Implementing Cisco Enterprise Network Core Technologies (350-401 ENCOR)

• Exam Number:                           350-401 ENCOR
• First date to test:                        February 24, 2020
• Duration:                                          120 minutes
• Available Lan               guages:             English
• Exam Registration:                   Pearson VUE

Associated Certifications:
This exam will be pre-requisite exam to be eligible to attain any one of the below Certifications:

• CCNP Enterprise
• CCIE Enterprise Infrastructure
• CCIE Enterprise Wireless
• Cisco Certified Specialist - Enterprise Core

350-401 ENCOR   Exam overview
This exam tests your knowledge and skills related to implementing core enterprise network technologies, including:

• Dual stack (IPv4 and IPv6) architecture
• Virtualization
• Infrastructure
• Network assurance
• Security
• Automation

ENCOR Exam Topics

1.0 Architecture            15%
Explain the different design principles used in an enterprise network

• Enterprise network design such as Tier 2, Tier 3, and Fabric Capacity planning
• High availability techniques such as redundancy, FHRP, and SSO

Analyze design principles of a WLAN deployment

• Wireless deployment models (centralized, distributed, controller-less, controller based, cloud, remote branch)
• Location services in a WLAN design

Differentiate between on-premises and cloud infrastructure deployments
Explain the working principles of the Cisco SD-WAN solution

• SD-WAN control and data planes elements
• Traditional WAN and SD-WAN solutions

Explain the working principles of the Cisco SD-Access solution

• SD-Access control and data planes elements
• Traditional campus interoperating with SD-Access

Describe concepts of wired and wireless QoS

• QoS components
• QoS policy

Differentiate hardware and software switching mechanisms

• Process and CEF
• MAC address table and TCAM
• FIB vs. RIB

2.0 Virtualization                       10%
Describe device virtualization technologies

• Hypervisor type 1 and 2
• Virtual machine
• Virtual switching

Configure and verify data path virtualization technologies

• VRF
• GRE and IPsec tunneling
• Describe network virtualization concepts

• a LISP
• VXLAN

 3.0 Infrastructure     30%
 Layer 2

• Troubleshoot static and dynamic 802.1q trunking protocols
• Troubleshoot static and dynamic EtherChannels
• Configure and verify common Spanning Tree Protocols (RSTP and MST)

Layer 3

• Compare routing concepts of EIGRP and OSPF (advanced distance vector vs. linked state, load balancing, path selection, path operations, metrics)
• Configure and verify simple OSPF environments, including multiple normal areas, summarization, and filtering (neighbor adjacency, point-to-point and broadcast network types, and passive interface)
• Configure and verify eBGP between directly connected neighbors (best path selection algorithm and neighbor relationships)

Wireless

• Describe Layer 1 concepts, such as RF power, RSSI, SNR, interference noise, band and channels, and wireless client devices capabilities
• Describe AP modes and antenna types
• Describe access point discovery and join process (discovery algorithms, WLC selection process)
• Describe the main principles and use cases for Layer 2 and Layer 3 roaming
• Troubleshoot WLAN configuration and wireless client connectivity issues

IP Services

• Describe Network Time Protocol (NTP)
• Configure and verify NAT/PAT
• Configure first hop redundancy protocols, such as HSRP and VRRP
• Describe multicast protocols, such as PIM and IGMP v2/v3

4.0 Network Assurance   10%

• Diagnose network problems using tools such as debugs, conditional debugs, trace route, ping, SNMP, and syslog
• Configure and verify device monitoring using syslog for remote logging
• Configure and verify NetFlow and Flexible NetFlow
• Configure and verify SPAN/RSPAN/ERSPAN
• Configure and verify IPSLA
• Describe Cisco DNA Center workflows to apply network configuration, monitoring, and management
• Configure and verify NETCONF and RESTCONF

