Configure and verify common Spanning Tree Protocols (RSTP, MST) and Spanning Tree enhancements such as root guard and BPDU guard
  • 3.2 — Layer 3
  • 3.2.a — Compare routing concepts of EIGRP and OSPF (advanced distance vector vs. link state, load balancing, path selection, path operations, metrics, and area types)
  • 3.2.b — Configure simple OSPFv2/v3 environments, including multiple normal areas, summarization, and filtering (neighbor adjacency, point-to-point, and broadcast network types, and passive-interface)
  • 3.2.c — Configure and verify eBGP between directly connected neighbors (best path selection algorithm and neighbor relationships)
  • 3.2.d — Describe policy-based routing
  • 3.3 — IP Services
  • 3.3.a — Interpret network time protocol configurations such as NTP and PTP
  • 3.3.b — Configure NAT/PAT
  • 3.3.c — Configure first hop redundancy protocols, such as HSRP, VRRP
  • 3.3.d — Describe multicast protocols, such as RPF check, PIM SM, IGMP v2/v3, SSM, bidir, and MSDP
10% 4.0 Network Assurance View topics
  • 4.1 — Diagnose network problems using such as debugs, conditional debugs, traceroute, ping, SNMP, and syslog
  • 4.2 — Configure and verify Flexible NetFlow
  • 4.3 — Configure SPAN/RSPAN/ERSPAN
  • 4.4 — Configure and verify IPSLA
  • 4.5 — Describe how Cisco Catalyst Center (formerly Cisco DNA Center) is used to apply network configuration, monitoring, and management using traditional and AI-powered workflows
  • 4.6 — Configure and verify NETCONF and RESTCONF
20% 5.0 Security View topics
  • 5.1 — Configure and verify device access control
  • 5.1.a — Lines and local user authentication
  • 5.1.b — Authentication and authorization using AAA
  • 5.2 — Configure and verify infrastructure security features
  • 5.2.a — ACLs
  • 5.2.b — CoPP
  • 5.3 — Describe REST API security
  • 5.4 — Describe the components of network security design
  • 5.4.a — Threat defense
  • 5.4.b — Endpoint security
  • 5.4.c — Next-generation firewall
  • 5.4.d — TrustSec and MACsec
15% 6.0 Automation and Artificial Intelligence View topics
  • 6.1 — Interpret basic Python components and scripts
  • 6.2 — Construct valid JSON-encoded files
  • 6.3 — Describe the high-level principles and benefits of a data modeling language, such as YANG
  • 6.4 — Describe APIs for Cisco Catalyst Center and SD-WAN Manager
  • 6.5 — Interpret REST API response codes and results in payload using Cisco Catalyst Center and RESTCONF
  • 6.6 — Construct an EEM applet to automate configuration, troubleshooting, or data collection
  • 6.7 — Compare agent vs. agentless orchestration tools

The following topics are general guidelines for the content likely to be included on the exam. Other related topics may also appear on any specific delivery of the exam, and the guidelines may change without notice.

OFFICIAL EXAM TOPICS

CCNP ENARSI 300-410 Syllabus

Implementing Cisco Enterprise Advanced Routing and Services v1.1 (300-410). The exam description identifies a 90-minute exam associated with the CCNP Enterprise Certification.

