Cisco CCNP Enterprise (350-401 ENCOR + Concentration) Online Training & Certification Prep
Advance to Professional-level Cisco enterprise networking with in-depth coverage of ENCOR core technologies and your choice of concentration exam. Live Labs on real Cisco enterprise hardware give you the hands-on depth that complex multi-area OSPF, SD-WAN, and automation scenarios demand.
Course Overview
The Cisco Certified Network Professional Enterprise (CCNP Enterprise) validates advanced skills in designing, implementing, and troubleshooting enterprise network infrastructure. The certification requires passing two exams: the core exam (350-401 ENCOR) and one concentration exam of your choice. Boost eLearning’s CCNP Enterprise track covers both components in a single integrated curriculum.
The ENCOR core exam is the most technically demanding component. It spans dual-stack (IPv4/IPv6) architecture, virtualisation technologies, infrastructure (switching, routing, FHRP, wireless), network assurance, security (device hardening, 802.1X, MACsec, VPN), and automation (Python, Ansible, Terraform for IaC, YANG/NETCONF/RESTCONF, Cisco DNA Center APIs). Our course maps every domain to dedicated modules so you can track your progress against the official exam blueprint.
For the concentration exam, the course includes full coverage of the most widely chosen options: ENARSI (300-410, advanced routing and services), ENWLSD (300-425, wireless design), and ENSDWI (300-415, SD-WAN). You select the concentration path at enrolment. If your organisation is migrating to Cisco Viptela SD-WAN or you are working toward a network architect role, the SD-WAN and ENARSI paths are particularly relevant to current enterprise deployments.
Live Labs are central to this course. At the Professional level, packet simulators are inadequate for the complexity of multi-area OSPF, BGP, MPLS, SD-WAN onboarding, and Cisco DNA Center workflows. Our Live Labs environment provides access to real Cisco Catalyst, ISR, and CSR infrastructure so you can build, break, and fix multi-device topologies under realistic conditions. Certified Partner instructors who hold active CCNP or CCIE credentials lead all instruction, explaining not just configuration syntax but the design rationale and troubleshooting methodology used in production networks.
Upon passing both exams, you earn the CCNP Enterprise certification, which is valid for three years. You also earn a Cisco Specialist title for the concentration exam independently of the full CCNP, which can be listed separately on your CV.
What You'll Learn
- Design and implement dual-stack enterprise campus and WAN architectures
- Configure and troubleshoot multi-area OSPFv2/v3, EIGRP, and BGP
- Implement MPLS Layer 3 VPNs and understand label switching operation
- Deploy and verify SD-WAN (Viptela) fabric components: vManage, vSmart, vBond, and vEdge
- Configure advanced switching: VTP, Private VLANs, FlexConnect, and VXLAN concepts
- Implement First Hop Redundancy Protocols (HSRP, VRRP, GLBP)
- Deploy enterprise wireless: Cisco WLC, FlexConnect, and Catalyst Center wireless assurance
- Apply device hardening, Control Plane Policing (CoPP), and 802.1X with ISE
- Use Cisco DNA Center for network assurance, policy, and software image management
- Write and interpret Python scripts and Ansible playbooks for network automation
- Interact with RESTCONF/NETCONF and interpret YANG data models
- Troubleshoot complex routing and switching scenarios using systematic methodology
Who This Course Is For
- Network engineers holding CCNA or equivalent experience targeting a professional-level credential
- Senior network infrastructure engineers responsible for enterprise campus or WAN design
- Network architects planning SD-WAN or Cisco DNA Center migrations
- Pre-sales engineers needing deep technical credibility on Cisco enterprise solutions
- Network operations engineers managing complex multi-site environments
- Professionals preparing for CCIE Enterprise Infrastructure or CCIE Wireless
Course Outline
- Cisco enterprise architecture (Cisco DNA, hierarchical, spine-leaf)
- IPv6 addressing, routing, and transition mechanisms (6to4, NAT64, ISATAP)
- QoS architecture: classification, marking, queuing, shaping, policing
- Multicast fundamentals: PIM sparse mode, IGMP, RP placement