5.0 Security   20%
Configure and verify device access control

• Lines and password protection
• Authentication and authorization using AAA

Configure and verify infrastructure security features

• ACLs
• CoPP

Describe REST API security
Configure and verify wireless security features

• EAP
• WebAuth
• PSK

Describe the components of network security design

• Threat defense
• Endpoint security
• Next-generation firewall
• TrustSec, MACsec
• Network access control with 802.1X, MAB, and WebAuth

6.0 Automation   15%

• Interpret basic Python components and scripts
• Construct valid JSON encoded file
• Describe the high-level principles and benefits of a data modeling language, such as YANG
• Describe APIs for Cisco DNA Center and vManage
• Interpret REST API response codes and results in payload using Cisco DNA Center and RESTCONF
• Construct EEM applet to automate configuration, troubleshooting, or data collection
• Compare agent vs. agentless orchestration tools, such as Chef, Puppet, Ansible, and SaltStack

Implementing Cisco Enterprise Advanced Routing and Services (ENARSI 300-410)

• Exam Number:                                    300-410 ENARSI
• First date to test:                                                February 24, 2020
• Duration:                                                  90 minutes
• Available Languages:                    English
• Exam Registration:                           Pearson VUE

Associated Certifications:

• CCNP Enterprise,
• Cisco Certified Specialist –
• Enterprise Advanced Infrastructure Implementation

ENARSI Exam overview
This exam tests your knowledge of implementation and troubleshooting for advanced routing technologies and services, including:

• Layer 3
• VPN services
• Infrastructure security
• Infrastructure services
• Infrastructure automation

ENARSI  Exam Topics
1.0 Layer 3 Technologies  35%
 Troubleshoot administrative distance (all routing protocols)
Troubleshoot route map for any routing protocol (attributes, tagging, filtering)
Troubleshoot loop prevention mechanisms (filtering, tagging, split horizon, route poisoning)
Troubleshoot redistribution between any routing protocols or routing sources
Troubleshoot manual and auto-summarization with any routing protocol
Configure and verify policy-based routing
Configure and verify VRF-Lite
Describe Bidirectional Forwarding Detection
 Troubleshoot EIGRP (classic and named mode)

• Address families (IPv4, IPv6)
• Neighbor relationship and authentication
• Loop-free path selections (RD, FD, FC, successor, feasible successor, stuck in active)
• Stubs
• Load balancing (equal and unequal cost)
• Metrics

Troubleshoot OSPF (v2/v3)

• Address families (IPv4, IPv6)
• Neighbor relationship and authentication
• Network types, area types, and router types
• Point-to-point, multipoint, broadcast, non- broadcast
• Area type: backbone, normal, transit, stub, NSSA, totally stub
• Internal router, backbone router, ABR, ASBR
• Virtual link
• Path preference

Troubleshoot BGP (Internal and External)

• Address families (IPv4, IPv6)
• Neighbor relationship and authentication (next-hop, mulithop, 4-byte AS, private AS, route refresh, synchronization, operation, peer group, states and timers)
• Path preference (attributes and best-path)
• Route reflector (excluding multiple route reflectors, confederations, dynamic peer)
• Policies (inbound/outbound filtering, path manipulation)

2.0 VPN Technologie   20%

• Describe MPLS operations (LSR, LDP, label switching, LSP)
• Describe MPLS Layer 3 VPN
• Configure and verify DMVPN (single hub)
• GRE/mGRE
• NHRP
• IPsec
• Dynamic neighbor
• Spoke-to-spoke

Infrastructure Security         20%

• Troubleshoot device security using IOS AAA (TACACS+, RADIUS, local database)
• Troubleshoot router security features
• IPv4 access control lists (standard, extended, time-based)
• IPv6 traffic filter
• Unicast reverse path forwarding (uRPF)
• Troubleshoot control plane policing (CoPP) (Telnet, SSH, HTTP(S), SNMP, EIGRP, OSPF, BGP)
• Describe IPv6 First Hop security features (RA guard, DHCP guard, binding table, ND inspection/snooping, source guard)

