CCNP Enterprise
Follow a topic roadmap built from the published exam blueprint, with lessons, practice exercises in a real terminal and practice exams.
CCNP Enterprise certification validates advanced professional skills in enterprise infrastructure, virtualization, network assurance, security, and automation through a core exam and a concentration exam of your choice.
What you'll learn
Every objective CCNP Enterprise publishes, and what it asks you to be able to do. The percentage is how much of the exam each one is worth.
- 1.0 Architecture (15% of the exam)Differentiate Describe hardware and software switching mechanisms such as process switching CEF, CAM,. Describe hardware and software switching mechanisms such as CEF, CAM, TCAM, FIB,. Differentiate hardware and software switching 1.6 Describe hardware and software switching mechanisms. Describe Interpret concepts of wired and wireless QoS configurations. Interpret wired and wireless QoS configurations. Describe concepts of wired and wireless QoS 1.5 Interpret wired and wireless QoS configurations. And 19 more, each a topic in the course below.
- 2.0 Virtualization (10% of the exam)Describe device virtualization technologies. Configure and verify data path virtualization technologies. Configure and verify data path. Describe network virtualization concepts. Apply design requirements for these types of wireless networks. Apply design requirements for these types of wireless 2.4 Apply design requirements for these types of wireless. And 8 more, each a topic in the course below.
- 3.0 Infrastructure (30% of the exam)IP Services. Compare WAN connectivity options 3.1 Describe WAN connectivity options for on-premises, hybrid,. Design site-to-site VPN 3.2 Design site-to-site VPN for on-premises, hybrid, and cloud. Design high availability for enterprise WAN 3.3 Design high availability for enterprise WAN for on-premises,. Describe WAN Edge deployment 3.1 Describe WAN Edge deployment. Describe configuration groups, feature profiles, and.
- 4.0 Network Assurance (10% of the exam)Configure device monitoring using Syslog for remote logging. Configure and verify device monitoring using syslog for 4.2 Task removed. Configure and verify NetFlow andFlexible NetFlow. Configure and verify Flexible NetFlow. Configure and verify NetFlow and Flexible NetFlow 4.3 Configure and verify Flexible Netflow. Configure and verify SPAN/RSPAN/ERSPAN. And 15 more, each a topic in the course below.
- 5.0 Security (20% of the exam)Configure and verify infrastructure security features. Configure and verify device access control. Describe the components of network security design. Configure and verify wireless security features. Configure and verify wireless security features 5.4 Configure and verify wireless security features. Implement CMX components 5.1 Implement CMX and Cisco Spaces components. And 11 more, each a topic in the course below.
- 6.0 Automation (15% of the exam)Interpret basic Python components and scripts. Construct valid JSON encoded file. Construct valid JSON-encoded files. Describe the high-level principles and benefits of a data modeling. Describe the high-level principles and benefits of a data modeling language, such as. Interpret REST API response codes and results in payload using. And 6 more, each a topic in the course below.
The exam at a glance
- Length
- 2 hours
- Cost
- $400
- Validity
- 3 years
- Style
- Hands-on
Multiple choice drag-and-drop and performance-based items. Based on 350-401 ENCOR v1.1.
Sitting the exam
The part nobody publishes in a syllabus. For CCNP Enterprise the logistics are study strategy: what you are allowed to read while the clock runs changes how you should practise, and what a second attempt costs changes when you should book.
What you are asked
- The allocated time for the exam is 120 minutes.
How it is marked
- Evaluation is determined on a pass or fail basis and outcome details post digitally within 48 hours.
Booking it
- The fee is $US400, or use Cisco Learning Credits.
Read off the official exam page on 10 September 2026. Rules change without notice, so confirm anything you are about to spend money on.
What the exam covers
Straight from the published curriculum. The weights are how much of the exam each area is worth, so they are the honest guide to where your study time should go.
