CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022)

Preview (31 of 827 Pages)

100%

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 1 preview image

Loading page ...

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 2 preview image

Loading page ...

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 3 preview image

Loading page ...

CCNP and CCIE Enterprise CoreENCOR 350-401 Exam CramDonald Bacha

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 4 preview image

Loading page ...

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam CramCopyright © 2022 by Pearson Education, Inc.Allrightsreserved.Thispublicationisprotectedbycopyright,andpermission must be obtained from the publisher prior to any prohibitedreproduction, storage in a retrieval system, or transmission in any form or byany means, electronic, mechanical, photocopying, recording, or likewise. Forinformationregardingpermissions,requestforms,andtheappropriatecontactswithinthePearsonEducationGlobalRights&PermissionsDepartment, please visit www.pearson.com/permissions.No patent liability is assumed with respect to the use of the informationcontainedherein.Althougheveryprecautionhasbeentakeninthepreparation of this book, the publisher and author assume no responsibilityfor errors or omissions. Nor is any liability assumed for damages resultingfrom the use of the information contained herein.ISBN-13: 978-0-13-689193-2ISBN-10: 0-13-689193-4Library of Congress Control Number: 2021924388ScoutAutomatedPrintCodeTrademarksAll terms mentioned in this book that are known to be trademarks or servicemarks have been appropriately capitalized. Pearson IT Certification cannotattest to the accuracy of this information. Use of a term in this book shouldnot be regarded as affecting the validity of any trademark or service mark.Warning and DisclaimerEvery effort has been made to make this book as complete and as accurate aspossible, but no warranty or fitness is implied. The information provided ison an “as is” basis. The author and the publisher shall have neither liabilitynor responsibility to any person or entity with respect to any loss or damages

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 5 preview image

Loading page ...

arising from the information contained in this book.Special SalesFor information about buying this title in bulk quantities, or for special salesopportunities (which may include electronic versions; custom cover designs;and content particular to your business, training goals, marketing focus, orbrandinginterests),pleasecontactourcorporatesalesdepartmentatcorpsales@pearsoned.com or (800) 382-3419.Forgovernmentsalesinquiries,pleasecontactgovernmentsales@pearsoned.com.ForquestionsaboutsalesoutsidetheU.S.,pleasecontactintlcs@pearson.com.Editor-in-ChiefMark TaubDirector, ITP Product ManagementBrett BartowExecutive Acquisitions EditorJames ManlyDevelopment EditorEllie BruManaging EditorSandra SchroederProject EditorMandie FrankCopy EditorKitty WilsonIndexerProofreaderTechnical EditorRaymond LacostePublishing CoordinatorCindy TeetersDesigner

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 6 preview image

Loading page ...

Chuti PrasertsithCompositorcodeMantra

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 7 preview image

Loading page ...

Pearson’s Commitment to Diversity, Equity, andInclusionPearson is dedicated to creating bias-free content that reflects the diversity ofall learners. We embrace the many dimensions of diversity, including but notlimited to race, ethnicity, gender, socioeconomic status, ability, age, sexualorientation, and religious or political beliefs.Education is a powerful force for equity and change in our world. It has thepotential to deliver opportunities that improve lives and enable economicmobility. As we work with authors to create content for every product andservice, we acknowledge our responsibility to demonstrate inclusivity andincorporate diverse scholarship so that everyone can achieve their potentialthrough learning. As the world’s leading learning company, we have a dutyto help drive change and live up to our purpose to help more people create abetter life for themselves and to create a better world.Our ambition is to purposefully contribute to a world where• Everyone has an equitable and lifelong opportunity to succeed throughlearning• Our educational products and services are inclusive and represent the richdiversity of learners• Our educational content accurately reflects the histories and experiencesof the learners we serve• Our educational content prompts deeper discussions with learners andmotivates them to expand their own learning (and worldview)While we work hard to present unbiased content, we want to hear from youabout any concerns or needs with this Pearson product so that we caninvestigate and address them.Pleasecontactuswithconcernsaboutanypotentialbiasathttps://www.pearson.com/report-bias.html.

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 8 preview image

Loading page ...