Source: 300-410 ENARSI v1.1
35% 1.0 Layer 3 Technologies View topics
  • 1.1 — Troubleshoot administrative distance (all routing protocols)
  • 1.2 — Troubleshoot route map for any routing protocol (attributes, tagging, filtering)
  • 1.3 — Troubleshoot loop prevention mechanisms (filtering, tagging, split horizon, route poisoning)
  • 1.4 — Troubleshoot redistribution between any routing protocols or routing sources
  • 1.5 — Troubleshoot manual and auto-summarization with any routing protocol
  • 1.6 — Configure and verify policy-based routing
  • 1.7 — Configure and verify VRF-Lite
  • 1.8 — Describe Bidirectional Forwarding Detection
  • 1.9 — Troubleshoot EIGRP (classic and named mode; VRF and global)
  • 1.9.a — Address families (IPv4, IPv6)
  • 1.9.b — Neighbor relationship and authentication
  • 1.9.c — Loop-free path selections (RD, FD, FC, successor, feasible successor, stuck in active)
  • 1.9.d — Stubs
  • 1.9.e — Load balancing (equal and unequal cost)
  • 1.9.f — Metrics
  • 1.10 — Troubleshoot OSPF (v2/v3)
  • 1.10.a — Address families (IPv4, IPv6)
  • 1.10.b — Neighbor relationship and authentication
  • 1.10.c — Network types, area types, and router types
  • 1.10.c (i) — Point-to-point, multipoint, broadcast, nonbroadcast
  • 1.10.c (ii) — Area type: backbone, normal, transit, stub, NSSA, totally stub
  • 1.10.c (iii) — Internal router, backbone router, ABR, ASBR
  • 1.10.c (iv) — Virtual link
  • 1.10.d — Path preference
  • 1.11 — Troubleshoot BGP (Internal and External; unicast and VRF-lite)
  • 1.11.a — Address families (IPv4, IPv6)
  • 1.11.b — Neighbor relationship and authentication (next-hop, mulithop, 4-byte AS, private AS, route refresh, synchronization, operation, peer group, states and timers)
  • 1.11.c — Path preference (attributes and best-path)
  • 1.11.d — Route reflector (excluding multiple route reflectors, confederations, dynamic peer)
  • 1.11.e — Policies (inbound/outbound filtering, path manipulation)
20% 2.0 VPN Technologies View topics
  • 2.1 — Describe MPLS operations (LSR, LDP, label switching, LSP)
  • 2.2 — Describe MPLS Layer 3 VPN
  • 2.3 — Configure and verify DMVPN (single hub)
  • 2.3.a — GRE/mGRE
  • 2.3.b — NHRP
  • 2.3.c — IPsec
  • 2.3.d — Dynamic neighbor
  • 2.3.e — Spoke-to-spoke
20% 3.0 Infrastructure Security View topics
  • 3.1 — Troubleshoot device security using IOS AAA (TACACS+, RADIUS, local database)
  • 3.2 — Troubleshoot router security features
  • 3.2.a — IPv4 access control lists (standard, extended, time-based)
  • 3.2.b — IPv6 traffic filter
  • 3.2.c — Unicast reverse path forwarding (uRPF)
  • 3.3 — Troubleshoot control plane policing (CoPP) (Telnet, SSH, HTTP(S), SNMP, EIGRP, OSPF, BGP)
  • 3.4 — Describe IPv6 First Hop security features (RA guard, DHCP guard, binding table, ND inspection/snooping, source guard)
25% 4.0 Infrastructure Services View topics
  • 4.1 — Troubleshoot device management
  • 4.1.a — Console and VTY
  • 4.1.b — Telnet, HTTP, HTTPS, SSH, SCP
  • 4.1.c — (T)FTP
  • 4.2 — Troubleshoot SNMP (v2c, v3)
  • 4.3 — Troubleshoot network problems using logging (local, syslog, debugs, conditional debugs, timestamps, telemetry)
  • 4.4 — Troubleshoot IPv4 and IPv6 DHCP (DHCP client, IOS DHCP server, DHCP relay, DHCP options)
  • 4.5 — Troubleshoot network performance issues using IP SLA (jitter, tracking objects, delay, connectivity)
  • 4.6 — Troubleshoot NetFlow (v9, flexible NetFlow, Ipfix)
  • 4.7 — Troubleshoot network problems using Cisco Catalyst Center Assurance (formerly Cisco DNA Center) (connectivity, monitoring, device health, network health)

The following topics are general guidelines for the content likely to be included on the exam. Other related topics may also appear on any specific delivery of the exam, and the guidelines may change without notice.