Cisco Certified Network Professional (CCNP) Course Training

Exam Description: Implementing Cisco Enterprise Network Core Technologies v1.0 (ENCOR 350-401) is a 120-minute exam associated with the CCNP and CCIE Enterprise Certifications. This exam tests a candidate's knowledge of implementing core enterprise network technologies including dual stack (IPv4 and IPv6) architecture, virtualization, infrastructure, network assurance, security and automation. The course, Implementing Cisco Enterprise Network Core Technologies, helps candidates to prepare for this exam.

The following topics are general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. To better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

• Explain the different design principles used in an enterprise network
  • Enterprise network design such as Tier 2, Tier 3, and Fabric Capacity planning
  • High availability techniques such as redundancy, FHRP, and SSO
• Analyze design principles of a WLAN deployment
  • Wireless deployment models (centralized, distributed, controller-less, controller based, cloud, remote branch)
  • Location services in a WLAN design
• Differentiate between on-premises and cloud infrastructure deployments
• Explain the working principles of the Cisco SD-WAN solution
  • SD-WAN control and data planes elements
  • Traditional WAN and SD-WAN solutions
• Explain the working principles of the Cisco SD-Access solution
  • SD-Access control and data planes elements
  • Traditional campus interoperating with SD-Access
• Describe concepts of wired and wireless QoS
  • QoS components
  • QoS policy
• Differentiate hardware and software switching mechanisms
  • Process and CEF
  • MAC address table and TCAMFIB vs. RIB

• Describe device virtualization technologies
  • Hypervisor type 1 and 2
  • Virtual machine
  • Virtual switching
• Configure and verify data path virtualization technologies
  • VRF
  • GRE and IPsec tunneling
• Describe network virtualization concepts
  • LISP
• VXLAN

• Layer 2
  • Troubleshoot static and dynamic 802.1q trunking protocols
  • Troubleshoot static and dynamic EtherChannels
  • Configure and verify common Spanning Tree Protocols (RSTP and MST)
• Layer 3
  • Compare routing concepts of EIGRP and OSPF (advanced distance vector vs. link state, load balancing, path selection, path operations, metrics)
  • Configure and verify simple OSPF environments, including multiple normal areas, summarization, and filtering (neighbor adjacency, point-to-point and
• broadcast network types, and passive interface)
• Configure and verify eBGP between directly connected neighbors (best path selection algorithm and neighbor relationships)
• Wireless
  • Describe Layer 1 concepts, such as RF power, RSSI, SNR, interference noise, band and channels, and wireless client devices capabilities
  • Describe AP modes and antenna types
  • Describe access point discovery and join process (discovery algorithms, WLC selection process)
  • Describe the main principles and use cases for Layer 2 and Layer 3 roaming
  • Troubleshoot WLAN configuration and wireless client connectivity issues
• IP Services
  • Describe Network Time Protocol (NTP)
  • Configure and verify NAT/PAT
  • Configure first hop redundancy protocols, such as HSRP and VRRP
• Describe multicast protocols, such as PIM and IGMP v2/v3

• Diagnose network problems using tools such as debugs, conditional debugs, trace route, ping, SNMP, and syslog
• Configure and verify device monitoring using syslog for remote logging
• Configure and verify NetFlow and Flexible NetFlow
• Configure and verify SPAN/RSPAN/ERSPAN
• Configure and verify IPSLA
• Describe Cisco DNA Center workflows to apply network configuration, monitoring, and management
• Configure and verify NETCONF and RESTCONF
   

• Configure and verify device access control
  • Lines and password protection
  • Authentication and authorization using AAA
• Configure and verify infrastructure security features
  • ACLs
  • CoPP
• Describe REST API security
• Configure and verify wireless security features
  • EAP
  • WebAuth
  • PSK
• Describe the components of network security design
  • Threat defense
  • Endpoint security
  • Next-generation firewall
  • TrustSec, MACsec
  • Network access control with 802.1X, MAB, and WebAuth

• Interpret basic Python components and scripts
• Construct valid JSON encoded file
• Describe the high-level principles and benefits of a data modeling language, such as YANG
• Describe APIs for Cisco DNA Center and vManage
• Interpret REST API response codes and results in payload using Cisco DNA Center and RESTCONF
• Construct EEM applet to automate configuration, troubleshooting, or data collection
• Compare agent vs. agentless orchestration tools, such as Chef, Puppet, Ansible, and SaltStack

Exam Description: Designing Cisco Enterprise Networks v1.0 (ENSLD 300-420) is a 90-minute exam associated with the CCNP Enterprise Certification. This exam certifies a candidate's knowledge of enterprise design including advanced addressing and routing solutions, advanced enterprise campus networks, WAN, security services, network services, and SDA. The course, Designing Cisco Enterprise Networks, helps candidates to prepare for this exam.