Course content
70 topics
1. Networking Fundamentals Review
Review of dual-stack IP addressing, basic routing, switching, and network device operation
2. Hardware and Software Switching Mechanisms - Part 1
- Differentiate Describe hardware and software switching mechanisms such as process switching CEF, CAM,
- Describe hardware and software switching mechanisms such as CEF, CAM, TCAM, FIB,
3. Hardware and Software Switching Mechanisms - Part 2
- Differentiate hardware and software switching 1.6 Describe hardware and software switching mechanisms
4. Device Virtualization Technologies
- Describe device virtualization technologies
5. Data Path Virtualization
- Configure and verify data path virtualization technologies
- Configure and verify data path
6. Network Virtualization Concepts
- Describe network virtualization concepts
7. Quality of Service Fundamentals
Basic QoS concepts including classification, marking, queuing, and policing
8. Wired and Wireless QoS Configurations - Part 1
- Describe Interpret concepts of wired and wireless QoS configurations
- Interpret wired and wireless QoS configurations
9. Wired and Wireless QoS Configurations - Part 2
- Describe concepts of wired and wireless QoS 1.5 Interpret wired and wireless QoS configurations
10. Infrastructure Security Features
- Configure and verify infrastructure security features
11. Device Access Control
- Configure and verify device access control
12. Network Security Design Components
- Describe the components of network security design
13. IP Services
- IP Services
14. Device Monitoring Using Syslog
- Configure device monitoring using Syslog for remote logging
- Configure and verify device monitoring using syslog for 4.2 Task removed
15. NetFlow and Flexible NetFlow - Part 1
- Configure and verify NetFlow andFlexible NetFlow
- Configure and verify Flexible NetFlow
16. NetFlow and Flexible NetFlow - Part 2
- Configure and verify NetFlow and Flexible NetFlow 4.3 Configure and verify Flexible Netflow
17. SPAN, RSPAN, and ERSPAN
- Configure and verify SPAN/RSPAN/ERSPAN
- Configure SPAN/RSPAN/ERSPAN
18. IP SLA Configuration and Verification
- Configure and verify IPSLA
19. Network Troubleshooting Tools
- Diagnose network problems using tools such as debugs,
- Diagnose network problems using tools such as debugs, conditional debugs, traceroute,
20. Enterprise Network Design Principles
- Explain the different design principles used in an enterprise network
- Explain the different design principles used in an enterprise network Task
21. Wireless Network Fundamentals
Basic wireless concepts including RF, channels, SSIDs, and wireless standards
22. Wireless Network Design Principles - Part 1
- Analyze Describe wireless network design principles of a WLAN deployment
- Describe wireless network design principles Task
23. Wireless Network Design Principles - Part 2
- Describe design principles of a WLAN deployment
- Describe wireless network
24. Wireless Network Design Principles - Part 3
- Describe wireless network design principles
- Analyze design principles of a WLAN deployment 1.2 Describe wireless network design principles
25. Wireless Security Features
- Configure and verify wireless security features
- Configure and verify wireless security features 5.4 Configure and verify wireless security features
26. Wireless Network Design Requirements
- Apply design requirements for these types of wireless networks
- Apply design requirements for these types of wireless 2.4 Apply design requirements for these types of wireless
27. High-Density Wireless Networks
- Design high-density wireless networks and their associated components
- Design high-density wireless networks and their 2.5 Design high-density wireless networks and their
28. Access Point High Availability
- Design high availability for APs
- Design high availability for APs 4.2.a AP prioritization
29. CMX and Cisco Spaces Deployment
- Deploy MSE and CMX on a wireless network 4.1 Deploy CMX and Cisco Spaces on a wireless network
- Implement CMX components 5.1 Implement CMX and Cisco Spaces components
30. Wireless Intrusion Prevention System
- Implement wIPS using MSE 5.1.e Connectors
- Implement wIPS using Cisco DNA Center
31. On-Premises and Cloud Infrastructure Deployments
- Differentiate between on-premises and cloud infrastructure deployments
- Differentiate between on-premises and cloud 1.3 Task removed
32. Cloud-Based Services Models - Part 1
Infrastructure, Platform, and Software as a Service models
33. Cloud-Based Services Models - Part 2
- Describe cloud-based services model in private, public, and
34. Cloud Connectivity Options
- Compare dial-in and dial-out approaches to model-driven 5.5 Describe cloud connectivity options such as direct connect,
35. WAN Connectivity Options
- Compare WAN connectivity options 3.1 Describe WAN connectivity options for on-premises, hybrid,
36. Site-to-Site VPN Design
- Design site-to-site VPN 3.2 Design site-to-site VPN for on-premises, hybrid, and cloud
37. Enterprise WAN High Availability
- Design high availability for enterprise WAN 3.3 Design high availability for enterprise WAN for on-premises,
38. Cisco SD-WAN Architecture and Components
- Describe Cisco SD-WAN architecture and components 1.1 Describe Cisco SD-WAN architecture and components
39. Cisco SD-WAN Working Principles
- Explain the working principles of the Cisco SD-WAN solution
- Explain the working principles of the Cisco SD-WAN 1.3 Explain the working principles of the Cisco SD-WAN
40. WAN Edge Deployment
- Describe WAN Edge deployment 3.1 Describe WAN Edge deployment
41. SD-WAN Configuration Groups and Feature Profiles
- Describe configuration groups, feature profiles, and
42. Cisco SD-WAN Cloud OnRamp
- Describe Cisco SD-WAN Cloud OnRamp 1.3 Describe Cisco SD-WAN Cloud OnRamp
43. Cisco SD-WAN Security Features
