CCNP (350-401 ENCOR Course)

The CCNP (Cisco Certified Network Professional) Enterprise certification, specifically the 350-401 ENCOR (Implementing Cisco Enterprise Network Core Technologies) course, is designed to equip IT professionals with the knowledge and skills necessary to implement and manage Cisco enterprise network solutions.

This comprehensive course covers a wide range of topics essential for designing, deploying, managing, and troubleshooting modern enterprise networks using Cisco technologies.

Network Core Technologies), is designed to equip IT professionals with advanced skills in deploying, managing, and troubleshooting enterprise networking solutions using Cisco technologies. This comprehensive training covers a wide spectrum of topics crucial for designing, configuring, securing, and optimizing enterprise networks.

The course emphasizes hands-on practice using Cisco routers, switches, and other networking devices in simulated lab environments. This practical approach ensures participants gain proficiency in configuring Cisco network solutions, troubleshooting network issues, and applying best practices in network design and management.

The benefits of completing the 350-401 ENCOR course and achieving CCNP Enterprise certification are significant. It validates expertise in Cisco enterprise networking technologies, enhances career prospects by demonstrating advanced skills sought after by employers globally, and prepares IT professionals to meet the challenges of designing and managing complex enterprise network infrastructures effectively.

In summary, the 350-401 ENCOR course provides comprehensive training in Cisco enterprise networking technologies, equipping IT professionals with the knowledge, skills, and certification necessary to excel in deploying, managing, and securing modern enterprise networks to support business goals and objectives.

What Will I Learn?

• Understand network fundamentals and technologies, including routing, switching, and wireless networking.
• Implement advanced routing and switching protocols, including OSPF, EIGRP, BGP, and STP.
• Deploy network services, such as DHCP, DNS, and SNMP, to support enterprise networks.
• Configure and troubleshoot network security measures, including ACLs, VPNs, and firewall policies.
• Knowledge of network virtualization concepts and technologies, including virtual network
• Implementing network security with access control policies, wireless security features, and infrastructure security.

Requirements:

• Basic understanding of networking protocols, such as IP addressing and subnetting.
• Familiarity with Ethernet and TCP/IP networking.
• Foundational knowledge of Cisco networking and the concepts involved in LAN, WAN, and wireless networks.
• Some experience with managing network devices (switches, routers, etc.) using Cisco's command-line interface (CLI).
• Basic knowledge of network security principles and best practices.
• Understanding of the fundamentals of wireless networking.
• Awareness of the importance of network virtualization and network services such as DNS, DHCP, SNMP, etc.
• Prior experience with any programming or scripting language is helpful but not mandatory.

Course Content:

• Domain 1: Architecture
• Explain the different design principles used in an enterprise network:
• Enterprise network design such as Tier 2, Tier 3, and Fabric Capacity planning 
• High availability techniques such as redundancy, FHRP, and SSO)
• Analyze design principles of a WLAN deployment:
• Wireless deployment models (centralized, distributed, controller-less, controller-based, cloud, remote branch) 
• Location services in a WLAN design 
• Differentiate between on-premises and cloud infrastructure deployments
• Explain the working principles of the Cisco SD-WAN solution:
• SD-WAN control and data planes elements 
• Traditional WAN and SD-WAN solutions 
• Explain the working principles of the Cisco SD-Access solution:
• SD-Access control and data planes elements 
• Traditional campus interoperating with SD-Access
• Describe concepts of wired and wireless QoS:
• QoS components 
• QoS policy 
• Differentiate hardware and software switching mechanisms:
• Process and CEF 
• MAC address table and TCAM
• FIB vs. RIB
• Domain 2: Virtualization
• Describe device virtualization technologies:
• Hypervisor type 1 and 2
• Virtual machine 
• Virtual switching
• Configure and verify data path virtualization technologies:
• VRF
• GRE and IPsec tunneling 
• Describe network virtualization concepts:
• LISP 
• VXLAN 
• Domain 3: Infrastructure
• Layer 2:
• Troubleshoot static and dynamic 802.1q trunking protocols
• Troubleshoot static and dynamic EtherChannels 
• Configure and verify common Spanning Tree Protocols (RSTP and MST) 
• Layer 3:
• Compare routing concepts of EIGRP and OSPF (advanced distance vector vs. linked state, load balancing, path selection, path operations, metrics)
• Configure and verify simple OSPF environments, including multiple normal areas, summarization, and filtering (neighbor adjacency, point-to-point, and broadcast network types, and passive-interface) 
• Configure and verify eBGP between directly connected neighbors (best path selection algorithm and neighbor relationships) 
• Wireless:
• Describe Layer 1 concepts, such as RF power, RSSI, SNR, interference noise, band and channels, and wireless client device capabilities
• Describe AP modes and antenna types Describing access point discovery and join process (discovery algorithms, WLC selection process)
• Describe the main principles and use cases for Layer 2 and Layer 3 roaming 
• Troubleshoot WLAN configuration and wireless client connectivity issues
• IP Services:
• Describe Network Time Protocol (NTP) 
• Configure and verify NAT/PAT 
• Configure first hop redundancy protocols, such as HSRP and VRRP 
• Describe multicast protocols, such as PIM and IGMP v2/v3 
• Domain 4: Network Assurance
• Diagnose network problems using tools such as debugs, conditional debugs, trace route, ping, SNMP, and syslog 
• Configure and verify device monitoring using syslog for remote logging
• Configure and verify NetFlow and Flexible NetFlow 
• Configure and verify SPAN/RSPAN/ERSPAN 
• Configure and verify IPSLA 
• Describe Cisco DNA Center workflows to apply network configuration, monitoring, and management 
• Configure and verify NETCONF and RESTCONF 
•  
• Domain 5: Security
• Configure and verify device access control:
• Lines and password protection
• Authentication and authorization using AAA
• Configure and verify infrastructure security features:
• ACLs
• CoPP 
• Describe REST API security:
• Configure and verify wireless security features:
• EAP 
• WebAuth
• PSK
• Describe the components of network security design:
• Threat defense
• Endpoint security 
• Next-generation firewall 
• TrustSec, MACsec
• Network access control with 802.1X, MAB, and WebAuth 
•  
• Domain 6: Automation
• Interpret basic Python components and scripts
• Construct valid JSON encoded file
• Describe the high-level principles and benefits of a data modeling language, such as YANG 
• Describe APIs for Cisco DNA Center and vManage 
• Interpret REST API response codes and results in payload using Cisco DNA Center and RESTCONF
• Construct EEM applet to automate configuration, troubleshooting, or data collection 
• Compare agent vs. agentless orchestration tools, such as Chef, Puppet, Ansible, and SaltStack