Contents at a GlanceIntroductionPart 1: InfrastructureChapter 1. Understanding Layer 2Chapter 2. Understanding Layer 3: IGPsChapter 3. Understanding Layer 3: BGPChapter 4. IP ServicesChapter 5. Enterprise WirelessPart 2: SecurityChapter 6. Device Access ControlChapter 7. Infrastructure SecurityChapter 8. Securing REST APIsChapter 9. Wireless SecurityChapter 10. Network Security DesignChapter 11. Network Access ControlPart 3: AutomationChapter 12. Anatomy of PythonChapter 13. Building JSON FilesChapter 14. YANG Data Modeling

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 9 preview image

Loading page ...

Chapter 15. DNA Center and vManage APIsChapter 16. Interpreting REST API CodesChapter 17. EEM AppletsChapter 18. Configuration Management and OrchestrationPart 4: ArchitectureChapter 19. Enterprise Network Design PrinciplesChapter 20. Wireless LAN DeploymentsChapter 21. On-Premises vs. Cloud InfrastructureChapter 22. SD-WANChapter 23. SD-AccessChapter 24. QoSChapter 25. SwitchingPart 5: VirtualizationChapter 26. Basic VirtualizationChapter 27. VRF Instances, GRE, and IPsecChapter 28. Extending the Network VirtuallyPart 6: Network AssuranceChapter 29. TroubleshootingChapter 30. MonitoringChapter 31. IP SLA and DNA Center

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 10 preview image

Loading page ...

Chapter 32. NETCONF and RESTCONF

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 11 preview image

Loading page ...

Table of ContentsIntroductionAbout CCNP ENCOR 350-401 Exam CramAbout the ENCOR 350-401 ExamCompanion WebsitePearson Test Prep Practice Test SoftwareAssessing Exam ReadinessPremium Edition eBook and Practice TestsPart 1: InfrastructureChapter 1. Understanding Layer 2VLANs OverviewSpanning Tree Protocol OverviewEtherChannelsFurther ReadingWhat’s Next?Chapter 2. Understanding Layer 3: IGPsIP Routing EssentialsEnhanced Interior Gateway Routing Protocol (EIGRP)Open Shortest Path First (OSPF)Further ReadingWhat’s Next?Chapter 3. Understanding Layer 3: BGPBGP FundamentalsBGP Configuration and VerificationFurther ReadingWhat’s Next?Chapter 4. IP ServicesNetwork Time Protocol (NTP)

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 12 preview image

Loading page ...

Network Address Translation (NAT)First Hop Redundancy Protocols (FHRPs)MulticastFurther ReadingWhat’s Next?Chapter 5. Enterprise WirelessWireless BasicsWLC and AP Operation and PairingWireless RoamingFurther ReadingWhat’s Next?Part 2: SecurityChapter 6. Device Access ControlCisco IOS CLI Session OverviewAuthentication, Authorization, and Accounting (AAA) OverviewFurther ReadingWhat’s Next?Chapter 7. Infrastructure SecurityAccess Control Lists (ACLs) OverviewControl Plane Policing (CoPP)Further ReadingWhat’s Next?Chapter 8. Securing REST APIsSecuring REST APIsFurther ReadingWhat’s Next?Chapter 9. Wireless SecurityWireless Authentication OverviewFurther ReadingWhat’s Next?

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 13 preview image

Loading page ...

Chapter 10. Network Security DesignThreat DefenseTrustSec, MACsecFurther ReadingWhat’s Next?Chapter 11. Network Access ControlCisco Identity Services Engine (ISE)Further ReadingWhat’s Next?Part 3: AutomationChapter 12. Anatomy of PythonInterpreting Python Components and ScriptsFurther ReadingWhat’s Next?Chapter 13. Building JSON FilesData Formats (XML and JSON)Further ReadingWhat’s Next?Chapter 14. YANG Data ModelingYANG Data ModelingFurther ReadingWhat’s Next?Chapter 15. DNA Center and vManage APIsAPIs for Cisco DNA Center and vManageFurther ReadingWhat’s Next?Chapter 16. Interpreting REST API CodesInterpreting REST API Response CodesFurther Reading

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 14 preview image

Loading page ...

What’s Next?Chapter 17. EEM AppletsEmbedded Event Manager (EEM)Further ReadingWhat’s Next?Chapter 18. Configuration Management and OrchestrationAgent-Based Orchestration ToolsAgentless Orchestration ToolsFurther ReadingWhat’s Next?Part 4: ArchitectureChapter 19. Enterprise Network Design PrinciplesHierarchical LAN Design ModelFirst-Hop Redundancy Protocols (FHRPs)Hardware Redundancy MechanismsFurther ReadingWhat’s Next?Chapter 20. Wireless LAN DeploymentsWireless Deployment ModelsWireless Location ServicesFurther ReadingWhat’s Next?Chapter 21. On-Premises vs. Cloud InfrastructureCloud Infrastructure BasicsCloud Services ModelsCloud Deployment ModelsOn-Premises or Cloud InfrastructureFurther ReadingWhat’s Next?

