CCNP ENCOR 350-401 is the core technology exam for the Cisco CCNP Enterprise track, and it moves the learner from device-by-device CCNA configuration toward enterprise-wide design, operations, security, assurance and automation.
The main change is that routing, switching, wireless, security and programmability are tested as connected domains rather than separate topics. An ENCOR candidate must understand how campus networks, WAN overlays, WLAN access, controller workflows, telemetry, access control and scripts affect the same production network.
Traditional routing-and-switching study remains necessary: OSPF, EIGRP, BGP, VLANs, 802.1Q trunks, EtherChannel, STP, NAT, FHRP and multicast still appear in the ENCOR course curricula. ENCOR adds current enterprise constructs such as VRF-Lite, GRE, IPsec, VXLAN, LISP, SD-WAN, SD-Access, Cisco DNA Center workflows, NETCONF, RESTCONF, APIs and Python-based automation.
This hub contains 4 CCNP ENCOR courses with about 171 hours of video. Infrastructure Technologies for CCNP ENCOR 350-401 adds focused labs for the Infrastructure domain, and the CCNP Enterprise ENCOR + ENARSI bundle covers both exams required for CCNP Enterprise. Cisco CCNP ENCOR V1.1 350 - 401 Training - 2023 By Sajjad Ghaffoori is the broader blueprint-oriented path, with 144 lessons across architecture, virtualization, infrastructure, network assurance, security, WLAN and automation. CCNP Enterprise -ENCOR- 350-401 By Sikandar Shaik is shorter, with 30 lessons focused on Cisco certification context, GNS3 and EVE-NG lab setup, switching concepts, STP variants, VLANs, trunking and SPAN/RSPAN.
| CCNP ENCOR area | What you must be able to reason about | Course evidence in this hub |
|---|
| Architecture | 2-tier and 3-tier campus design, high availability, on-premises versus cloud deployment, QoS, SD-WAN, SD-Access and switching mechanisms. | Cisco CCNP ENCOR V1.1 350 - 401 Training - 2023 By Sajjad Ghaffoori includes dedicated architecture lessons on campus design, high availability, QoS, SD-WAN, SD-Access and deployment models. |
| Virtualization and lab platforms | VRF-Lite, GRE, IPsec, LISP, VXLAN, virtual machines, virtual switches and the limits of lab images compared with production devices. | Sajjad Ghaffoori includes EVE-NG, Cisco Modeling Labs, VRF-Lite labs, GRE labs and IPsec labs. Sikandar Shaik includes GNS3, EVE-NG, VMware integration, IOSv L2/L3, IOU L2/L3, ASAv and Viptela image preparation. |
| Infrastructure | VLANs, trunks, EtherChannel, STP variants, EIGRP, OSPF, BGP, NTP, NAT, FHRP and multicast, including how control-plane choices affect convergence and reachability. | Sajjad Ghaffoori provides the broader infrastructure sequence, including switching, EIGRP, OSPF, BGP, NAT, FHRP and multicast labs. Sikandar Shaik’s stated outcomes include switching concepts, STP, RSTP, MSTP, VLANs, trunking and switchport analysis. |
| Network assurance | Ping, traceroute, debug, SNMP, Syslog, NetFlow, Flexible NetFlow, SPAN, RSPAN, IP SLA, Cisco DNA Center workflows, NETCONF and RESTCONF. | Sajjad Ghaffoori has a dedicated network assurance module covering these tools and workflows. Sikandar Shaik includes SPAN/RSPAN in the stated outcomes and teaches the virtual lab setup needed to reproduce many visibility scenarios. |
| Security | Line and password protection, AAA, ACLs, CoPP, REST API security, endpoint security, NGFW concepts, TrustSec, MACsec, 802.1X, MAB and WebAuth. | Sajjad Ghaffoori maps these security topics to lessons and labs, including AAA, ACL, CoPP and WLAN authentication coverage. Sikandar Shaik includes ASAv and ASA image setup as part of the lab platform preparation, but its curriculum does not include a full ENCOR security module. |
| Wireless | Wi-Fi Layer 1 concepts, AP modes, antenna types, AP discovery and join, roaming, deployment models and WLAN security. | Sajjad Ghaffoori includes a WLAN module with vWLC lab work for EAP, PSK and WebAuth. The Sikandar Shaik course has no wireless lessons. |
| Automation | Python basics for network engineers, JSON, XML, data modeling, APIs, Postman, EEM, NETCONF, RESTCONF and configuration management tools. | Sajjad Ghaffoori includes Python labs, JSON/XML discovery from IOS, data modeling, API practice with Postman, EEM labs, Puppet, Chef, SaltStack and Ansible. The Sikandar Shaik course has no automation lessons. |
Choose Sajjad Ghaffoori’s course as the primary ENCOR 350-401 study path when you need coverage across the full enterprise core blueprint, including WLAN, assurance, security and automation. Choose Sikandar Shaik’s course when your immediate gap is building a usable GNS3 or EVE-NG lab and strengthening switching, VLAN, trunking, STP and SPAN/RSPAN fundamentals before deeper ENCOR study.
350-401 ENCOR is the professional-level core exam of CCNP Enterprise and covers six domains: Architecture (15%), Virtualization (10%), Infrastructure (30%), Network Assurance (10%), Security (20%) and Automation (15%). For every topic in each domain, see the CCNP ENCOR 350-401 exam topics. Check Cisco’s current exam page before scheduling for details that change over time, such as exam duration, registration rules and blueprint revisions.

ENCOR 350-401 is also the qualifying exam for the CCIE Enterprise Infrastructure lab; when you pass it, continue with our CCIE Enterprise Infrastructure training path.