Skip to content
Certification Guides

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022)

Learn faster with CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022), featuring key study points for certification.

Preview 31 of 827 pages

See the first 31 pages exactly as they appear in the document.

  1. Page 1
  2. Page 2
  3. Page 3
    Read page 3 as text

    CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram Donald Bacha

  4. Page 4
    Read page 4 as text

    CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram Copyright © 2022 by Pearson Education, Inc. All rights reserved. This publication is protected by copyright, and permission must be obtained from the publisher prior to any prohibited reproduction, storage in a retrieval system, or transmission in any form or by any means, electronic, mechanical, photocopying, recording, or likewise. For information regarding permissions, request forms, and the appropriate contacts within the Pearson Education Global Rights & Permissions Department, please visit www.pearson.com/permissions. No patent liability is assumed with respect to the use of the information contained herein. Although every precaution has been taken in the preparation of this book, the publisher and author assume no responsibility for errors or omissions. Nor is any liability assumed for damages resulting from the use of the information contained herein. ISBN-13: 978-0-13-689193-2 ISBN-10: 0-13-689193-4 Library of Congress Control Number: 2021924388 ScoutAutomatedPrintCode Trademarks All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capitalized. Pearson IT Certification cannot attest to the accuracy of this information. Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark. Warning and Disclaimer Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied. The information provided is on an “as is” basis. The author and the publisher shall have neither liability nor responsibility to any person or entity with respect to any loss or damages

  5. Page 5
    Read page 5 as text

    arising from the information contained in this book. Special Sales For information about buying this title in bulk quantities, or for special sales opportunities (which may include electronic versions; custom cover designs; and content particular to your business, training goals, marketing focus, or branding interests), please contact our corporate sales department at corpsales@pearsoned.com or (800) 382-3419. For government sales inquiries, please contact governmentsales@pearsoned.com. For questions about sales outside the U.S., please contact intlcs@pearson.com. Editor-in-Chief Mark Taub Director, ITP Product Management Brett Bartow Executive Acquisitions Editor James Manly Development Editor Ellie Bru Managing Editor Sandra Schroeder Project Editor Mandie Frank Copy Editor Kitty Wilson Indexer Proofreader Technical Editor Raymond Lacoste Publishing Coordinator Cindy Teeters Designer

  6. Page 6
    Read page 6 as text

    Chuti Prasertsith Compositor codeMantra

  7. Page 7
    Read page 7 as text

    Pearson’s Commitment to Diversity, Equity, and Inclusion Pearson is dedicated to creating bias-free content that reflects the diversity of all learners. We embrace the many dimensions of diversity, including but not limited to race, ethnicity, gender, socioeconomic status, ability, age, sexual orientation, and religious or political beliefs. Education is a powerful force for equity and change in our world. It has the potential to deliver opportunities that improve lives and enable economic mobility. As we work with authors to create content for every product and service, we acknowledge our responsibility to demonstrate inclusivity and incorporate diverse scholarship so that everyone can achieve their potential through learning. As the world’s leading learning company, we have a duty to help drive change and live up to our purpose to help more people create a better life for themselves and to create a better world. Our ambition is to purposefully contribute to a world where • Everyone has an equitable and lifelong opportunity to succeed through learning • Our educational products and services are inclusive and represent the rich diversity of learners • Our educational content accurately reflects the histories and experiences of the learners we serve • Our educational content prompts deeper discussions with learners and motivates them to expand their own learning (and worldview) While we work hard to present unbiased content, we want to hear from you about any concerns or needs with this Pearson product so that we can investigate and address them. Please contact us with concerns about any potential bias at https://www.pearson.com/report-bias.html.