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 15 preview image

Loading page ...

Chapter 22. SD-WANSD-WAN OverviewSD-WAN Architecture ComponentsFurther ReadingWhat’s Next?Chapter 23. SD-AccessSD-Access OverviewSD-Access ArchitectureSD-Access Operational PlanesSD-Access Fabric Roles and ComponentsFurther ReadingWhat’s Next?Chapter 24. QoSThe Need for QoSQoS Models and ComponentsCongestion Management and Congestion AvoidanceFurther ReadingWhat’s Next?Chapter 25. SwitchingTraffic Forwarding BasicsForwarding ArchitecturesFurther ReadingWhat’s Next?Part 5: VirtualizationChapter 26. Basic VirtualizationVirtualization OverviewVirtual Machines (VMs)Virtual SwitchingFurther ReadingWhat’s Next?

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 16 preview image

Loading page ...

Chapter 27. VRF Instances, GRE, and IPsecVirtual Routing and Forwarding (VRF)Generic Routing Encapsulation (GRE)IPsec VPNsFurther ReadingWhat’s Next?Chapter 28. Extending the Network VirtuallyLocator ID/Separation Protocol (LISP)Virtual Extensible LAN (VXLAN)Further ReadingWhat’s Next?Part 6: Network AssuranceChapter 29. TroubleshootingTroubleshooting OverviewSimple Network Management Protocol (SNMP)Further ReadingWhat’s Next?Chapter 30. MonitoringSyslogNetFlow and Flexible NetFlowSwitch Port Analyzer (SPAN), Remote SPAN (RSPAN), andEncapsulated Remote SPAN (ERSPAN)Further ReadingWhat’s Next?Chapter 31. IP SLA and DNA CenterIP SLA OverviewCisco DNA Center AssuranceFurther ReadingWhat’s Next?Chapter 32. NETCONF and RESTCONF

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 17 preview image

Loading page ...

NETCONFRESTCONFFurther ReadingWhat’s Next?

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 18 preview image

Loading page ...

About the AuthorDonald Bachais a systems engineer with a health research organization.He’s the technical lead responsible for the design and implementation ofnetworking, compute, virtualization, storage, and disaster recovery systems.Over the past 18 years, Donald has supported cloud services provider,enterprise, and data center environments by contributing to complex routingandswitching,datacenter,storage,andvirtualizationprojectsinbothgreenfield and brownfield deployments. His certifications include CCNPEnterprise, CCNP Data Center, and VCAP-DCV. He holds a master’s ofbusiness administration. Donald can be found at www.allthingsvirtual.net andon Twitter at @donald_bacha.

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 19 preview image

Loading page ...

DedicationFirst, I dedicate this book to our Lord and Savior Jesus Christ(I can do allthings through Christ which strengthens me.—Philippians 4:13).He hasblessed me with the opportunity to learn, write, and share my knowledge. Tomy father and mother, thank you for always supporting and encouraging me.

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 20 preview image

Loading page ...

AcknowledgmentsA debt of gratitude goes out to senior acquisitions editor James Manly forgiving me the opportunity to author this book and for his guidance. A specialthank you to my development editor, Ellie Bru, who did well working to getthis title out and for making it as strong as it can be. Many thanks go out toMandie Frank and Kitty Wilson for ensuring that this book looks good andreads easily. I would like to thank the entire Pearson team and those whocontributed in one way or another to this project.

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 21 preview image

Loading page ...

About the Technical ReviewerRaymond Lacostehas dedicated his career to developing the skills of thoseinterested in IT. In 2001, he began to mentor hundreds of IT professionalspursuing their Cisco certification dreams. This role led to teaching Ciscocourses full time. Raymond is currently master instructor for Cisco EnterpriseRouting and Switching, AWS, and ITIL at StormWind Studios. Raymondtreats all technologies as an escape room, working to uncover every mysteryin the protocols he works with. Along this journey, Raymond has passedmorethan110exams,andhisofficewallincludescertificatesfromMicrosoft, Cisco, ISC2, ITIL, AWS, and CompTIA. If you were visualizingRaymond’s office, you’d probably expect the usual network equipment,certifications, and awards. Those certainly take up space, but they aren’t hispride and joy. Most impressive, at least to Raymond, is his gemstone andmineral collection; once he starts talking about it, he just can’t stop. Whodoesn’t get excited by a wondrous barite specimen in a pyrite matrix?Raymond presently resides with his wife and two children in eastern Canada,where they experience many adventures together.