4.0 Infrastructure Services   25%

• Troubleshoot device management
• Console and VTY
• Telnet, HTTP, HTTPS, SSH, SCP
• FTP
• Troubleshoot SNMP (v2c, v3)
• Troubleshoot network problems using logging (local, syslog, debugs, conditional debugs, timestamps)
• Troubleshoot IPv4 and IPv6 DHCP (DHCP client, IOS DHCP server, DHCP relay, DHCP options)
• Troubleshoot network performance issues using IP SLA (jitter, tracking objects, delay, connectivity)
• Troubleshoot NetFlow (v5, v9, flexible NetFlow)
• Troubleshoot network problems using Cisco DNA Center assurance (connectivity, monitoring, device health, network health)

Implementing Cisco SD-WAN Solutions (300-415 ENSDWI)

• Exam Number:                                    300-415 ENSDWI
• Duration:                                                  90 minutes
• First date to test:                                February 24, 2020
• Available Languages:                    English
• Exam Registration:                           Pearson VUE

Associated Certifications:

• CCNP Enterprise
• Cisco Certified Specialist
•  Enterprise SD-WAN Implementation

(300-415 ENSDWI) Exam overview
This exam tests your knowledge of Cisco’s SD-WAN solution, including:

• SD-WAN architecture
• Controller deployment
• Edge router deployment
• Policies
• Security
• Quality of service
• Multicast
• Management and operations

(300-415 ENSDWI) Exam Topics
1.0 Architecture         20%
Describe Cisco SD-WAN Architecture and Components

• Orchestration plane (vBond, NAT)
• Management plane (vManage)
• Control plane (vSmart, OMP)
• Data plane (vEdge)
• TLOC
• IPsec
• vRoute
• BFD

Describe WAN Edge platform types, capabilities (vEdges, cEdges)

2.0  Controller Deployment   15%
Describe controller cloud deployment
Describe Controller on-Prem Deployment

• 2.2.a Hosting platform (KVM/Hypervisor)
• 2.2.b Installing controllers
• 2.2.c Scalability and redundancy

Configure and verify certificates and whitelisting
Troubleshoot control-plane connectivity between controllers
3.0 Router Deployment         20%
Describe WAN Edge deployment

• On-boarding
• 3.1.b Orchestration with zero-touch provisioning/plug-and-play
• 3.1.c Single/multi data center/regional hub deployments

Configure and verify SD-WAN data plane

• Circuit termination/TLOC-extension
• Underlay-overlay connectivity

Configure and verify OMP
Configure and verify TLOCs
Configure and verify CLI and vManage feature configuration templates

• VRRP
• OSPF
• BGP

4.0 Policies  20%
Configure and verify control policies
Configure and verify data policies
Configure and verify end-to-end segmentation

• VPN segmentation
• Topologies

Configure and verify SD-WAN application-aware routing
Configure and verify direct Internet access

5.0 Security and Quality of Service   15%
Configure and verify service insertion
Describe application-aware firewall
Configure and verify QoS treatment on WAN edge routers

• Scheduling
• Queuing
• Shaping
• Policing

Management and Operations   10%

• Describe monitoring and reporting from vManage
• Configure and verify monitoring and reporting
• Describe REST API monitoring
• Describe software upgrade from vManage

Designing Cisco Enterprise Networks (ENSLD 300-420)

• Exam Number:                                            300-420 ENSLD
• First date to test:                                        February 24, 2020
• Duration:                                                          90 minutes
• Available Languages:                            English
• Exam Registration:                                   Pearson VUE

Associated Certifications:

• CCNP Enterprise
• Cisco Certified Specialist
• Cisco Enterprise Design

(ENSLD 300-420) Exam overview
This exam tests your knowledge of enterprise design, including:

• Advanced addressing and routing solutions
• Advanced enterprise campus networks
• WAN
• Security services
• Network services
• SDA

