Certification guide

350-401

Cisco CCNP Enterprise (ENCOR core): the honest guide

CCNP Enterprise is not an exam, it is a pair of them. You pass 350-401 ENCOR, the core exam, and then one concentration exam that you choose based on the work you want to be known for, for example 300-410 ENARSI for advanced routing. Pass only ENCOR and you hold a Cisco Certified Specialist designation and the qualifying exam toward CCIE Enterprise Infrastructure, which is a real outcome, but it is not CCNP Enterprise. Almost every wrong assumption about this certification starts with treating ENCOR as the whole thing.

ENCOR runs 120 minutes and mixes multiple choice, multiple response, drag-and-drop, simlets and full simulations where you configure Cisco device software inside the exam. Cisco does not publish how many questions you will see and does not publish the passing score, which is a scaled figure. The weightings it does publish are the ones to plan against: Infrastructure 30 percent, Security 20 percent, Architecture 15 percent, Automation and Artificial Intelligence 15 percent, Virtualization 10 percent, and Network Assurance 10 percent.

This is an advanced exam and it behaves like one. It assumes you have configured enterprise routing, switching, wireless and security on real equipment, and it does not stop to teach any of it. There is no version of preparing for this in two weeks of video.

Who CCNP Enterprise is for

A good fit if

  • You already run enterprise Cisco networks and the credential does not yet match what you do on a Tuesday.
  • You hold CCNA and the work has outgrown it: redistribution, overlays, wireless design, and traffic you have to reason about rather than look up.
  • You are heading toward CCIE Enterprise Infrastructure and need ENCOR, which is the qualifying exam for it.
  • A role you want, or a contract your employer is bidding on, names CCNP by title.
  • You want the certification pointed at a specialism rather than a general one, which is exactly what the concentration exam is for.

Probably not, if

  • You have no hands-on enterprise experience yet. ENCOR assumes fluency it never teaches, and no amount of reading closes that gap. CCNA first, then time on real equipment.
  • You want a vendor-neutral credential. This is Cisco configuration, Cisco platforms and Cisco device software, and it is specific on purpose.
  • You want one exam, one date and one price. This is two exams, two purchases, and a three-year clock running between them.
  • You are moving toward cloud or security and away from infrastructure. The depth here is aimed at the enterprise network itself, and the study time would go further on the certification that matches the destination.

Is CCNP Enterprise worth it?

For a working enterprise network engineer, yes, and it is one of the clearer yeses on this site. CCNP is the tier where the certification stops being a screening filter and starts being read as evidence of what you can actually do, because the exam format makes it hard to hold without having configured anything. The study also lands on the job rather than beside it: the automation and assurance content in particular tends to change how people work, not just what they can answer.

For someone who passed CCNA last month and wants to keep the momentum, the honest answer is not yet. The distance between associate and professional level here is large, and it is made of production experience rather than study hours. Spending six months doing the work and then starting ENCOR is faster in wall-clock time than starting ENCOR now.

For someone who will realistically only ever sit ENCOR, price it honestly. $400 buys you a Specialist designation and the qualifying exam toward CCIE Enterprise Infrastructure, both of which are worth having. What it does not buy is CCNP Enterprise, and a CV that claims otherwise falls apart in the first technical conversation.

For someone whose employer is paying and whose role is already at this level, the calculation is mostly about time rather than money, and the time is real. Plan for months, not weeks.

What the exam actually asks you to do

Multiple choice and multiple response, drag-and-drop, simlets, and full simulations where you configure Cisco device software in the exam, the same format as CCNA but at professional depth.

Item formats

  • Multiple choice
  • Multiple response
  • Drag and drop
  • Simlet
  • Simulation

The highlighted formats are the ones you cannot answer from memory alone. Cisco, certification exam tutorial ↗

Domain breakdown and official weightings

From the official Cisco exam topics. Infrastructure is the heaviest domain at 30 percent, followed by Security at 20 percent.

