CCNP Enterprise: ENCOR core and operations

Objectives and progression

Eight lessons and 58 original decisions in fictional APS and IT-project contexts. Internal assessment of 32 decisions in 70 minutes. Guided coverage of six ENCOR domains; not a substitute for labs or comprehensive preparation. MST, OSPFv3, NTP/PTP, PBR, advanced multicast, and concentrations need further depth. ENCOR v1.2 effective since 2026-03-19. Wireless left this core. CCNP Enterprise requires ENCOR and an eligible concentration; this initial course covers the core rather than every concentration.

Audience: Network engineers, APS L3 engineers, and technical infrastructure coordinators.

Prerequisites: CCNA-equivalent addressing, switching, routing, and Python basics. An isolated practice lab; no prior credential required to study here.

450 estimated study minutes

• Distinguish network planes and size service for failure conditions.
• Relate routing context, encapsulation, and isolation limits.
• Interpret trunks, aggregation, and protocol states without automatic conclusions.
• Diagnose path validity, preference, and state dependencies.
• Choose observations representing intended traffic and state.
• Protect access and protocols without conflating identity, authorization, and transport.
• Connect classification, enforcement, and trust to verifiable criteria.
• Interpret code and responses without conflating syntax, acceptance, and completion.

Modules

1. Architecture and surviving capacity
2. Virtualization, VRFs, and overlays
3. Switching and adjacency formation
4. Routing and IP services
5. Observation and programmable interfaces
6. AAA, ACLs, and control protection
7. Segmentation and API security
8. Automation and operational acceptance

Continue learning

Networking

• Cisco CCNA
• CompTIA Network+
• TCP/IP

References and version

350-401 ENCOR v1.2, effective 2026-03-19; core component of CCNP Enterprise

• CCNP Enterprise requirements and exam facts · 2026-09-30
• ENCOR exam topics · 2026-09-30
• CCNP Enterprise v1.2 changes · 2026-09-30
• ENCOR training and wireless exclusion · 2026-09-30
• Software-Defined Access design · 2026-09-30
• Financial vertical SD-Access and SD-WAN validated profile · 2026-09-30
• Policing and shaping · 2026-09-30
• Spanning tree guard features · 2026-09-30
• EtherChannels · 2026-09-30
• VLAN trunks · 2026-09-30
• BGP best path selection · 2026-09-30
• OSPF Exstart/Exchange diagnosis · 2026-09-30
• Default passive interfaces · 2026-09-30
• OSPFv3 · 2026-09-30
• Control plane policing · 2026-09-30
• Flexible NetFlow IPv4 flows · 2026-09-30
• IP SLA ICMP echo · 2026-09-30
• EEM policies through CLI · 2026-09-30
• VRF route leaking · 2026-09-30
• HSRP preempt and tracking · 2026-09-30
• SPAN and RSPAN · 2026-09-30
• TACACS+ method lists · 2026-09-30
• IP ACL processing · 2026-09-30
• MACsec encryption · 2026-09-30
• EIGRP topology and feasibility · 2026-09-30
• Catalyst Center asynchronous operations · 2026-09-30
• Catalyst Center AI Assistant · 2026-09-30
• NETCONF protocol · 2026-09-30
• RESTCONF protocol · 2026-09-30
• YANG 1.1 data modeling · 2026-09-30
• JSON data interchange · 2026-09-30
• HTTP semantics · 2026-09-30
• TACACS+ · 2026-09-30
• Traditional NAT · 2026-09-30
• GRE encapsulation · 2026-09-30
• OSPF version 2 · 2026-09-30
• PIM sparse mode · 2026-09-30
• NTP version 4 · 2026-09-30
• IPsec architecture · 2026-09-30
• Python data structures and list comprehensions · 2026-09-30
• Hypervisor types · 2026-09-30
• Ansible network automation basic concepts · 2026-09-30