What the ENCOR 350-401 actually tests
The ENCOR 350-401 is a 120-minute professional-level exam with approximately 90–110 questions. It is the core exam for the CCNP Enterprise track and also satisfies the written requirement for the CCIE Enterprise Infrastructure and CCIE Enterprise Wireless certifications.
Infrastructure (30%) is the largest domain and the most technically demanding. It covers OSPF LSA types and area types, BGP path selection attributes, EIGRP DUAL algorithm, MPLS label operations, multicast PIM modes, VLANs and STP, EtherChannel negotiation, and enterprise wireless architecture. Candidates with CCNA-level knowledge of these protocols will need to go significantly deeper for ENCOR.
The exam includes multiple question formats: single-answer MCQ, multiple-select (choose two or three), drag-and-drop ordering, and matching questions. Drag-and-drop questions ask you to sequence configuration steps correctly. Matching questions pair protocols, LSA types, or attributes to their descriptions. Both types require process-level knowledge, not just factual recall.
How ENCOR differs from CCNA — and what that means for preparation
CCNA tests whether you understand how protocols work at a high level. ENCOR tests whether you can configure, troubleshoot, and design with those protocols under enterprise conditions. An OSPF question on CCNA might ask what metric OSPF uses. An OSPF question on ENCOR asks about LSA flooding scope in a stub area, or why a Type-3 LSA is not being installed in the LSDB.
ENCOR also covers topics absent from CCNA entirely: BGP communities and policy, MPLS label forwarding, SD-Access LISP/VXLAN control plane, NETCONF RPC operations, YANG data model structure, Ansible playbook syntax, and Python network automation libraries (Netmiko, NAPALM). These are not CCNA extensions — they are separate bodies of knowledge that require dedicated study time.
How to use Courseiva for ENCOR preparation
Start with domain practice to establish your baseline. The Infrastructure domain (30% of the exam) should receive the most practice time. If you are scoring below 65% in Infrastructure, target the sub-topics individually: OSPF, then BGP, then VLANs/STP, then multicast.
The Automation domain (15%) is often under-studied because it feels different from the rest of the exam. Candidates with a strong infrastructure background sometimes skip automation preparation and lose 15 points of available marks. Use the topic practice pages for Python, Ansible, and REST APIs / YANG to build this domain independently.
How to practise drag-and-drop and matching questions
Drag-and-drop ordering questions on ENCOR follow a predictable structure: they test configuration step sequences. Common sequences include the BGP neighbour establishment process, OSPF area configuration steps, DMVPN phase implementation order, and the CoPP policy map application sequence. Practise these sequences until you can reproduce them without reference material.
Matching questions typically pair a protocol attribute (e.g., BGP weight, local preference, AS-path length, MED) with its description and scope. They also test LSA type-to-scope mapping, EAP method-to-authentication type matching, and RESTCONF operation-to-HTTP method pairing. Build a reference table for each of these and test yourself against it.
Common mistakes ENCOR candidates make
- Treating ENCOR like a harder CCNA. ENCOR covers several entirely separate domains (SD-Access, SD-WAN, NETCONF/RESTCONF, Python automation) that have no direct CCNA equivalent. These must be studied from scratch.
- Underweighting the BGP domain. BGP path selection (weight → local preference → route origin → AS-path length → MED → eBGP over iBGP → IGP metric) appears in multiple forms across questions. BGP is the most complex routing protocol tested and requires more practice time than OSPF or EIGRP.
- Ignoring drag-and-drop and matching practice. These question types appear frequently on ENCOR and require process-level knowledge. Candidates who only practise MCQs are unprepared for these formats.
- Skipping SD-Access and SD-WAN. The Architecture domain (15%) tests SD-Access fabric design and SD-WAN policy in ways that require understanding the control plane — not just the marketing summary. These topics need dedicated study sessions.
- Not reading the full explanation after each question. The explanation describes why each wrong option is wrong, which is as important as knowing the correct answer on a professional-level exam.