  8. Page 8
    Read page 8 as text

    Contents at a Glance Introduction Part 1: Infrastructure Chapter 1. Understanding Layer 2 Chapter 2. Understanding Layer 3: IGPs Chapter 3. Understanding Layer 3: BGP Chapter 4. IP Services Chapter 5. Enterprise Wireless Part 2: Security Chapter 6. Device Access Control Chapter 7. Infrastructure Security Chapter 8. Securing REST APIs Chapter 9. Wireless Security Chapter 10. Network Security Design Chapter 11. Network Access Control Part 3: Automation Chapter 12. Anatomy of Python Chapter 13. Building JSON Files Chapter 14. YANG Data Modeling

  9. Page 9
    Read page 9 as text

    Chapter 15. DNA Center and vManage APIs Chapter 16. Interpreting REST API Codes Chapter 17. EEM Applets Chapter 18. Configuration Management and Orchestration Part 4: Architecture Chapter 19. Enterprise Network Design Principles Chapter 20. Wireless LAN Deployments Chapter 21. On-Premises vs. Cloud Infrastructure Chapter 22. SD-WAN Chapter 23. SD-Access Chapter 24. QoS Chapter 25. Switching Part 5: Virtualization Chapter 26. Basic Virtualization Chapter 27. VRF Instances, GRE, and IPsec Chapter 28. Extending the Network Virtually Part 6: Network Assurance Chapter 29. Troubleshooting Chapter 30. Monitoring Chapter 31. IP SLA and DNA Center

  10. Page 10
    Read page 10 as text

    Chapter 32. NETCONF and RESTCONF

  11. Page 11
    Read page 11 as text

    Table of Contents Introduction About CCNP ENCOR 350-401 Exam Cram About the ENCOR 350-401 Exam Companion Website Pearson Test Prep Practice Test Software Assessing Exam Readiness Premium Edition eBook and Practice Tests Part 1: Infrastructure Chapter 1. Understanding Layer 2 VLANs Overview Spanning Tree Protocol Overview EtherChannels Further Reading What’s Next? Chapter 2. Understanding Layer 3: IGPs IP Routing Essentials Enhanced Interior Gateway Routing Protocol (EIGRP) Open Shortest Path First (OSPF) Further Reading What’s Next? Chapter 3. Understanding Layer 3: BGP BGP Fundamentals BGP Configuration and Verification Further Reading What’s Next? Chapter 4. IP Services Network Time Protocol (NTP)

  12. Page 12
    Read page 12 as text

    Network Address Translation (NAT) First Hop Redundancy Protocols (FHRPs) Multicast Further Reading What’s Next? Chapter 5. Enterprise Wireless Wireless Basics WLC and AP Operation and Pairing Wireless Roaming Further Reading What’s Next? Part 2: Security Chapter 6. Device Access Control Cisco IOS CLI Session Overview Authentication, Authorization, and Accounting (AAA) Overview Further Reading What’s Next? Chapter 7. Infrastructure Security Access Control Lists (ACLs) Overview Control Plane Policing (CoPP) Further Reading What’s Next? Chapter 8. Securing REST APIs Securing REST APIs Further Reading What’s Next? Chapter 9. Wireless Security Wireless Authentication Overview Further Reading What’s Next?

  13. Page 13
    Read page 13 as text

    Chapter 10. Network Security Design Threat Defense TrustSec, MACsec Further Reading What’s Next? Chapter 11. Network Access Control Cisco Identity Services Engine (ISE) Further Reading What’s Next? Part 3: Automation Chapter 12. Anatomy of Python Interpreting Python Components and Scripts Further Reading What’s Next? Chapter 13. Building JSON Files Data Formats (XML and JSON) Further Reading What’s Next? Chapter 14. YANG Data Modeling YANG Data Modeling Further Reading What’s Next? Chapter 15. DNA Center and vManage APIs APIs for Cisco DNA Center and vManage Further Reading What’s Next? Chapter 16. Interpreting REST API Codes Interpreting REST API Response Codes Further Reading

  14. Page 14
    Read page 14 as text

    What’s Next? Chapter 17. EEM Applets Embedded Event Manager (EEM) Further Reading What’s Next? Chapter 18. Configuration Management and Orchestration Agent-Based Orchestration Tools Agentless Orchestration Tools Further Reading What’s Next? Part 4: Architecture Chapter 19. Enterprise Network Design Principles Hierarchical LAN Design Model First-Hop Redundancy Protocols (FHRPs) Hardware Redundancy Mechanisms Further Reading What’s Next? Chapter 20. Wireless LAN Deployments Wireless Deployment Models Wireless Location Services Further Reading What’s Next? Chapter 21. On-Premises vs. Cloud Infrastructure Cloud Infrastructure Basics Cloud Services Models Cloud Deployment Models On-Premises or Cloud Infrastructure Further Reading What’s Next?

