All Exam Questions

ENCOR 350-401: The Core Exam Every CCNP Enterprise Candidate Has to Pass

Official details for 350-401 ENCOR Certification Exam Overview as published by the certification body.

Exam code
350-401 ENCOR
Number of questions
Approximately 90–110
Cost
Approximately USD $400
Certification body
Cisco
Validity
3 Years

What  350-401 ENCOR Exam Actually Certifies

ENCOR is the single gateway exam standing between a mid-career network engineer and three separate professional-and-expert-level credentials. Pass it, and you immediately hold the ENCOR Cisco Certified Specialist – Enterprise Core certification on its own. Pair it with a concentration exam of your choice, and it becomes the core half of CCNP Enterprise. It also doubles as the qualifying written exam for CCIE Enterprise Infrastructure and CCIE Enterprise Wireless — so a huge number of candidates sitting this test aren't stopping at CCNP at all; they're using it as the first checkpoint on the road to an expert-level lab exam.

That dual purpose shapes the exam itself. It isn't narrowly focused on one technology the way a concentration exam is. Cisco built it to cover the horizontal slice of knowledge every enterprise network engineer needs regardless of specialty: architecture decisions, virtualization, core infrastructure protocols, assurance tooling, security fundamentals, and enough automation to be dangerous with Python and REST APIs.

Who 350-401 ENCOR Exam Is For (and Who It's Not For)

ENCOR fits engineers who've already spent time in the field — Cisco doesn't enforce prerequisites, but the exam content assumes someone who has configured OSPF and BGP in production, worked with EtherChannel and spanning tree beyond the CCNA basics, and has at least touched a controller-based environment like SD-Access or Catalyst SD-WAN. CBT Nuggets and other prep providers commonly point candidates toward roughly three to five years of hands-on enterprise networking experience before attempting it, and that tracks with how the exam is written: questions expect you to reason through a scenario, not just recall a definition.

It's a poor fit for two groups. Complete beginners will find the pace brutal — this assumes CCNA-level fluency as a floor, not a ceiling. And engineers who already know exactly which specialty they want (pure automation, pure SD-WAN, pure network design) sometimes chafe at how broad ENCOR is before they get to go deep in their concentration exam. That breadth is the point, though — Cisco wants every CCNP Enterprise holder to share a common baseline before they specialize.

Exam Format and Structure

At 120 minutes, ENCOR runs longer than the 90-minute concentration exams that follow it, and it needs to — six domains is a lot of ground to cover in one sitting. Expect a mix of multiple-choice questions, drag-and-drop matching, and scenario-based items that describe a network state (a partial config, a topology diagram, a set of symptoms) and ask you to identify the cause or correct configuration. Cisco doesn't publish the exact breakdown of question types or the total question count, and that's consistent with how Cisco has run professional-level exams for years — you won't see a hard number confirmed on the official page.

The pacing pressure is  but not extreme if you've prepared across all six domains. Where candidates tend to lose time is Infrastructure, which carries the single largest weight and mixes conceptual routing-protocol comparisons (EIGRP vs. OSPF path selection, for instance) with configuration-verification questions that require reading through CLI output carefully. Rushing that section to save time for Security or Automation is a common mistake reported in post-exam discussions on the Cisco Learning Network.

Domains and Topics Covered

Cisco updated the published exam topics to v1.2, and the current domain weighting is:

Domain

Weight

Focus

1.0 Architecture

15%

Enterprise network design (2-tier, 3-tier, fabric, cloud), Catalyst SD-WAN and SD-Access working principles, QoS

2.0 Virtualization

10%

Hypervisors, virtual switching, VRF, GRE/IPsec tunneling, LISP, VXLAN

3.0 Infrastructure

30%

Layer 2 (trunking, EtherChannel, STP), Layer 3 (OSPF, EIGRP, eBGP), IP services (NTP/PTP, NAT/PAT, FHRP, multicast)

4.0 Network Assurance

10%

Troubleshooting tools, Flexible NetFlow, SPAN/RSPAN/ERSPAN, IPSLA, Cisco Catalyst Center, NETCONF/RESTCONF

5.0 Security

20%

AAA, ACLs, CoPP, REST API security, threat defense concepts, TrustSec/MACsec

6.0 Automation and Artificial Intelligence

15%

Python, JSON, YANG, Catalyst Center and SD-WAN Manager APIs, EEM applets, agent vs. agentless orchestration

Infrastructure and Security together make up half the exam, which tells you where to put your heaviest study hours. Automation used to be a smaller afterthought in earlier Cisco professional exams; it's now a fixed 15% here, reflecting how much of day-to-day enterprise operations has shifted toward scripted and API-driven workflows rather than pure CLI work.