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 22 preview image

Loading page ...

We Want to Hear from You!Asthereaderofthisbook,youareourmostimportantcriticandcommentator. We value your opinion and want to know what we're doingright, what we could do better, what areas you'd like to see us publish in, andany other words of wisdom you're willing to pass our way.We welcome your comments. You can email or write to let us know whatyou did or didn't like about this book—as well as what we can do to make ourbooks better.Please note that we cannot help you with technical problems related to thetopic of this book.When you write, please be sure to include this book’s title and author as wellas your name and email address. We will carefully review your commentsand share them with the author and editors who worked on the book.Email: community@informit.com

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 23 preview image

Loading page ...

Reader ServicesRegister your copy ofCCNP and CCIE Enterprise Core ENCOR 250-401Exam Cramat www.pearsonitcertification.com for convenient accesstodownloads, updates, and corrections as they become available. To start theregistration process, go to www.pearsonitcertification.com/register and log inor create an account*. Enter the product ISBN 9780136891932 and clickSubmit. When the process is complete, you will find any available bonuscontent under Registered Products.*Be sure to check the box that you would like to hear from us to receiveexclusive discounts on future editions of this product.

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 24 preview image

Loading page ...

IntroductionWelcome toCCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram.This book is a late-stage preparation tool that covers the CCNP/CCIEENCOR 350-401 certification exam. It provides the information you need toquickly and efficiently go over all the topics covered on the CCNP/CCIEENCOR 350-401 exam. ThisExam Cramprovidesconcise and exam-focused coverage of all of the CCNP/CCIE ENCOR 350-401 exam domainsand objectives. It allows you to assess your preparedness and helps you topractice through questions and examples of the exam topics. The informationyou find in thisExam Cramwill aid you in your success as you buildknowledge, gain experience, and revise for the CCNP/CCIE ENCOR 350-401 exam.About CCNP ENCOR 350-401 Exam CramThisExam Cramfollows a predefined structure that makes the book easy tostudy as it provides the material in a concise manner. It also allows for thetesting of knowledge as you go through each chapter, covering the variousENCOR domains and objectives. This book includes the following helpfulelements:•Cram Sheet:This foldout tear card that appears inside the front cover ofthe book presents important information that you should go over justbefore taking the exam. It is the most important “cram” element of thebook and, as such, is presented as concisely as possible.•Chapter Topics:Each chapter begins with a list of the exam objectivesthat are covered in the chapter as well as a list of the main topics in thechapters. The chapter's topics are then covered in a concise manner, withbrief examples and figures where needed.•CramSavers:Each chapter contains a short-answer quiz that allows youto assess how knowledgeable you are about the topics covered in thechapter. It helps you figure out if you should skip the entire chapter orskim the material and skip ahead to the Exam Alerts and CramQuizzes

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 25 preview image

Loading page ...

for particular sections.•Exam Alerts:These notes provide exam-specific information that isimportant for you to know before you take the exam. Pay attention toExam Alerts because the material they cover is likely to appear on theexam.•Cram Quizzes:Each section of a chapter ends with a handful ofmultiple-choice questions that test your knowledge of the topics coveredin that section. You will find the answers and explanations followingeach quiz.•Review Questions:End-of-chapter review questions help you solidifywhat you have learned related to the topics for a particular chapter.Chances are you have picked up this book in the early stage of your studies.TheExam Cramseries was designed for late-stage study. So, unless you arevery familiar with the technologies covered in the CCNP/CCIE ENCOR 350-401 exam and have considerable experience configuring and troubleshootingCisco networks, it is highly recommended that you not use this book as yoursole study resource. ThisExam Cramis recommended for use after coreknowledge has been built.Both Cisco Press and Pearson IT Certification offer a number of CCNP/CCIEstudy materials to help you learn the core networking technologies coveredontheCCNP/CCIEENCOR350-401exam.Thefollowinghighlyrecommended resources will help you gain core knowledge of the topicscovered on the CCNP/CCIE ENCOR 350-401 exam:•CCNP and CCIE Enterprise Core 350-401 Official Cert GuidebyJason Gooley, Ramiro Garza Rios, Bradley Edgeworth, and DavidHucaby (ISBN 978-1-58714-523-0):This official cert guide providesin-depth coverage of the domains and objectives of the CCNP/CCIEENCOR 350-401 exam.•CCNP and CCIE Enterprise Core & CCNP Advanced Routing PortableCommand Guideby Patrick Gargano and Scott Empson (ISBN: 978-0-13-576816-7):Thisbookincludeslotsofconfigurationandverification examples to aid you in understanding the IOS commands