  15. Page 15
    Read page 15 as text

    Chapter 22. SD-WAN SD-WAN Overview SD-WAN Architecture Components Further Reading What’s Next? Chapter 23. SD-Access SD-Access Overview SD-Access Architecture SD-Access Operational Planes SD-Access Fabric Roles and Components Further Reading What’s Next? Chapter 24. QoS The Need for QoS QoS Models and Components Congestion Management and Congestion Avoidance Further Reading What’s Next? Chapter 25. Switching Traffic Forwarding Basics Forwarding Architectures Further Reading What’s Next? Part 5: Virtualization Chapter 26. Basic Virtualization Virtualization Overview Virtual Machines (VMs) Virtual Switching Further Reading What’s Next?

  16. Page 16
    Read page 16 as text

    Chapter 27. VRF Instances, GRE, and IPsec Virtual Routing and Forwarding (VRF) Generic Routing Encapsulation (GRE) IPsec VPNs Further Reading What’s Next? Chapter 28. Extending the Network Virtually Locator ID/Separation Protocol (LISP) Virtual Extensible LAN (VXLAN) Further Reading What’s Next? Part 6: Network Assurance Chapter 29. Troubleshooting Troubleshooting Overview Simple Network Management Protocol (SNMP) Further Reading What’s Next? Chapter 30. Monitoring Syslog NetFlow and Flexible NetFlow Switch Port Analyzer (SPAN), Remote SPAN (RSPAN), and Encapsulated Remote SPAN (ERSPAN) Further Reading What’s Next? Chapter 31. IP SLA and DNA Center IP SLA Overview Cisco DNA Center Assurance Further Reading What’s Next? Chapter 32. NETCONF and RESTCONF

  17. Page 17
    Read page 17 as text

    NETCONF RESTCONF Further Reading What’s Next?

  18. Page 18
    Read page 18 as text

    About the Author Donald Bacha is a systems engineer with a health research organization. He’s the technical lead responsible for the design and implementation of networking, compute, virtualization, storage, and disaster recovery systems. Over the past 18 years, Donald has supported cloud services provider, enterprise, and data center environments by contributing to complex routing and switching, data center, storage, and virtualization projects in both greenfield and brownfield deployments. His certifications include CCNP Enterprise, CCNP Data Center, and VCAP-DCV. He holds a master’s of business administration. Donald can be found at www.allthingsvirtual.net and on Twitter at @donald_bacha.

  19. Page 19
    Read page 19 as text

    Dedication First, I dedicate this book to our Lord and Savior Jesus Christ (I can do all things through Christ which strengthens me.—Philippians 4:13). He has blessed me with the opportunity to learn, write, and share my knowledge. To my father and mother, thank you for always supporting and encouraging me.

  20. Page 20
    Read page 20 as text

    Acknowledgments A debt of gratitude goes out to senior acquisitions editor James Manly for giving me the opportunity to author this book and for his guidance. A special thank you to my development editor, Ellie Bru, who did well working to get this title out and for making it as strong as it can be. Many thanks go out to Mandie Frank and Kitty Wilson for ensuring that this book looks good and reads easily. I would like to thank the entire Pearson team and those who contributed in one way or another to this project.

  21. Page 21
    Read page 21 as text

    About the Technical Reviewer Raymond Lacoste has dedicated his career to developing the skills of those interested in IT. In 2001, he began to mentor hundreds of IT professionals pursuing their Cisco certification dreams. This role led to teaching Cisco courses full time. Raymond is currently master instructor for Cisco Enterprise Routing and Switching, AWS, and ITIL at StormWind Studios. Raymond treats all technologies as an escape room, working to uncover every mystery in the protocols he works with. Along this journey, Raymond has passed more than 110 exams, and his office wall includes certificates from Microsoft, Cisco, ISC2, ITIL, AWS, and CompTIA. If you were visualizing Raymond’s office, you’d probably expect the usual network equipment, certifications, and awards. Those certainly take up space, but they aren’t his pride and joy. Most impressive, at least to Raymond, is his gemstone and mineral collection; once he starts talking about it, he just can’t stop. Who doesn’t get excited by a wondrous barite specimen in a pyrite matrix? Raymond presently resides with his wife and two children in eastern Canada, where they experience many adventures together.

