Why Study with PlanetCert?
The Latest Questions
Practice questions and exam topics aligned with the current exam objectives.
Detailed Explanations
Go beyond the answer. Master the material with comprehensive learning and professional explanations for every concept.
AI-Powered Insights
Personalized preparation guidance that adapts to your performance and identifies weak spots automatically.
Exam Information
Official specifications published by Cisco
Exam Format
120 min
90-110
Variable (750-850/1000)
Professional
Registration
$400 USD
Pearson VUE or online proctoring
English, Japanese
Validity
3 years
Pass any CCNP core exam; Pass any CCIE lab exam; Pass two professional concentration exams
350-401 Exam Topics and Domains
350-401 is organized into 6 weighted domains. Expect to work with ISE, DNA Center, 802.1X, Catalyst Center, and more.
1
Architecture
15%
Explain the different design principles used in an enterprise network
High-level enterprise network designHigh availability techniques
- Differentiate between 2-tier and 3-tier network designs
- Identify appropriate high availability mechanisms for specific scenarios
- Calculate bandwidth requirements for fabric deployments
Describe wireless network design principles
Wireless deployment modelsLocation services in a WLAN designClient density
- Select appropriate wireless deployment model for given requirements
- Design for client density and capacity
- Implement location services
Explain the working principles of the Cisco SD-WAN solution
SD-WAN control and data planes elementsBenefits and limitations of SD-WAN solutions
- Explain SD-WAN architecture and component roles
- Compare traditional WAN with SD-WAN solutions
- Identify appropriate SD-WAN use cases
Explain the working principles of the Cisco SD-Access solution
SD-Access control and data planes elementsTraditional campus interoperating with SD-Access
- Describe SD-Access architecture components
- Explain LISP and VXLAN operation in fabric
- Design fabric integration with existing networks
Interpret wired and wireless QoS configurations
QoS componentsQoS policy
- Interpret QoS configurations on routers and switches
- Identify appropriate QoS mechanisms for requirements
- Understand wireless QoS operation
Describe hardware and software switching mechanisms
Switching mechanisms
- Explain CEF operation
- Differentiate between CAM and TCAM
- Understand FIB and adjacency table relationship
2
Virtualization
10%
Describe device virtualization technologies
Hypervisor type 1 and 2Virtual machineVirtual switching
- Differentiate hypervisor types
- Understand virtual switching concepts
Configure and verify data path virtualization technologies
VRF (Virtual Routing and Forwarding)GRE and IPsec tunneling
- Configure and verify VRF
- Implement GRE and IPsec tunnels
- Troubleshoot VRF and tunnel issues
Describe network virtualization concepts
LISP (Locator/ID Separation Protocol)VXLAN
- Explain LISP operation and benefits
- Describe VXLAN encapsulation and use cases
3
Infrastructure
30%
Layer 2
Troubleshoot static and dynamic 802.1q trunking protocolsTroubleshoot static and dynamic EtherChannelsConfigure and verify common Spanning Tree Protocols
- Troubleshoot trunk configurations
- Configure and verify EtherChannel
- Implement RSTP and MST
- Configure STP enhancements
Layer 3
Compare routing concepts of EIGRP and OSPFConfigure simple OSPFv2/v3 environmentsConfigure and verify eBGPDescribe policy-based routing
- Compare EIGRP and OSPF
- Configure multi-area OSPF
- Implement eBGP
- Understand policy-based routing
Wireless
Describe Layer 1 conceptsDescribe AP modes and antenna typesDescribe access point discovery and join processLayer 2 and Layer 3 roamingTroubleshoot WLAN configuration and client connectivityWireless segmentation
- Understand wireless RF fundamentals
- Describe AP modes and operations
- Troubleshoot wireless connectivity
- Implement wireless segmentation
IP Services
Interpret network time protocol configurationsConfigure NAT/PATConfigure first hop redundancy protocolsDescribe multicast protocols
- Configure NTP and PTP
- Implement NAT/PAT
- Configure FHRP protocols
- Understand multicast fundamentals
4
Network Assurance
10%
Diagnose network problems using tools
Troubleshooting tools
- Use debug commands for troubleshooting
- Interpret diagnostic tool outputs
- Configure SNMP and syslog
Configure and verify Flexible NetFlow
Flexible NetFlow
- Configure Flexible NetFlow
- Create custom flow records
- Verify NetFlow operation
Configure SPAN/RSPAN/ERSPAN
Traffic monitoring
- Configure local SPAN
- Implement RSPAN
