PasswellLog inStart free
Cisco

CCNP ENCOR prep

For network engineers moving to professional level: proves you can design, run and troubleshoot dual-stack enterprise campus and WAN networks, including virtualization, assurance, security and automation.

Start freeUnlock everything · $49

The real exam

Exam350-401 ENCOR v1.2 (live since 19 March 2026)
QuestionsNot published, about 90 to 110 (mock uses 100)
Time120 minutes
Pass markScaled and unpublished, reports cluster around 750 to 850 of 1000
Fee$400 plus tax
NavigationForward only: no going back, no flagging, no review screen
Item typesMultiple choice, drag and drop, exhibits, testlets, simlets and labs
DeliveryPearson VUE test centre or OnVUE online
EarnsCisco Certified Specialist - Enterprise Core; core exam for CCNP Enterprise and the CCIE Enterprise Infrastructure qualifier
Validity3 years
Retake5 days after a fail, 180 days after a pass

What you get

55
lessons
6
hours of reading
320
original questions
3
full mock exams

Mocks follow the real rules: 100 questions in 120 minutes, no going back.

Syllabus

Architecture15%

Campus and fabric design, high availability, Catalyst SD-WAN, SD-Access and interpreting QoS configurations.

Virtualization10%

Hypervisors and virtual switching, VRF, GRE and IPsec tunnels, LISP and VXLAN.

Infrastructure30%

Trunks, EtherChannel, RSTP and MST, EIGRP vs OSPF, multi-area OSPF, eBGP, PBR, NTP and PTP, NAT, FHRPs and multicast.

Network Assurance10%

Debugs, SNMP and syslog, Flexible NetFlow, SPAN family, IP SLA, Catalyst Center workflows, NETCONF and RESTCONF.

Security20%

Lines, local users and AAA, ACLs and CoPP, REST API security, threat defense, NGFW, TrustSec and MACsec.

Automation and Artificial Intelligence15%

Python and JSON, YANG, Catalyst Center and SD-WAN Manager APIs, REST codes, EEM, agent vs agentless tools and AI in operations.

Course outline

  1. Enterprise architecture and high availability · 4 lessons
  2. Catalyst SD-WAN and SD-Access · 3 lessons
  3. Virtualization · 5 lessons
  4. Layer 2 switching · 5 lessons
  5. Layer 3 routing · 6 lessons
  6. IP services · 4 lessons
  7. Network assurance · 5 lessons
  8. Security · 4 lessons
  9. Automation and AI · 6 lessons
  10. Weak spots · 8 lessons
  11. Worked scenarios · 4 lessons
  12. Exam day · 1 lessons

Try a question

Refer to the exhibit. An engineer configured SSO on a dual-supervisor switch, but failover tests take several minutes. What is the most likely reason?
A. The redundancy communication link between the supervisors is down
B. NSF is not enabled under the routing process, so SSO cannot start
C. The supervisors run different software images, so the pair fell back to RPR
D. The peer supervisor is in maintenance mode and refuses to synchronize
Show answer
Answer: C. When the configured and operational redundancy modes differ, the switch has downgraded itself. Mismatched images are the common cause. In RPR the standby is only partly initialized (STANDBY COLD), so a switchover behaves almost like a reload. Matching the images restores STANDBY HOT and fast SSO failover.
In a looped access design, DIST-1 is the HSRP active router for VLAN 10. DIST-2 is the spanning tree root for VLAN 10. Users in VLAN 10 see higher latency than users in other VLANs. Traffic captures show frames from ACC-3 going to DIST-2 first and then across the inter-distribution link to DIST-1. What is the best fix?
A. Make DIST-1 the STP root for VLAN 10 to match the HSRP active router
B. Enable HSRP preemption on DIST-2 so that it becomes active whenever it is the root
C. Disable spanning tree on the inter-distribution link so both uplinks forward
D. Change VLAN 10 to use GLBP so that ACC-3 balances between both gateways
Show answer
Answer: A. In a looped Layer 2 access design, the access switch forwards on the uplink toward the root bridge and blocks the other. If the active gateway is on the other distribution switch, traffic takes an extra hop over the inter-distribution link. Make the same switch the STP root and the HSRP active router for each VLAN.

Passwell is not affiliated with or endorsed by Cisco Systems. Cisco, CCNP, CCIE and ENCOR are trademarks of Cisco Systems, Inc. All questions and lessons are original practice material, not real exam content. Facts checked 2026-11-14.