(ENSLD 300-420) Exam Topics
1.0 Advanced Addressing and Routing Solutions                                25%
Create structured addressing plans for IPv4 and IPv6
Create stable, secure, and scalable routing designs for IS-IS
Create stable, secure, and scalable routing designs for EIGRP
Create stable, secure, and scalable routing designs for OSPF
Create stable, secure, and scalable routing designs for BGP

• Address families
• Basic route filtering
• Attributes for path preference
• Route reflectors
• Load sharing

Determine IPv6 migration strategies

• Overlay (tunneling)
• Native (dual-stacking)
• Boundaries (IPv4/IPv6 translations)

2.0 Advanced Enterprise Campus Networks   25%
Design campus networks for high availability

• First Hop Redundancy Protocols
• Platform abstraction techniques
• Graceful restart
• BFD

Design campus Layer 2 infrastructures

• STP scalability
• Fast convergence
• Loop-free technologies
• PoE and WoL

Design multicampus Layer 3 infrastructures

• Convergence
• Load sharing
• Route summarization
• Route filtering
• VRFs
• Optimal topologies
• Redistribution

Describe SD-Access Architecture

• (underlay, overlay, control and data plane, automation, wireless, and security)

Describe SD-Access fabric design

• Considerations for wired and wireless access (overlay, fabric design, control plan design, border design, segmentation, virtual networks, scalability, over the top and fabric for wireless, multicast)

3.0 WAN for Enterprise Networks                                 20%
Compare WAN connectivity options

• Layer 2 VPN
• MPLS Layer 3 VPN
• Metro Ethernet
• DWDM
• 4G/5G
• SD-WAN customer edge

Design site-to-site VPN

• Dynamic Multipoint VPN (DMVPN)
• Layer 2 VPN
• MPLS Layer 3 VPN
• IPsec
• Generic Routing Encapsulation (GRE)
• Group Encrypted Transport VPN (GET VPN)

Design high availability for enterprise WAN

• Single-homed
• Multihomed
• Backup connectivity
• Failover

Describe Cisco SD-WAN Architecture

• (orchestration plane, management plane, control plane, data plane, on-boarding and provisioning, security)

Describe Cisco SD-WAN design considerations

• (control plane design, overlay design, LAN design, high availability, redundancy, scalability, security design, QoS and multicast over SD-WAN fabric)

Network Services  20%
Select appropriate QoS strategies to meet customer requirements (DiffServ, IntServ)
Design end-to-end QoS policies
Classification and marking

• Shaping
• Policing
• Queuing

Design network management techniques

• In-band vs. out-of-band
• Segmented management networks
• Prioritizing network management traffic

Describe multicast routing concepts (source trees, shared trees, RPF, rendezvous points)
Design multicast services (SSM, PIM bidirectional, MSDP)

5.0 Automation 10%
Choose the correct YANG data model set based on requirements
Differentiate between IETF, Openconfig, and Cisco native YANG models
Differentiate between NETCONF and RESTCONF
Describe the impact of model-driven telemetry on the network

• Periodic publication
• On-change publication

Compare dial-in and dial-out approaches to model-driven telemetry

Designing Cisco Enterprise Wireless Networks (ENWLSD 300-425)

• Exam Number:                                            ENWLSD 300-425
• First date to test:                                        February 24, 2020
• Duration:                                                          90 minutes
• Available Languages:                            English
• Exam Registration:                                   Pearson VUE

Associated Certifications:

• CCNP Enterprise
• Cisco Certified Specialist
• Cisco Enterprise Wireless Design

ENWLSD 300-425 Exam overview
This exam tests your knowledge of wireless network design, including:

• Site surveys
• Wired and wireless infrastructure
• Mobility
• WLAN high availability

ENWLSD 300-425 Exam Topics
1.0 Wireless Site Survey       25%
Collect design requirements and evaluate constraints

• Client density
• Real time applications
• AP type
• Deployment type (data, location, voice, video)
• Security