- Configure ERSPAN
Configure and verify IP SLA
IP SLA operations
- Configure IP SLA operations
- Implement IP SLA tracking
- Verify IP SLA results
Describe Cisco DNA Center workflows
DNA Center workflows
- Describe DNA Center architecture
- Understand DNA Center workflows
- Explain assurance capabilities
Configure and verify NETCONF and RESTCONF
Model-driven programmability
- Configure NETCONF
- Use RESTCONF for device management
- Interpret YANG models
5
Security
20%
Configure and verify device access control
Lines and local user authenticationAuthentication and authorization using AAA
- Configure line security
- Implement AAA
- Compare RADIUS and TACACS+
Configure and verify infrastructure security features
ACLsCoPP (Control Plane Policing)
- Configure and verify ACLs
- Implement CoPP
- Secure infrastructure devices
Describe REST API security
API security
- Describe API authentication methods
- Understand API security mechanisms
Configure and verify wireless security features
802.1XWebAuthPSK (Pre-Shared Key)EAPOL (4-way handshake)
- Configure wireless 802.1X
- Implement WebAuth
- Understand wireless encryption
Describe the components of network security design
Threat defenseEndpoint securityNext-generation firewallTrustSec and MACsecNetwork access control
- Describe security architecture components
- Understand TrustSec operation
- Explain NAC mechanisms
6
Automation and Artificial Intelligence
15%
Interpret basic Python components and scripts
Python basics
- Interpret Python scripts
- Understand Python data structures
- Use Python for network automation tasks
Construct valid JSON-encoded files
JSON syntax
- Construct valid JSON
- Parse JSON data
- Validate JSON syntax
Describe data modeling language principles
YANG data modeling
- Describe YANG principles
- Understand data modeling benefits
Describe APIs for Cisco DNA Center and SD-WAN Manager
Platform APIs
- Describe DNA Center APIs
- Understand vManage API capabilities
- Use platform APIs for automation
Interpret REST API response codes and results
REST API interaction
- Interpret HTTP response codes
- Use REST APIs effectively
- Troubleshoot API issues
Construct EEM applet
EEM automation
- Construct EEM applets
- Automate network tasks with EEM
- Use EEM for troubleshooting
Compare agent vs. agentless orchestration tools
Orchestration tools
- Compare orchestration tools
- Understand agent vs agentless architectures
- Select appropriate automation tools
How do I earn this certification?
Passing 350-401 earns the Cisco Certified Specialist - Enterprise Core (standalone), or CCNP Enterprise (with concentration), or CCIE Enterprise certification. It sits in the Enterprise track.
Next Level Options
- CCIE Enterprise Infrastructure Lab - CCIE Enterprise Infrastructure Lab Exam
- CCIE Enterprise Wireless Lab - CCIE Enterprise Wireless Lab Exam
Alternative Paths
- 350-501 - SPCOR - Implementing and Operating Cisco Service Provider Network Core TechnologiesComplementary service provider skills for enterprise engineers working with SP technologies
- 350-701 - SCOR - Implementing and Operating Cisco Security Core TechnologiesSecurity focus for enterprise engineers wanting to specialize in network security
- 350-601 - DCCOR - Implementing Cisco Data Center Core TechnologiesData center skills for enterprise engineers working with DC technologies
- 300-435 - ENAUTO - Automating Cisco Enterprise SolutionsDeep dive into automation and programmability (also available as CCNP Enterprise concentration)
Practice with Precision
The PlanetCert Simulator mirrors the real exam environment with authentic questions and timed pressure.
How to study for this exam?
The most effective way to prepare for 350-401 is by using the PlanetCert Simulator to practice questions and review detailed explanations.
What's changed on this exam?
Current Status
- ACTIVE
- Announcement date: 2024-11-14
Updates
- Cisco Catalyst Center (formerly DNA Center) Network Assurance domain (10%) - workflows for configuration, monitoring, and management
- Cisco SD-WAN Architecture domain (15%) - SD-WAN control/data planes, benefits, and limitations
- Wireless (802.11 standards) Infrastructure domain (30%) - wireless topics account for significant portion
- RESTCONF and NETCONF Network Assurance domain (10%) - configuration and verification required
Who should take this exam?
This exam is typically taken by Network Engineers and Network Administrators.
- 3-5 years of experience implementing enterprise networking solutions
- Understanding of enterprise network technologies
- CCNA certification or equivalent knowledge