Cisco Practice Test 350-401 ENCOR: Implementing Cisco Enterprise Network Core Technologies

The Cisco ENCOR practice test trains you in core enterprise network technologies.

Why should I take the ENCOR exam?
The Cisco 350-401 ENCOR exam assesses your knowledge and skills regarding implementing core enterprise network technologies, including dual stack (IPv4 and IPv6) architecture, virtualization, infrastructure, network assurance, security, and automation. The Cisco ENCOR certification is aimed at mid-level network engineers, network administrators, network support technicians, and help desk technicians and, in terms of technology areas, is linked to enterprise networking and routing and switching.

Language: English

The 300-401 ENCOR practice test contains 248 questions and covers the following topics:

Architecture – 38 questions

Explain the different design principles used in an enterprise network

• High-level enterprise network design such as 2-tier, 3-tier, fabric, and cloud
• High availability techniques such as redundancy, FHRP, and SSO

Describe wireless network design principles

• Wireless deployment models (centralized, distributed, controller-less, controller-based, cloud, remote branch)
• Location services in a WLAN design
• Client density

Explain the working principles of the Cisco SD-WAN solution

• SD-WAN control and data planes elements
• Benefits and limitations of SD-WAN solutions

Explain the working principles of the Cisco SD-Access solution

• SD-Access control and data planes elements
• Traditional campus interoperating with SD-Access

Interpret wired and wireless QoS configurations

• QoS components
• QoS policy

Describe hardware and software switching mechanisms such as CEF, CAM, TCAM, FIB, RIB, and adjacency tables

Virtualization – 24 questions

Describe device virtualization technologies

• Hypervisor type 1 and 2
• Virtual machine
• Virtual switching

Configure and verify data path virtualization technologies

• VRF
• GRE and IPsec tunneling

Describe network virtualization concepts

• LISP
• VXLAN

Infrastructure – 81 questions

Layer 2

• Troubleshoot static and dynamic 802.1q trunking protocols
• Troubleshoot static and dynamic EtherChannels
• Configure and verify common Spanning Tree Protocols (RSTP and MST) and Spanning Treeenhancements such as root guard and BPDU guard

Layer 3

• Compare routing concepts of EIGRP and OSPF (advanced distance vector vs. link state, load balancing, path selection, path operations, metrics, and area types)
• Configure simple OSPFv2/v3 environments, including multiple normal areas, summarization, and filtering (neighbor adjacency, point-to-point and broadcast network types, and passive interface)
• Configure and verify eBGP between directly connected neighbors (best path selection algorithm and neighbor relationships)
• Describe policy-based routing

Wireless

• Describe Layer 1 concepts, such as RF power, RSSI, SNR, interference noise, band and channels, and wireless client devices capabilities
• Describe AP modes and antenna types
• Describe access point discovery and join process (discovery algorithms, WLC selection process)
• Describe the main principles and use cases for Layer 2 and Layer 3 roaming Troubleshoot WLAN configuration and wireless client connectivity issues using GUI only
• Describe wireless segmentation with groups, profiles, and tags

IP Services

• Describe Network Time Protocol (NTP)
• Configure and verify NAT/PAT
• Configure first hop redundancy protocols, such as HSRP and VRRP
• Describe multicast protocols, such as RPF check, PIM and IGMP v2/v3

Network Assurance – 22 questions

Diagnose network problems using tools such as debugs, conditional debugs, trace route, ping, SNMP, and syslog
Configure and verify Flexible NetFlow
Configure and verify SPAN/RSPAN/ERSPAN
Configure and verify IPSLA
Describe Cisco DNA Center workflows to apply network configuration, monitoring, and management
Configure and verify NETCONF and RESTCONF

Security – 49 questions

Configure and verify device access control

• Lines and local user authentication
  Authentication and authorization using AAA

Configure and verify infrastructure security features

• ACLs
  CoPP

Describe REST API security

Configure and verify wireless security features

• 802.1x
• EAP
• WebAuth
• PSK
• EAPOL (4-way handshake)

Describe the components of network security design

• Threat defense
• Endpoint security
• Next-generation firewall
• TrustSec, MACsec
• Network access control with 802.1X, MAB, and WebAuth

Automation – 34 questions

Interpret basic Python components and scripts
Construct valid JSON encoded file
Describe the high-level principles and benefits of a data modeling language, such as YANG
Describe APIs for Cisco DNA Center and vManage
Interpret REST API response codes and results in payload using Cisco DNA Center and RESTCONF
Construct EEM applet to automate configuration, troubleshooting, or data collection
Compare agent vs. agentless orchestration tools, such as Chef, Puppet, Ansible, and SaltStack

Notes:

• The bullets that follow each of the skills measured are intended to illustrate how we are assessing that skill. Related topics may be covered in the exam.
• Most questions cover features that are general availability (GA). The exam may contain questions on Preview features if those features are commonly used.