The following topics are general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. To better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

• Create structured addressing plans for IPv4 and IPv6
• Create stable, secure, and scalable routing designs for IS-IS
• Create stable, secure, and scalable routing designs for EIGRP
• Create stable, secure, and scalable routing designs for OSPF
• Create stable, secure, and scalable routing designs for BGP
  • Address families
  • Basic route filtering
  • Attributes for path preference
  • Route reflectors
  • Load sharing
• Determine IPv6 migration strategies
  • Overlay (tunneling)
  • Native (dual-stacking)
  • Boundaries (IPv4/IPv6 translations)

• Design campus networks for high availability
  • First Hop Redundancy Protocols
  • Platform abstraction techniques
  • Graceful restart
  • BFD
• Design campus Layer 2 infrastructures
  • STP scalability
  • Fast convergence
  • Loop-free technologies
  • PoE and WoL
• Design multicampus Layer 3 infrastructures
  • Convergence
  • Load sharing
  • Route summarization
  • Route filtering
  • VRFs
  • Optimal topologies
  • Redistribution
• Describe SD-Access Architecture (underlay, overlay, control and data plane, automation, wireless, and security)
• Describe SD-Access fabric design considerations for wired and wireless access (overlay, fabric design, control plan design, border design, segmentation, virtual networks, scalability, over the top and fabric for wireless, multicast)

• Compare WAN connectivity options
  • Layer 2 VPN
  • MPLS Layer 3 VPN
  • Metro Ethernet
  • DWDM
  • 4G/5G
  • SD-WAN customer edge
• Design site-to-site VPN
  • Dynamic Multipoint VPN (DMVPN)
  • Layer 2 VPN
  • MPLS Layer 3 VPN
  • IPsec
  • Generic Routing Encapsulation (GRE)
  • Group Encrypted Transport VPN (GET VPN)
• Design high availability for enterprise WAN
  • Single-homed
  • Multihomed
  • Backup connectivity
  • Failover
• Describe Cisco SD-WAN Architecture (orchestration plane, management plane, control plane, data plane, on-boarding and provisioning, security)
• Describe Cisco SD-WAN design considerations (control plane design, overlay design, LAN design, high availability, redundancy, scalability, security design, QoS and multicast over SD-WAN fabric)

• Select appropriate QoS strategies to meet customer requirements (DiffServ, IntServ)
• Design end-to-end QoS policies
  • Classification and marking
  • Shaping
  • Policing
  • Queuing
• Design network management techniques
  • In-band vs. out-of-band
  • Segmented management networks
  • Prioritizing network management traffic
• Describe multicast routing concepts (source trees, shared trees, RPF, rendezvous points)
• Design multicast services (SSM, PIM bidirectional, MSDP)

• Choose the correct YANG data model set based on requirements
• Differentiate between IETF, Openconfig, and Cisco native YANG models
• Differentiate between NETCONF and RESTCONF
• Describe the impact of model-driven telemetry on the network
  • Periodic publication
  • On-change publication
• Compare dial-in and dial-out approaches to model-driven telemetry

Exam Description: Implementing Cisco Enterprise Advanced Routing and Services v1.0 (ENARSI 300-410) is a 90-minute exam associated with the CCNP Enterprise Certification. This exam certifies a candidate's knowledge for implementation and troubleshooting of advanced routing technologies and services including Layer 3, VPN services, infrastructure security, infrastructure services, and infrastructure automation. The course, Implementing Cisco Enterprise Advanced Routing and Services, helps candidates to prepare for this exam.

The following topics are general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. To better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