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 26 preview image

Loading page ...

you will encounter on the ENCOR and ENARSI exams.•CCNP Enterprise Advanced Routing ENARSI 300-410 Official CertGuidebyRaymondLacosteandBradEdgeworth(ISBN978-1587145254):I recommend that you read the routing-related chapters ofthis book (the first set of chapters, which covers EIGRP, OSPF, andBGP) tosupplement your Layer 3 core knowledge. The coauthor,Raymond Lacoste, is also the technical reviewer of thisExam Cram.•Cisco Modeling Labs (CML) Personal:CML Personal (formerly CiscoVIRL) is a powerful network virtualization and orchestration platformyou can use to study for Cisco certifications. CML Personal uses realCisco IOS imagesand givesyou the ability to simulate networksreliably. Both IOSv and IOSvL2 images are included. The majority ofthe topics that are coved in the CCNP/CCIE ENCOR 350-401 exam canbe practiced using CML Personal. CML Personal allows up to 20concurrent simulated nodes, and CML Personal Plus supports up to 40concurrent simulated nodes. The majority of the examples in thisExamCramwere created using CML Personal. For more information on CMLPersonal,seehttps://developer.cisco.com/docs/modeling-labs.CiscoCML Personal can be purchased from the Cisco Learning Network Storeathttps://learningnetworkstore.cisco.com/cisco-modeling-labs-personal/cisco-cml-personal.About the ENCOR 350-401 ExamThe material in thisExam Cramclosely follows the official exam domainsand objectives to ensure your success on the CCNP/CCIE ENCOR 350-401exam.ToearntheCCNPEnterprisecertification,thereisnoformalprerequisite, although Cisco recommends that you have a good understandingof the exam topics before taking the exams. In addition, Cisco recommendsthat CCNP candidates have three to five years of experience implementingenterprise networking solutions.To earn the CCNP Enterprise certification, you have to pass two exams: onerequired exam that covers core enterprise technologies and one enterpriseconcentration exam of your choice, based on your technical area of focus.

CCNP and CCIE Enterprise Core ENCOR 350-401 Exam Cram (2022) - Page 27 preview image

Loading page ...

Passinganyoftheseconcentrationexamsalsoallowsyoutoearnanindividual Specialist certification that helps recognize your accomplishmentsalong the way to earning your CCNP Enterprise certification. These are therequirements for earning the CCNP Enterprise certification:• Required exam: 350-401: Implementing and Operating Cisco EnterpriseNetwork Core Technologies (ENCOR)• One concentration exam:•300-410:ImplementingCiscoEnterpriseAdvancedRoutingandServices (ENARSI)• 300-415: Implementing Cisco SD-WAN Solutions (ENSDWI)• 300-420: Designing Cisco Enterprise Networks (ENSLD)• 300-425: Designing Cisco Enterprise Wireless Networks (ENWLSD)•300-430:ImplementingCiscoEnterpriseWirelessNetworks(ENWLSI)• 300-435: Implementing Automation for Cisco Enterprise Solutions(ENAUI)This book focuses on the required 350-401 (ENCOR) exam. It is a 120-minute exam that tests your knowledge of enterprise infrastructure, includingdual-stackarchitecture,virtualization,infrastructure,networkassurance,security, and automation. The CCNP/CCIE ENCOR 350-401 exam is alsothequalifyingexamfortheCCIEEnterpriseInfrastructureandCCIEEnterprise Wireless certifications. Once you pass the CCNP/CCIE ENCOR350-401 exam, you are automatically qualified to schedule and take the CCIElab exam in those tracks.Cisco ENCOR 350-401 Exam TopicsTable I-1 lists general exam topics (that is, objectives) and specific topicsunder each general topic (that is, subobjectives) for the CCNP/CCIE ENCOR350-401 exam. This table also lists the chapter in which each exam topic iscovered.