- High-availability design: redundant paths, fast convergence
- EIGRP named mode, metric tuning, and redistribution
- OSPFv2/v3 multi-area design, LSA types, virtual links, and path selection
- BGP attributes, path selection, route maps, and communities
- MPLS fundamentals, LDP, and Layer 3 VPN operation
- Route redistribution and policy-based routing
- Troubleshooting routing protocol adjacency and convergence issues
- VTP v3, Private VLANs, and Layer 2 security features
- Rapid PVST+ and MST tuning and troubleshooting
- VXLAN concepts and EVPN overview
- Cisco StackWise and VSS/VSL
- Network virtualisation: VRF-Lite and MPLS VPN
- Cisco enterprise WLAN architecture: centralised, FlexConnect, mesh
- WLC configuration and AP join process
- WLAN roaming and QoS for wireless
- Wireless security: WPA3, 802.1X EAP types, rogue AP detection
- Cisco Catalyst Center wireless assurance workflows
- SD-WAN architecture: vManage, vBond, vSmart, vEdge roles
- Zero-touch provisioning and onboarding
- OMP routing protocol and policy propagation
- Application-Aware Routing and SLA policies
- Direct Internet Access and cloud security integration
- Migrating from traditional WAN to SD-WAN
- OSPF and EIGRP advanced troubleshooting in large topologies
- BGP advanced attributes, filtering, and route reflection
- Layer 3 VPN and MPLS troubleshooting
- DHCP, NAT, and IPv6 services at scale
- IP SLA, Bidirectional Forwarding Detection (BFD)
- Infrastructure security: uRPF, CoPP, and traffic filtering
- Control Plane Policing (CoPP) and management plane hardening
- 802.1X with Cisco ISE: RADIUS, EAP-TLS, MAB, and profiling
- MACsec (802.1AE) on Catalyst switches
- VPN technologies: DMVPN, FlexVPN, and IPsec profiles
- Zone-based firewall policy concepts
- AAA and TACACS+ for infrastructure management
- YANG data models and model-driven telemetry
- NETCONF and RESTCONF operations
- Python scripting with Netmiko and NAPALM for network automation
- Ansible playbooks for multi-device configuration management
- Cisco DNA Center REST API: device inventory, command runner, and path trace
- Terraform for network infrastructure as code (IaC) concepts
- Network assurance: Cisco ThousandEyes and DNA Assurance workflows
- Complex Live Lab scenarios: multi-area OSPF + BGP redistribution
- SD-WAN policy and vManage configuration labs
- Full-length timed 350-401 ENCOR practice exams
- Concentration exam practice tests
- Systematic troubleshooting methodology drills
About the Certification Exam
- Exam code
- 350-401 ENCOR (core) + one concentration exam (e.g. 300-410 ENARSI, 300-415 ENSDWI, 300-425 ENWLSD)
- Length
- 120 minutes per exam
- Questions
- 90u2013110 per exam (multiple choice, drag-and-drop, simulation)
- Passing score
- 825 out of 1000 (both exams independently)
- Exam cost
- ~$400 USD per exam
- Where
- Pearson VUE (test centre or online proctored)
The certification exam fee is paid separately to the testing provider and is not included in the course price unless stated otherwise.
Live Labs Included
Hands-on practice on real environments
This course includes Live Labs — direct access to real hardware and cloud environments so you build the skills the exam actually tests.
- Build a four-router multi-area OSPFv2 topology with route summarisation, virtual links, and stub area configuration on real Cisco ISR hardware
- Configure eBGP and iBGP peering between autonomous systems, apply route maps with community tagging, and verify path selection with show ip bgp
- Deploy DMVPN Phase 2 with NHRP over a simulated internet core and verify spoke-to-spoke dynamic tunnels without hub-and-spoke forwarding
- Onboard a vEdge device to a Cisco SD-WAN fabric managed by vManage, configure an application-aware routing policy, and verify OMP route propagation
- Implement 802.1X port-based authentication on a Catalyst switch using a RADIUS server, test EAP authentication and MAB fallback for non-supplicant devices
- Use Python with Netmiko to query interface statistics across a five-device lab topology, then convert the workflow to an Ansible playbook using the ios_command module
Pass Guarantee Included
Complete this course and if you don't pass the certification exam on your first attempt, we'll refund your course fee or give you a free retake — your choice.