  • Architecture15%
  • Virtualization10%
  • Infrastructure30%
  • Network Assurance10%
  • Security20%
  • Automation and Artificial Intelligence15%

Where to focus: Infrastructure is 30 percent of ENCOR, the largest domain by far, and automation plus assurance add another 25. Routing and switching depth is necessary but not sufficient; budget real time for the programmability content.

Cisco: Cisco exam topics ↗

Study plans by experience level

Working daily on enterprise Cisco networks

10 to 14 weeksat 8 to 10 hours

  1. 1Week 1: read the published ENCOR exam topics end to end and mark every line you could not demonstrate on equipment. Familiarity with production kit is not the same as coverage of the blueprint, and this list is the difference.
  2. 2Weeks 2 to 5: Infrastructure, which is 30 percent of the exam and the largest domain by a wide margin. Work it against the topic list rather than against your own network, because your network implements a subset of what can be asked.
  3. 3Weeks 6 to 7: Security at 20 percent. This is where engineers who own the routing and switching often find their gaps, since access control and infrastructure security frequently sit with a different team.
  4. 4Weeks 8 to 9: Automation and Artificial Intelligence at 15 percent, plus Network Assurance at 10 percent. Together these are a quarter of the exam and they are the two most commonly skipped domains.
  5. 5Weeks 10 to 11: Architecture and Virtualization, which are lighter and reward reading over lab time.
  6. 6Weeks 12 onward: timed practice with the simulations run strictly against the clock, then book. Choose your concentration exam in this window so the study runs straight on rather than stopping.

CCNA-level, limited production exposure

20 to 26 weeksat 10 hours

  1. 1Weeks 1 to 3: close the experience gap deliberately before you open the blueprint. Build a multi-site topology you keep for the whole period and break it on purpose, because ENCOR asks about behavior you have watched rather than definitions you have read.
  2. 2Weeks 4 to 11: Infrastructure, taken slowly. At 30 percent it deserves a third of your time, and routing depth at professional level is a genuine step up from what CCNA asked.
  3. 3Weeks 12 to 15: Security, then Architecture. Architecture is conceptual and gives you a rest week after the security content.
  4. 4Weeks 16 to 19: Automation and Artificial Intelligence, and Network Assurance. If you come from a traditional networking background this is the unfamiliar quarter of the exam, so it needs real weeks rather than a weekend.
  5. 5Weeks 20 to 22: Virtualization, then a full pass back over Infrastructure, which you studied long enough ago to have lost some of.
  6. 6Weeks 23 onward: timed full-length practice. Book when your practice results are consistently comfortable rather than occasionally good, because Cisco does not publish the cut score and you cannot aim at a number.

Returning to Cisco after time in another stack

8 to 12 weeksat 10 to 12 hours

  1. 1Get a terminal open in week one. Command recall degrades faster than concepts do, and the simulations test the recall, not the concepts.
  2. 2Read the exam topics and separate what has changed from what you have forgotten. They need different treatment: forgotten material comes back in hours, changed material has to be learned properly.
  3. 3Spend the largest block on Automation and Artificial Intelligence together with Network Assurance, at 25 percent between them. These are the domains most likely to have moved since you last certified.
  4. 4Rebuild Infrastructure depth against the current topic list rather than against memory. Thirty percent of the exam is not a section to trust yourself on.
  5. 5Finish with timed simulations. Typing the right commands and typing them fast enough are separate skills, and the clock tests the second.