• Troubleshoot administrative distance (all routing protocols)
• Troubleshoot route map for any routing protocol (attributes, tagging, filtering)
• Troubleshoot loop prevention mechanisms (filtering, tagging, split horizon, route poisoning)
• Troubleshoot redistribution between any routing protocols or routing sources
• Troubleshoot manual and auto-summarization with any routing protocol
• Configure and verify policy-based routing
• Configure and verify VRF-Lite
• Describe Bidirectional Forwarding Detection
• Troubleshoot EIGRP (classic and named mode)
  • Address families (IPv4, IPv6)
  • Neighbor relationship and authentication
  • Loop-free path selections (RD, FD, FC, successor, feasible successor, stuck in active)
  • Stubs
  • Load balancing (equal and unequal cost)
  • Metrics
• Troubleshoot OSPF (v2/v3)
  • Address families (IPv4, IPv6)
  • Neighbor relationship and authentication
  • Network types, area types, and router types
    • Point-to-point, multipoint, broadcast, nonbroadcast
    • Area type: backbone, normal, transit, stub, NSSA, totally stub
    • Internal router, backbone router, ABR, ASBR
    • Virtual link
  • Path preference
• Troubleshoot BGP (Internal and External)
  • Address families (IPv4, IPv6)
  • Neighbor relationship and authentication (next-hop, mulithop, 4-byte AS, private AS, route refresh, synchronization, operation, peer group, states and timers)
  • Path preference (attributes and best-path)
  • Route reflector (excluding multiple route reflectors, confederations, dynamic peer)
  • Policies (inbound/outbound filtering, path manipulation)

• Describe MPLS operations (LSR, LDP, label switching, LSP)
• Describe MPLS Layer 3 VPN
• Configure and verify DMVPN (single hub)
  • GRE/mGRE
  • NHRP
  • IPsec
  • Dynamic neighbor
  • Spoke-to-spoke

• Troubleshoot device security using IOS AAA (TACACS+, RADIUS, local database)
• Troubleshoot router security features
  • IPv4 access control lists (standard, extended, time-based)
  • IPv6 traffic filter
  • Unicast reverse path forwarding (uRPF)
• Troubleshoot control plane policing (CoPP) (Telnet, SSH, HTTP(S), SNMP, EIGRP, OSPF, BGP)
• Describe IPv6 First Hop security features (RA guard, DHCP guard, binding table, ND inspection/snooping, source guard)

• Troubleshoot device management
  • Console and VTY
  • Telnet, HTTP, HTTPS, SSH, SCP
  • (T)FTP
• Troubleshoot SNMP (v2c, v3)
• Troubleshoot network problems using logging (local, syslog, debugs, conditional debugs, timestamps)
• Troubleshoot IPv4 and IPv6 DHCP (DHCP client, IOS DHCP server, DHCP relay, DHCP options)
• Troubleshoot network performance issues using IP SLA (jitter, tracking objects, delay, connectivity)
• Troubleshoot NetFlow (v5, v9, flexible NetFlow)
• Troubleshoot network problems using Cisco DNA Center assurance (connectivity, monitoring, device health, network health)

Exam Description: Implementing Cisco SD-WAN Solutions v1.1 (ENSDWI 300-415) is a 90-minute exam
associated with the CCNP Enterprise Certification. This exam tests a candidate's knowledge of Cisco’s
SD-WAN solution including SD-WAN architecture, controller deployment, WAN Edge router deployment,
policies, security, quality of service, multicast, and management and operations. The course,
Implementing Cisco SD-WAN Solutions, helps candidates to prepare for this exam.

The following topics are general guidelines for the content likely to be included on the exam. However,
other related topics may also appear on any specific delivery of the exam. To better reflect the contents
of the exam and for clarity purposes, the guidelines below may change at any time without notice.

• Describe Cisco SD-WAN architecture and components
  • Orchestration plane (vBond, NAT)
  • Management plane (vManage)
  • Control plane (vSmart, OMP)
  • Data plane (WAN Edge)
    • TLOC
    • IPsec and GRE
    • vRoute
    • BFD
• Describe Cisco SD-WAN Edge platforms and capabilities
• Describe Cisco SD-WAN Cloud OnRamp
  • SaaS
  • IaaS
  • Colocation

• Describe controller cloud deployment
• Describe controller on-premises deployment
  • Hosting platform (KVM and Hypervisor)
  • Installing controllers
• Scalability and redundancy
• Configure certificates and device lists
• Troubleshoot control plane connectivity between controllers

• Describe WAN Edge deployment
  • On-boarding
  • Orchestration with zero-touch provisioning and plug-and-play
  • Data center and regional hub deployments
• Configure Cisco SD-WAN data plane
  • Circuit termination and TLOC-extension
  • Dynamic tunnels
  • Underlay-overlay connectivity
• Configure OMP
• Configure TLOCs
• Configure CLI and vManage feature configuration templates
  • VRRP
  • OSPF
  • BGP
  • EIGRP
• Describe multicast support in Cisco SD-WAN

• Configure control policies
• Configure data policies
• Configure end-to-end segmentation
  • VPN segmentation
  • Topologies
• Configure Cisco SD-WAN application-aware routing
• Configure direct Internet access

