Cisco Certified Network Professional Enterprise (CCNP Enterprise) Exam Guide

1. 1.1Explain the different design principles used in an enterprise network
2. 1.2Explain the working principles of the Cisco Catalyst SD-WAN solution
3. 1.3Explain the working principles of the Cisco SD-Access solution
4. 1.4Interpret QoS configurations

Example scenario: A retailer wants branch traffic to fail over between MPLS and internet links based on application performance. Which parts of an SD-WAN design would you explain to them?

1. 2.1Describe device virtualization technologies
2. 2.2Configure and verify data path virtualization technologies
3. 2.3Describe network virtualization concepts

Example scenario: Two business units share a router but must keep identical 10.1.0.0/16 address ranges separate. How would VRFs solve this, and how would you verify it?

1. 3.1Layer 2
2. 3.2Layer 3
3. 3.3IP Services

Example scenario: An OSPF neighbor between two routers is stuck in EXSTART after an MTU change on one side. What output would you check, and what would you change?

1. 4.1Diagnose network problems using such as debugs, conditional debugs, traceroute, ping, SNMP, and syslog
2. 4.2Configure and verify Flexible NetFlow
3. 4.3Configure SPAN/RSPAN/ERSPAN
4. 4.4Configure and verify IPSLA
5. 4.5Describe how Cisco Catalyst Center (formerly Cisco DNA Center) is used to apply network configuration, monitoring, and management using traditional and AI-powered workflows
6. 4.6Configure and verify NETCONF and RESTCONF

Example scenario: Users at one site report slow voice calls every afternoon. Which assurance tools would you use to find where packets are delayed?

1. 5.1Configure and verify device access control
2. 5.2Configure and verify infrastructure security features
3. 5.3Describe REST API security
4. 5.4Describe the components of network security design

Example scenario: A router's CPU spikes whenever someone scans the management network. How would CoPP help, and what traffic would you protect first?

1. 6.1Interpret basic Python components and scripts
2. 6.2Construct valid JSON-encoded files
3. 6.3Describe the high-level principles and benefits of a data modeling language, such as YANG
4. 6.4Describe APIs for Cisco Catalyst Center and SD-WAN Manager
5. 6.5Interpret REST API response codes and results in payload using Cisco Catalyst Center and RESTCONF
6. 6.6Construct an EEM applet to automate configuration, troubleshooting, or data collection
7. 6.7Compare agent vs. agentless orchestration tools

Example scenario: A script calling the Catalyst Center API returns a 401 response. What does that tell you, and what would you check in the request?

• Routing and services: 300-410 ENARSI goes deeper into routing, VPN services, infrastructure security and services.
• SD-WAN: 300-415 ENSDWI covers Catalyst SD-WAN deployment, policies, security and operations.
• Design: 300-420 ENSLD covers campus, WAN, network services and SD-Access design.
• Automation, cloud and assurance: 300-435 ENAUTO, 300-440 ENCC and 300-445 ENNA cover programmability, secure cloud connectivity and network assurance.

Full syllabus ↗