Describe material attenuation and its effect on wireless design
Perform and analyze a Layer 1 site survey
Perform a pre-deployment site survey
Perform a post deployment site survey
Perform a predictive site survey
Utilize planning tools and evaluate key network metrics

• (Ekahau, AirMagnet, PI, Chanalyzer, Spectrum Analyzer)

2.0 Wired and Wireless Infrastructure         30%
Determine physical infrastructure requirements

• Such as AP power, cabling, switch port capacity, mounting, and grounding

 Determine logical infrastructure requirements

• such as WLC/AP licensing requirements based on the type of wireless architecture

Design radio management

• RRM
• RF profiles
• RxSOP

Apply design requirements for these types of wireless networks

• Data
• Voice and video
• Location
• Hyperlocation

Design high-density wireless networks and their associated components (campus, lecture halls, conference rooms)
Design wireless bridging (mesh)

• Modes of operation
• Ethernet bridging
• WGB and roaming

3.0  Mobility 25%

• Design mobility groups based on mobility roles
• Optimize client roaming
• Validate mobility tunneling for data and control path

4.0 WLAN High Availability 20%
 Design high availability for controllers

• Network availability through LAG
• Stateful Switchover (SSO)
• Anchor controller priority and redundancy

Design high availability for APs

• AP prioritization
• Fall-back (assigning primary, secondary, and tertiary)

Implementing Cisco Enterprise Wireless Networks (ENWLSI 300-430)

• Exam Number:                            ENWLSI 300-430
• First date to test:                        February 24, 2020
• Duration:                                          90 minutes
• Available Languages:            English
• Exam Registration:                   Pearson VUE

Associated Certifications:

• CCNP Enterprise
• Cisco Certified Specialist
• Cisco  Enterprise Wireless Implementation

ENWLSI 300-430  Exam overview
This exam tests your knowledge of wireless network implementation, including:

• FlexConnect
• QoS
• Multicast
• Advanced location services
• Security for client connectivity
• Monitoring
• Device hardening

ENWLSI 300-430  Exam  Content
1.0 FlexConnect           15%       
 Deploy FlexConnect components such as switching and operating modes
 Deploy FlexConnect capabilities

• FlexConnect groups and roaming
• Split tunneling and fault tolerance
• VLAN-based central switching and Flex ACL
• Smart AP image upgrade

Implement Office Extend

2.0 QoS on a Wireless Network       10%
Implement QoS schemes based on requirements including wired to wireless mapping
Implement QoS for wireless clients
Implement AVC including Fastlane (only on WLC)

3.0 Multicast  10%       
Implement multicast components
Describe how multicast can affect wireless networks
Implement multicast on a WLAN
Implement mDNS
Implement Multicast Direct

4.0 Location Services             10%       
Deploy MSE and CMX on a wireless network
Implement location services

• Client tracking
• RFID tags (tracking only)
• Interferers
• Rogue APs
• Clients

5.0 Advanced Location Services    10%       
Implement CMX components

• Detect and locate
• Analytics
• Presence services

Implement location-aware guest services using custom portal and Facebook Wi-Fi
Troubleshoot location accuracy using Cisco Hyperlocation
Troubleshoot CMX high availability
Implement wIPS using MSE

6.0 Security for Wireless Client Connectivity        20%      
Configure client profiling on WLC and ISE
Implement BYOD and guest

• CWA using ISE (including self-registration portal)
• LWA using ISE or WLC
• Native supplicant provisioning using ISE
• Certificate provisioning on the controller

Implement 802.1X and AAA on different wireless architectures and ISE
Implement Identity-Based Networking on different wireless architectures (VLANs, QoS, ACLs)

7.0 Monitoring              15%       
Utilize reports on PI and Cisco DNA center
Manage alarms and rogues (APs and clients)