Cost Breakdown

The exam costs $400 USD in the United States, payable directly through Pearson VUE or covered by Cisco Learning Credits if your employer purchases them in bulk. Cisco doesn't publish a separate, discounted retake fee — a second attempt costs the same $400, and Cisco enforces a mandatory waiting period between attempts (five calendar days after a first failure, growing longer after repeated failures). Pricing outside the U.S. varies by region and is set in local currency at the time of scheduling, so candidates testing outside the U.S. should confirm the exact figure in the Pearson VUE portal before budgeting.

Prerequisites and Eligibility

Cisco doesn't gate this exam behind any required prior certification — anyone can register and sit it. That's consistent across the entire current-generation Cisco certification structure; CCNA is recommended as a knowledge baseline but has never been a hard prerequisite for CCNP-level exams. What matters in practice is readiness, not paperwork: showing up without solid routing-protocol and infrastructure fundamentals tends to end in a failed attempt regardless of what the registration system allows.

How 350-401 ENCOR Exam Is Scored and What Passing Requires

Cisco uses scaled scoring on a 300–1000 range for its certification exams, but doesn't publish the specific cut score for ENCOR, and that cut score can shift slightly between exam item pools as Cisco recalibrates question difficulty. You'll get a pass/fail result immediately at the test center, with a detailed score report broken out by domain delivered within 48 hours through Cisco's certification tracking system — useful for identifying weak areas if you need to retake it.

Renewal, Recertification, and Continuing Education

The certification earned by passing ENCOR — Cisco Certified Specialist - Enterprise Core — is valid for three years from the pass date. You can recertify by retaking ENCOR (or a higher-level exam that covers equivalent ground) before expiration, or by earning Continuing Education credits through Cisco's CE program, which accepts a mix of training courses, conference attendance, and other approved activities in place of a full retake. If ENCOR is being used toward a full CCNP Enterprise certification, both the core and concentration exam need to stay current for the overall CCNP to remain valid.

How 350-401 ENCOR Exam Compares to Its Closest Alternative

Within Cisco's own catalog, there's no  substitute — ENCOR is a mandatory gate, not an optional path, for anyone pursuing CCNP Enterprise or CCIE Enterprise Infrastructure/Wireless. The more useful comparison is cross-vendor: Juniper's JNCIP-ENT (exam JN0-650) occupies a similar professional tier for enterprise routing and switching on Junos, running 90 minutes for roughly $400 and covering advanced OSPF/BGP, IP multicast, EVPN-VXLAN, and Class of Service. The scope is narrower than ENCOR's six domains — JNCIP-ENT skips SD-WAN, automation, and much of the security breadth ENCOR covers — but it's the closest like-for-like professional-level credential if you're choosing between investing in the Cisco or Juniper ecosystem. For engineers already committed to Cisco gear, the decision isn't ENCOR-versus-something-else; it's which of ENCOR's seven downstream concentration exams (ENARSI, ENSDWI, ENSLD, ENAUTO, ENCC, ENNA, or a wireless-track option) to pair it with once it's passed.

 Preparation Timeline

For someone already working daily with enterprise Cisco gear, 8 to 12 weeks of focused study is a reasonable target — roughly in line with what Cisco Press and CBT Nuggets both suggest for professional-level Cisco exams of this scope. Candidates coming in with weaker automation or security backgrounds (common for engineers who've spent most of their career on pure routing and switching) often need to add two to three extra weeks specifically for domains 5 and 6, since those sections test conceptual breadth (API security models, TrustSec, YANG data modeling) that doesn't come up in routine CLI-heavy work. Building a home lab or using Cisco's own sandbox environments to practice SD-Access and SD-WAN scenarios tends to matter more here than for most exams, since those two topics are genuinely difficult to internalize from reading alone.

Frequently Asked Questions