CISCOCisco Certified Network Professional Enterprise
The Cisco Certified Network Professional (CCNP) Enterprise certification validates your ability to implement and operate advanced enterprise networking technologies, including dual-stack architecture, virtualization, network assurance, security, and automation. It is designed for network engineers who manage complex enterprise networks and want to advance their careers. Earning this certification demonstrates your expertise in the core technologies that power modern enterprise networks.
770 practice questions · Updated 2026-07-30
6Domains
27Objectives
208Concepts
770Questions
350-401 Curriculum
Every domain, objective, and concept the 350-401 exam measures.
- 2-tier design
- 3-tier design
- Fabric design
- Cloud design
- Redundancy
- FHRP
- SSO
- SD-WAN Control Plane Elements
- SD-WAN Data Plane Elements
- Control Plane Operations
- Data Plane Operations
- Benefits of Catalyst SD-WAN
- Limitations of Catalyst SD-WAN
- SD-Access Architecture Overview
- SD-Access Control Plane Elements
- SD-Access Data Plane Elements
- SD-Access Policy Plane Elements
- SD-Access Fabric Roles
- SD-Access Underlay and Overlay
- Traditional Campus Interoperability Overview
- SD-Access Border and Fusion Node
- Interoperability with Legacy Devices
- Migration and Coexistence Strategies
- QoS Configuration Interpretation
- Classification and Marking
- Queuing and Scheduling
- Shaping and Policing
- QoS Policy Application
- Hypervisor Type 1
- Hypervisor Type 2
- Comparison of Hypervisor Types
- Virtual Machine Concepts
- Virtual Machine Lifecycle
- Virtual Switching Fundamentals
- Virtual Switch Types
- Virtual Switch Features
- VRF Fundamentals
- VRF Configuration
- VRF Verification
- GRE Tunneling Basics
- GRE Tunnel Configuration
- IPsec Tunneling Basics
- IPsec Tunnel Configuration
- GRE over IPsec
- LISP architecture and components
- LISP operation and packet flow
- VXLAN architecture and encapsulation
- VXLAN operation and traffic flow
- 802.1Q Trunking Fundamentals
- Troubleshooting Static Trunk Configuration
- Troubleshooting Dynamic Trunking Protocol (DTP)
- EtherChannel Fundamentals
- Troubleshooting Static EtherChannel
- Troubleshooting Dynamic EtherChannel (LACP/PAgP)
- RSTP Operation and Configuration
- MST Operation and Configuration
- Spanning Tree Enhancements: Root Guard
- Spanning Tree Enhancements: BPDU Guard
- EIGRP vs OSPF Fundamentals
- EIGRP Path Selection and Metrics
- OSPF Path Selection and Metrics
- EIGRP Load Balancing
- OSPF Load Balancing
- OSPF Area Types
- OSPFv2 Configuration Basics
- OSPFv3 Configuration Basics
- OSPF Neighbor Adjacency Formation
- OSPF Network Types
- OSPF Passive Interfaces
- OSPF Multiple Areas and Summarization
- OSPF Filtering
- eBGP Neighbor Relationships
- eBGP Best Path Selection
- eBGP Verification
- Policy-Based Routing Fundamentals
- PBR Configuration and Verification
- NTP configuration and operation
- PTP configuration and operation
- NAT/PAT configuration
- NAT/PAT verification and troubleshooting
- HSRP configuration and operation
- VRRP configuration and operation
- First hop redundancy protocol concepts
- RPF check
- PIM Sparse Mode
- IGMP v2 and v3
- SSM
- Bidirectional PIM
- MSDP
- Using debug commands
- Conditional debugging
- Traceroute for path analysis
- Ping for connectivity testing
- SNMP for monitoring and diagnostics
- Syslog for event logging
- Integrating diagnostic tools
- Flexible NetFlow architecture
- Flow record configuration
- Flow exporter configuration
- Flow monitor configuration
- Applying flow monitors to interfaces
- Verifying Flexible NetFlow operation
- Troubleshooting Flexible NetFlow
- SPAN Overview
- SPAN Configuration
- SPAN Limitations
- RSPAN Overview
- RSPAN Configuration
- ERSPAN Overview
- ERSPAN Configuration
- Comparison of SPAN/RSPAN/ERSPAN
- IP SLA Fundamentals
- IP SLA Configuration
- IP SLA Verification
- IP SLA Scheduling
- IP SLA with Tracking
- Cisco Catalyst Center Overview
- Traditional Network Management Workflows
- AI-Powered Network Management Workflows
- Network Configuration Management
- Network Monitoring and Assurance
- Integration of Traditional and AI Workflows
- NETCONF overview
- RESTCONF overview
- YANG data models
- NETCONF operations
- RESTCONF methods
- NETCONF configuration and verification
- RESTCONF configuration and verification
- NETCONF message exchange
- RESTCONF message exchange
- Data encoding formats
- Troubleshooting NETCONF and RESTCONF
- Lines and local user authentication
- AAA authentication configuration
- AAA authorization configuration
- AAA accounting configuration
- ACL Fundamentals
- ACL Configuration and Verification
- ACL Placement and Direction
- ACL Best Practices and Troubleshooting
- Control Plane Policing (CoPP) Fundamentals
- CoPP Configuration
- CoPP Verification and Monitoring
- REST API Security Overview
- Authentication Mechanisms
- Authorization and Role-Based Access Control
- Transport Layer Security (TLS)
- OAuth 2.0 and OpenID Connect
- API Rate Limiting and Throttling
- Input Validation and Data Sanitization
- Logging and Monitoring for Security
- Threat Defense Fundamentals
- Threat Defense Technologies
- Threat Defense Design Considerations
- Endpoint Security Fundamentals
- Endpoint Security Technologies
- Endpoint Security Integration
- Next-Generation Firewall (NGFW) Overview
- NGFW Deployment and Design
- NGFW Policy and Inspection
- TrustSec Fundamentals
- TrustSec Architecture and Enforcement
- MACsec Fundamentals
- MACsec Deployment and Key Management
- Python syntax basics
- Control flow statements
- Functions and modules
- Data structures
- File I/O operations
- Error handling
- Script execution and debugging
- Network automation libraries
- JSON syntax rules
- JSON data types
- Nested JSON structures
- JSON formatting and validation
- Purpose of data modeling languages
- YANG as a data modeling language
- Benefits of using YANG
- High-level YANG constructs
- YANG modules and namespaces
- YANG data trees
- YANG types and constraints
- YANG and network automation
- Cisco Catalyst Center API Overview
- Catalyst Center API Operations
- SD-WAN Manager API Overview
- SD-WAN Manager API Operations
- API Workflow Comparison
- REST API response codes
- REST API response payload structure
- Catalyst Center API response specifics
- RESTCONF response specifics
- Error handling and troubleshooting
- EEM applet structure
- EEM event detectors
- EEM actions
- EEM applet configuration
- EEM applet for automation
- EEM applet for troubleshooting
- EEM applet for data collection
- EEM applet verification
- Agent-based orchestration
- Agentless orchestration
- Comparison of agent vs. agentless
- Use cases for agent-based orchestration
- Use cases for agentless orchestration
Ready to practice?Test your knowledge with exam-style questions or take an intelligent quiz tailored to your level.
Percentages reflect share of the current practice bank, not official exam weightings — no structured per-skill weight is published for 350-401, so none is invented.