• Configure service insertion
• Describe Cisco SD-WAN security features
  • Application-aware enterprise firewall
  • IPS
  • URL filtering
  • AMP
  • SSL and TLS proxy
• Describe Cloud security integration
  • DNS security
  • Secure Internet Gateway (SIG)
• Configure QoS treatment on WAN Edge routers
  • Scheduling
  • Queuing
  • Shaping
  • Policing
  • Marking
  • Per-tunnel and adaptive QoS

• Describe authentication, monitoring, and reporting from vManage
• Configure authentication, monitoring, and reporting
• Describe REST API monitoring
• Describe software image management from vManage

Exam Description: Designing Cisco Enterprise Networks v1.0 (ENSLD 300-420) is a 90-minute examassociated with the CCNP Enterprise Certification. This exam certifies a candidate's knowledge of enterprise design including advanced addressing and routing solutions, advanced enterprise campus networks, WAN, security services, network services, and SDA. The course, Designing Cisco Enterprise Networks, helps candidates to prepare for this exam.

The following topics are general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. To better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

• Create structured addressing plans for IPv4 and IPv6
• Create stable, secure, and scalable routing designs for IS-IS
• Create stable, secure, and scalable routing designs for EIGRP
• Create stable, secure, and scalable routing designs for OSPF
• Create stable, secure, and scalable routing designs for BGP
  • Address families
  • Basic route filtering
  • Attributes for path preference
  • Route reflectors
  • Load sharing
• Determine IPv6 migration strategies
  • Overlay (tunneling)
  • Native (dual-stacking)
  • Boundaries (IPv4/IPv6 translations)

• Design campus networks for high availability
  • First Hop Redundancy Protocols
  • Platform abstraction techniques
  • Graceful restart
  • BFD
• Design campus Layer 2 infrastructures
  • STP scalability
  • Fast convergence
  • Loop-free technologies
  • PoE and WoL
• Design multicampus Layer 3 infrastructures
  • Convergence
  • Load sharing
  • Route summarization
  • Route filtering
  • VRFs
  • Optimal topologies
  • Redistribution
• Describe SD-Access Architecture (underlay, overlay, control and data plane, automation, wireless, and security)
• 2.5 Describe SD-Access fabric design considerations for wired and wireless access (overlay, fabric design, control plan design, border design, segmentation, virtual networks, scalability, over the top and fabric for wireless, multicast)

• Compare WAN connectivity options
  • Layer 2 VPN
  • MPLS Layer 3 VPN
  • Metro Ethernet
  • DWDM
  • 4G/5G
  • SD-WAN customer edge
• Design site-to-site VPN
  • Dynamic Multipoint VPN (DMVPN)
  • Layer 2 VPN
  • MPLS Layer 3 VPN
  • IPsec
  • Generic Routing Encapsulation (GRE)
  • Group Encrypted Transport VPN (GET VPN)
• Design high availability for enterprise WAN
  • Single-homed
  • Multihomed
  • Backup connectivity
  • Failover
• Describe Cisco SD-WAN Architecture (orchestration plane, management plane, control plane, data plane, on-boarding and provisioning, security)
• Describe Cisco SD-WAN design considerations (control plane design, overlay design, LAN design, high availability, redundancy, scalability, security design, QoS and multicast over SD-WAN fabric)

• Select appropriate QoS strategies to meet customer requirements (DiffServ, IntServ)
• Design end-to-end QoS policies
  • Classification and marking
  • Shaping
  • Policing
  • Queuing
• Design network management techniques
  • In-band vs. out-of-band
  • Segmented management networks
  • Prioritizing network management traffic
• Describe multicast routing concepts (source trees, shared trees, RPF, rendezvous points)
• Design multicast services (SSM, PIM bidirectional, MSDP)

• Choose the correct YANG data model set based on requirements
• Differentiate between IETF, Openconfig, and Cisco native YANG models
• Differentiate between NETCONF and RESTCONF
• Describe the impact of model-driven telemetry on the network
  • Periodic publication
  • On-change publication
• Compare dial-in and dial-out approaches to model-driven telemetry

Exam Description: Designing Cisco Enterprise Wireless Networks v1.0 (ENWLSD 300-425) is a 90-minute exam associated with the CCNP Enterprise Certification. This exam certifies a candidate's knowledge of wireless network design including site surveys, wired and wireless infrastructure, mobility and WLAN high availability. The course, Designing Cisco Enterprise Wireless Networks, helps candidates to prepare for this exam.