  22. Page 22
    Read page 22 as text

    We Want to Hear from You! As the reader of this book, you are our most important critic and commentator. We value your opinion and want to know what we're doing right, what we could do better, what areas you'd like to see us publish in, and any other words of wisdom you're willing to pass our way. We welcome your comments. You can email or write to let us know what you did or didn't like about this book—as well as what we can do to make our books better. Please note that we cannot help you with technical problems related to the topic of this book. When you write, please be sure to include this book’s title and author as well as your name and email address. We will carefully review your comments and share them with the author and editors who worked on the book. Email: community@informit.com

  23. Page 23
    Read page 23 as text

    Reader Services Register your copy of CCNP and CCIE Enterprise Core ENCOR 250-401 Exam Cram at www.pearsonitcertification.com for convenient access to downloads, updates, and corrections as they become available. To start the registration process, go to www.pearsonitcertification.com/register and log in or create an account*. Enter the product ISBN 9780136891932 and click Submit. When the process is complete, you will find any available bonus content under Registered Products. *Be sure to check the box that you would like to hear from us to receive exclusive discounts on future editions of this product.

  24. Page 24
    Read page 24 as text

    Introduction Welcome to CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram . This book is a late-stage preparation tool that covers the CCNP/CCIE ENCOR 350-401 certification exam. It provides the information you need to quickly and efficiently go over all the topics covered on the CCNP/CCIE ENCOR 350-401 exam. This Exam Cram provides concise and exam- focused coverage of all of the CCNP/CCIE ENCOR 350-401 exam domains and objectives. It allows you to assess your preparedness and helps you to practice through questions and examples of the exam topics. The information you find in this Exam Cram will aid you in your success as you build knowledge, gain experience, and revise for the CCNP/CCIE ENCOR 350- 401 exam. About CCNP ENCOR 350-401 Exam Cram This Exam Cram follows a predefined structure that makes the book easy to study as it provides the material in a concise manner. It also allows for the testing of knowledge as you go through each chapter, covering the various ENCOR domains and objectives. This book includes the following helpful elements: • Cram Sheet: This foldout tear card that appears inside the front cover of the book presents important information that you should go over just before taking the exam. It is the most important “cram” element of the book and, as such, is presented as concisely as possible. • Chapter Topics: Each chapter begins with a list of the exam objectives that are covered in the chapter as well as a list of the main topics in the chapters. The chapter's topics are then covered in a concise manner, with brief examples and figures where needed. • CramSavers: Each chapter contains a short-answer quiz that allows you to assess how knowledgeable you are about the topics covered in the chapter. It helps you figure out if you should skip the entire chapter or skim the material and skip ahead to the Exam Alerts and CramQuizzes

  25. Page 25
    Read page 25 as text

    for particular sections. • Exam Alerts: These notes provide exam-specific information that is important for you to know before you take the exam. Pay attention to Exam Alerts because the material they cover is likely to appear on the exam. • Cram Quizzes: Each section of a chapter ends with a handful of multiple-choice questions that test your knowledge of the topics covered in that section. You will find the answers and explanations following each quiz. • Review Questions: End-of-chapter review questions help you solidify what you have learned related to the topics for a particular chapter. Chances are you have picked up this book in the early stage of your studies. The Exam Cram series was designed for late-stage study. So, unless you are very familiar with the technologies covered in the CCNP/CCIE ENCOR 350- 401 exam and have considerable experience configuring and troubleshooting Cisco networks, it is highly recommended that you not use this book as your sole study resource. This Exam Cram is recommended for use after core knowledge has been built. Both Cisco Press and Pearson IT Certification offer a number of CCNP/CCIE study materials to help you learn the core networking technologies covered on the CCNP/CCIE ENCOR 350-401 exam. The following highly recommended resources will help you gain core knowledge of the topics covered on the CCNP/CCIE ENCOR 350-401 exam: • CCNP and CCIE Enterprise Core 350-401 Official Cert Guide by Jason Gooley, Ramiro Garza Rios, Bradley Edgeworth, and David Hucaby (ISBN 978-1-58714-523-0): This official cert guide provides in-depth coverage of the domains and objectives of the CCNP/CCIE ENCOR 350-401 exam. • CCNP and CCIE Enterprise Core & CCNP Advanced Routing Portable Command Guide by Patrick Gargano and Scott Empson (ISBN: 978- 0-13-576816-7): This book includes lots of configuration and verification examples to aid you in understanding the IOS commands