• WLC
• PI
• Cisco DNA center

Manage RF interferers

• WLC
• PI
• Cisco DNA center

Troubleshoot client connectivity

• WLC
• ISE
• PI
• Cisco DNA center

8.0 Device Hardening             10%       

• Implement device access controls (including RADIUS and TACACS+)
• Implement access point authentication (including 802.1X)
• Implement CPU ACLs on the controller

Automating Cisco Enterprise Solutions (ENAUTO 300-435)

• Exam Number:                            300-435 ENAUTO
• First date to test:                        February 24, 2020
• Duration:                                          90 minutes
• Available Languages:            English
• Exam Registration:                   Pearson VUE

Associated Certifications:

• CCNP Enterprise
• Cisco Certified DevNet Professional
• Cisco Certified DevNet Specialist
• Cisco  Enterprise Automation and Programmability

300-435 ENAUTO      Exam overview
This exam tests your knowledge of implementing enterprise automated solutions including

• Programming concepts
• Python programming
• APIs
• Controllers
• Automation tools

Course Content
1.0 Network Programmability Foundation  10%

• Utilize common version control operations with git (add, clone, push, commit, diff, branching, merging conflict)
• Describe characteristics of API styles (REST and RPC)
• Describe the challenges encountered and patterns used when consuming APIs synchronously and asynchronously
• Interpret Python scripts containing data types, functions, classes, conditions, and looping
• Describe the benefits of Python virtual environments
• Explain the benefits of using network configuration tools such as Ansible and Puppet for automating IOS XE platforms

2.0   Automate APIs and Protocols   10%

• Identify the JSON instance based on a YANG model
• Identify the XML instance based on a YANG model
• Interpret a YANG module tree generated per RFC8340
• Compare functionality, benefits, and uses of OpenConfig, IETF, and native YANG models
• Compare functionality, benefits, and uses of NETCONF and RESTCONF

3.0 Network Device Programmability  20%

• Implement device management and monitoring using NetMiko
• Construct a Python script using ncclient that uses NETCONF to manage and monitor an IOS XE device
• Configure device using RESTCONF API utilizing Python requests library
• Utilize Ansible to configure an IOS XE device
• Configure a subscription for model driven telemetry on an IOS XE device (CLI, NETCONF, and RESTCONF)

Compare publication and subscription telemetry models

• Periodic / cadence
• On-change

Describe the benefits and usage of telemetry data in troubleshooting the network

Describe Day 0 provisioning methods

• iPXE
• PnP
•  ZTP

4.0 Cisco DNA Center 20%
Compare traditional versus software-defined networks
Describe the features and capabilities of Cisco DNA Center

• Network assurance APIs
• Intent APIs
• Multivendor support (3rd party SDKs)
• Events and notifications

Implement Cisco DNA Center event outbound webhooks
Implement API requests for Cisco DNA Center to accomplish network management tasks

• Intent APIs
• Command Runner APIs
• Site APIs

Implement API requests for Cisco DNA Center to accomplish network management tasks using these APIs

• Network discovery and device APIs
• Template APIs (Apply a template)

Troubleshoot Cisco DNA Center automation process using Intent APIs

5.0 Cisco SD-WAN  20%

• Describe features and capabilities of Cisco SD-WAN vManage Certificate Management APIs
• Implement a Python script to perform API requests for Cisco SD-WAN vManage Device Inventory APIs to retrieve and display data
• Construct API requests for Cisco SD-WAN vManage Administration APIs
• Implement a Python script to perform API requests for Cisco SD-WAN vManage Configuration APIs to modify Cisco SD-WAN fabric configuration
• Construct API requests for Cisco SD-WAN vManage Monitoring APIs (Including real-time)
• Troubleshoot a Cisco SD-WAN deployment using vManage APIs

6.0   Cisco Meraki 20%
Describe features and capabilities of Cisco Meraki

• Location Scanning APIs
• MV Sense APIs
• External Captive Portal APIs
• WebHook Alert APIs

Create a network using Cisco Meraki APIs
Configure a network using Cisco Meraki APIs
Implement a Python script for Cisco Meraki Alert WebHooks