- Describe Cisco SD-WAN security features 5.2 Describe Cisco SD-WAN security features
44. SD-WAN vManage Certificate Management APIs
- Describe features and capabilities of Cisco SD-WAN vManage Certificate Management APIs
- Describe features and capabilities of Cisco SD-WAN 5.1 Describe features and capabilities of Cisco SD-WAN
45. Application Quality of Experience (App-QoE)
- Describe Application Quality of Experience (App-QoE)
46. Controller On-Premises Deployment
- Describe controller on-premises deployment 2.2 Describe controller on-premises deployment
47. Control Plane Connectivity Troubleshooting
- Troubleshoot control plane connectivity between 2.4 Troubleshoot control plane connectivity
48. Cisco SD-Access Working Principles
- Explain the working principles of the Cisco SD-Access solution
49. EIGRP Troubleshooting
- Troubleshoot EIGRP (classic and named mode) 1.9 Troubleshoot EIGRP (classic and named mode; VRF and
50. BGP Troubleshooting
- Troubleshoot BGP (Internal and External) 1.11 Troubleshoot BGP (Internal and External; unicast and
51. Python Components and Scripts
- Interpret basic Python components and scripts
52. JSON Encoded Files
- Construct valid JSON encoded file
- Construct valid JSON-encoded files
53. Data Modeling Language Principles
- Describe the high-level principles and benefits of a data modeling
- Describe the high-level principles and benefits of a data modeling language, such as
54. YANG Data Model Selection
- Choose the correct YANG data model set based on 5.1 Task removed
55. JSON Instance Based on YANG Model
- Identify the JSON instance based on a YANG model (including YANG Suite)
- Identify the JSON instance based on a YANG model 2.1 Identify the JSON instance based on a YANG model
56. XML Instance Based on YANG Model
- Identify the XML instance based on a YANG model (including YANG Suite)
- Identify the XML instance based on a YANG model 2.2 Identify the XML instance based on a YANG model
57. REST API Fundamentals
Basic REST API concepts including HTTP methods, endpoints, and authentication
58. REST API Security
- Describe REST API security
59. REST API Response Codes and Payload
- Interpret REST API response codes and results in payload using
- Interpret REST API response codes and results in payload using Cisco DNA Center and
60. NETCONF and RESTCONF
- Configure and verify NETCONF and RESTCONF
61. gRPC and gNMI
- Describe GRPC and GNMI
62. Model-Driven Telemetry Approaches
Dial-in and dial-out approaches to streaming telemetry for real-time network monitoring
63. Cisco DNA Center Features and Capabilities
- Describe the features and capabilities of Cisco DNA Center
- Describe the features and capabilities of Cisco DNA 4.2 Describe the features and capabilities of Cisco DNA
64. Cisco DNA Center Workflows - Part 1
- Describe Cisco DNA Center workflows to apply network
- Describe Cisco DNA Center How does Cisco DNA Center perform a
65. Cisco DNA Center Workflows - Part 2
- Describe Cisco DNA Center workflows to apply network configuration, monitoring, and
66. Cisco DNA Center API Requests - Part 1
- Implement API requests for Cisco DNA Center to accomplish network management tasks
- Implement API requests for Cisco DNA Center to 4.4 Implement API requests for Cisco DNA Center to
67. Cisco DNA Center API Requests - Part 2
- Describe APIs for Cisco DNA Center and vManage
68. Embedded Event Manager (EEM) Applets
- Construct EEM applet to automate configuration, troubleshooting,
- Construct an EEM applet to automate configuration, troubleshooting, or data collection
69. Network Configuration Tools
- Explain the benefits of using network configuration tools such as Ansible and Terraform
- Explain the benefits of using network configuration tools 1.6 Explain the benefits of using network configuration tools
70. Agent vs. Agentless Orchestration Tools
- Compare agent vs. agentless orchestration tools, such as Chef,
- Compare agent vs. agentless orchestration tools, such as Chef, Puppet, Ansible, and
What to know before you start
- dual stack (IPv4 and IPv6) architecture
- virtualization
- infrastructure
- network assurance
- security
- automation
Other certifications
Frequently asked questions
How much does the CCNP Enterprise exam cost?
$400. Confirm it on Cisco's page before you book: exam fees change.
How long is the CCNP Enterprise exam?
2 hours. Multiple choice drag-and-drop and performance-based items.
How many questions are on the CCNP Enterprise exam?
Multiple choice drag-and-drop and performance-based items. The sitting is 2 hours long. Check the current count with Cisco before you book.
How long is CCNP Enterprise valid?
3 years. Check Cisco's recertification route before it lapses.
Is the CCNP Enterprise exam hands-on?
Yes. It is performance-based: you are given a live environment and a command line, and marked on what you actually do rather than what you can recognise. Reading alone does not prepare you for it.
What is on the CCNP Enterprise exam?
6 domains. The heaviest is 3.0 Infrastructure at 30% of the exam, so it is the one worth over-preparing.
What should I know before starting CCNP Enterprise?
dual stack (IPv4 and IPv6) architecture. virtualization. infrastructure. network assurance. security. automation.
Exam details from Cisco, checked August 2026. Always confirm on their page before booking.
What learners say about Acelro
About Acelro rather than the CCNP Enterprise exam: what learners made of the gap analysis, the roadmap and the projects.
“The roadmap makes me focus on a learning curve, no matter the length.”
“Acelro has been really great for me, an inspiring experience. I've gained a lot of confidence doing projects I thought were rocket science.”
“The gap analysis maps your actual skills against what the current job market is asking for. Nobody else made it that clear where I stood.”