Common mistakes

Treating ENCOR as the certification
It is the core exam of a pair. Passing it earns a Specialist designation and the CCIE Enterprise Infrastructure qualifying exam, not CCNP Enterprise. Budget and plan for the concentration exam from the start, because discovering it at the end costs both money and momentum.
Studying routing and switching to the exclusion of the rest
Infrastructure is 30 percent, which means 70 percent of the exam is something else. Security is 20, Architecture and Automation are 15 each, Virtualization and Network Assurance are 10 each. Routing depth is necessary here and it is nowhere near sufficient.
Skipping automation because it is not the day job
Automation and Artificial Intelligence is 15 percent and Network Assurance is another 10. That is a quarter of the exam, it is the newest content, and it is the part engineers from traditional networking backgrounds most reliably ignore until the score comes back.
Preparing from video without configuring anything
The exam includes simlets and full simulations where you configure Cisco device software under time pressure. Watching someone else do it builds recognition. Recognition is not what the simulations measure, and at this level the gap between the two is wide.
Chasing a passing score Cisco does not publish
There is no published cut score and no published question count for 350-401, and the score is scaled. Any specific percentage you have been told to aim for was invented by someone. Aim at consistent competence across the blueprint instead, which is the only target that exists.
Letting the three-year clock run on your ENCOR pass
You have three years from passing ENCOR to complete a concentration exam, because each Cisco exam result is valid for three years. People pass the core exam, get busy, and lose it. Book the concentration while the study habit is still running.

What comes after passing

CCNP Enterprise is valid for three years, and Cisco gives you three renewal routes: continuing education credits, passing another professional or expert level exam, or re-taking the exams. The credit route is the one most working engineers use, because Cisco awards credits for training they were doing anyway, so it costs time rather than a fee.

CCIE Enterprise Infrastructure is the next step up, and you have already sat its qualifying exam. That is worth knowing before you decide the certification is finished: ENCOR does double duty, and the expert track is closer from here than it looks from the outside.

The other direction is sideways, into a second concentration. Nothing stops you sitting another one, and for engineers whose remit is widening it is a cheaper way to cover new ground than starting a different certification track from scratch.

Whatever you choose, put the expiry date somewhere you will see it. The expensive failure mode on this certification is not the exam, it is letting a three-year cycle lapse and paying for both exams again.

Costs across the full renewal cycle are on the CCNP Enterprise cost page.

Frequently asked questions

How many exams does CCNP Enterprise take?

Two. You pass the 350-401 ENCOR core exam, then one concentration exam of your choice, for example 300-410 ENARSI for advanced routing. ENCOR alone does not earn the certification, though it does count toward CCIE Enterprise Infrastructure.

Is there a prerequisite for CCNP Enterprise?

No formal prerequisite. Cisco removed them, so you can sit ENCOR without holding CCNA. In practice ENCOR assumes CCNA-level fluency and then goes well beyond it, so most candidates hold CCNA or the equivalent experience first.

What is the passing score for the 350-401 ENCOR exam?

Cisco does not publish one. The exam is scored on a variable scaled basis, and Cisco also does not publish the number of questions. Any specific percentage you have seen quoted for this exam did not come from Cisco.

How hard is the ENCOR exam?

It is broad and deep: 120 minutes across architecture, virtualization, a 30 percent infrastructure domain, network assurance, security, and automation. The infrastructure and automation weighting means you cannot pass on routing and switching alone.

Does ENCOR expire if I do not take the concentration exam?

You have three years from passing ENCOR to complete a concentration exam. Each Cisco exam result is valid for three years, so letting that window close means paying for the core exam again.

How long does CCNP Enterprise take to study for?

Ten to fourteen weeks at around 8 to 10 hours a week if you already work on enterprise Cisco networks daily. Twenty to twenty-six weeks from CCNA level with limited production exposure. Eight to twelve weeks if you are returning to Cisco after time in another stack.

Is CCNP Enterprise worth it?

For a working enterprise network engineer, yes. The exam format makes it difficult to hold without having configured real equipment, which is why it reads as evidence rather than as a screening filter. For someone fresh from CCNA, the honest answer is not yet.

Keep reading

Compared with

Side by side on cost, difficulty, and which one to take first.

Every guide and cost breakdown, by vendor

Practice CCNP Enterprise for free while you decide

Original questions written from the published objectives, with the concept, the reasoning, and a note on every wrong option. No account needed to start.

Start free CCNP Enterprise questions