The following topics are general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. To better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

• Collect design requirements and evaluate constraints
  • Client density
  • Real time applications
  • AP type
  • Deployment type (data, location, voice, video)
  • Security
• Describe material attenuation and its effect on wireless design
• Perform and analyze a Layer 1 site survey
• Perform a pre-deployment site survey
• Perform a post deployment site survey
• Perform a predictive site survey
• Utilize planning tools and evaluate key

• Determine physical infrastructure requirements such as AP power, cabling, switch port capacity, mounting, and grounding
• Determine logical infrastructure requirements such as WLC/AP licensing requirements based on the type of wireless architecture
• Design radio management
  • RRM
  • RF profiles
  • RxSOP
• Apply design requirements for these types of wireless networks
  • Data
  • Voice and video
  • Location
  • Hyperlocation
• Design high-density wireless networks and their associated components (campus, lecture halls, conference rooms)
• Design wireless bridging (mesh)
  • Modes of operation
  • Ethernet bridging
  • WGB and roaming

• Design mobility groups based on mobility roles
• Optimize client roaming
• Validate mobility tunneling for data and control path

• Design high availability for controllers
  • Network availability through LAG
  • Stateful Switchover (SSO)
  • Anchor controller priority and redundancy
• Design high availability for APs
  • AP prioritization
  • Fall-back (assigning primary, secondary, and tertiary)

Exam Description: Automating and Programming Cisco Enterprise Solutions v1.0 (ENAUTO 300-435) is a 90-minute exam associated with the CCNP Enterprise Certification and DevNet Professional Certification. This exam tests a candidate's knowledge of implementing Enterprise automated solutions, including programming concepts, Python programming, APIs, controllers and automation tools. The course, Implementing Cisco Enterprise Automation Solutions, helps candidates to prepare for this exam.

The following topics are general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. To better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.

• Utilize common version control operations with git (add, clone, push, commit, diff, branching, merging conflict)
• Describe characteristics of API styles (REST and RPC)
• Describe the challenges encountered and patterns used when consuming APIs synchronously and asynchronously
• Interpret Python scripts containing data types, functions, classes, conditions, and looping
• Describe the benefits of Python virtual environments
• Explain the benefits of using network configuration tools such as Ansible and Puppet for automating IOS XE platforms

• Identify the JSON instance based on a YANG model
• Identify the XML instance based on a YANG model
• Interpret a YANG module tree generated per RFC8340
• Compare functionality, benefits, and uses of OpenConfig, IETF, and native YANG models
• Compare functionality, benefits, and uses of NETCONF and RESTCONF

• Implement device management and monitoring using NetMiko
• Construct a Python script using ncclient that uses NETCONF to manage and monitor an IOS XE device
• Configure device using RESTCONF API utilizing Python requests library
• Utilize Ansible to configure an IOS XE device
• Configure a subscription for model driven telemetry on an IOS XE device (CLI, NETCONF, and RESTCONF)
• Compare publication and subscription telemetry models
  • Periodic / cadence
  • On-change
• Describe the benefits and usage of telemetry data in troubleshooting the network
• Describe Day 0 provisioning methods
  • iPXE
  • PnP
  • ZTP

• Compare traditional versus software-defined networks
• Describe the features and capabilities of Cisco DNA Center
  • Network assurance APIs
  • Intent APIs
  • Multivendor support (3rd party SDKs)
  • Events and notifications
• Implement Cisco DNA Center event outbound webhooks
• Implement API requests for Cisco DNA Center to accomplish network management tasks
  • Intent APIs
  • Command Runner APIs
  • Site APIs
• Implement API requests for Cisco DNA Center to accomplish network management tasks using these APIs
  • Network discovery and device APIs
  • Template APIs (Apply a template)
• Troubleshoot Cisco DNA Center automation process using Intent APIs

• Describe features and capabilities of Cisco SD-WAN vManage Certificate Management APIs
• Implement a Python script to perform API requests for Cisco SD-WAN vManage Device Inventory APIs to retrieve and display data
• Construct API requests for Cisco SD-WAN vManage Administration APIs
• Implement a Python script to perform API requests for Cisco SD-WAN vManage Configuration APIs to modify Cisco SD WAN fabric configuration
• Construct API requests for Cisco SD-WAN vManage Monitoring APIs (Including real-time)
• Troubleshoot a Cisco SD-WAN deployment using vManage APIs

• Describe features and capabilities of Cisco Meraki
  • Location Scanning APIs
  • MV Sense APIs
  • External Captive Portal APIs
  • WebHook Alert APIs
• Create a network using Cisco Meraki APIs
• Configure a network using Cisco Meraki APIs
• Implement a Python script for Cisco Meraki Alert WebHooks