  26. Page 26
    Read page 26 as text

    you will encounter on the ENCOR and ENARSI exams. • CCNP Enterprise Advanced Routing ENARSI 300-410 Official Cert Guide by Raymond Lacoste and Brad Edgeworth (ISBN 978- 1587145254): I recommend that you read the routing-related chapters of this book (the first set of chapters, which covers EIGRP, OSPF, and BGP) to supplement your Layer 3 core knowledge. The coauthor, Raymond Lacoste, is also the technical reviewer of this Exam Cram . • Cisco Modeling Labs (CML) Personal: CML Personal (formerly Cisco VIRL) is a powerful network virtualization and orchestration platform you can use to study for Cisco certifications. CML Personal uses real Cisco IOS images and gives you the ability to simulate networks reliably. Both IOSv and IOSvL2 images are included. The majority of the topics that are coved in the CCNP/CCIE ENCOR 350-401 exam can be practiced using CML Personal. CML Personal allows up to 20 concurrent simulated nodes, and CML Personal Plus supports up to 40 concurrent simulated nodes. The majority of the examples in this Exam Cram were created using CML Personal. For more information on CML Personal, see https://developer.cisco.com/docs/modeling-labs. Cisco CML Personal can be purchased from the Cisco Learning Network Store at https://learningnetworkstore.cisco.com/cisco-modeling-labs- personal/cisco-cml-personal. About the ENCOR 350-401 Exam The material in this Exam Cram closely follows the official exam domains and objectives to ensure your success on the CCNP/CCIE ENCOR 350-401 exam. To earn the CCNP Enterprise certification, there is no formal prerequisite, although Cisco recommends that you have a good understanding of the exam topics before taking the exams. In addition, Cisco recommends that CCNP candidates have three to five years of experience implementing enterprise networking solutions. To earn the CCNP Enterprise certification, you have to pass two exams: one required exam that covers core enterprise technologies and one enterprise concentration exam of your choice, based on your technical area of focus.

  27. Page 27
    Read page 27 as text

    Passing any of these concentration exams also allows you to earn an individual Specialist certification that helps recognize your accomplishments along the way to earning your CCNP Enterprise certification. These are the requirements for earning the CCNP Enterprise certification: • Required exam: 350-401: Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) • One concentration exam: • 300-410: Implementing Cisco Enterprise Advanced Routing and Services (ENARSI) • 300-415: Implementing Cisco SD-WAN Solutions (ENSDWI) • 300-420: Designing Cisco Enterprise Networks (ENSLD) • 300-425: Designing Cisco Enterprise Wireless Networks (ENWLSD) • 300-430: Implementing Cisco Enterprise Wireless Networks (ENWLSI) • 300-435: Implementing Automation for Cisco Enterprise Solutions (ENAUI) This book focuses on the required 350-401 (ENCOR) exam. It is a 120- minute exam that tests your knowledge of enterprise infrastructure, including dual-stack architecture, virtualization, infrastructure, network assurance, security, and automation. The CCNP/CCIE ENCOR 350-401 exam is also the qualifying exam for the CCIE Enterprise Infrastructure and CCIE Enterprise Wireless certifications. Once you pass the CCNP/CCIE ENCOR 350-401 exam, you are automatically qualified to schedule and take the CCIE lab exam in those tracks. Cisco ENCOR 350-401 Exam Topics Table I-1 lists general exam topics (that is, objectives) and specific topics under each general topic (that is, subobjectives) for the CCNP/CCIE ENCOR 350-401 exam. This table also lists the chapter in which each exam topic is covered.

  28. Page 28
    Read page 28 as text

    TABLE I-1 ENCOR 350-401 Exam Topics

  29. Page 29
  30. Page 30
  31. Page 31

796 more pages in the full document

Unlock it once and it stays in your library, ready to chat with or turn into flashcards.

Unlock the full document

More Cisco Certified Network Professional study materials

See all

Study this document with CramX

Once it is in your library, every tool can work from it.