CCNP Enterprise

1. Architecture
1.1 Explain the different design principles used in an enterprise network
1.2 Analyze design principles of a WLAN deployment
1.3 Differentiate between on-premises and cloud infrastructure deployments
1.4 Explain the working principles of the Cisco SD-WAN solution
1.5 Explain the working principles of the Cisco SD-Access solution
1.6 Describe concepts of wired and wireless QoS
1.7 Differentiate hardware and software switching mechanisms

2. Virtualization
2.1 Describe device virtualization technologies
2.2 Configure and verify data path virtualization technologies
2.3 Describe network virtualization concepts

3. Infrastructure
3.1 Layer 2
3.2 Layer 3
3.3 Wireless
3.4 IP Services

4. Network Assurance
4.1Diagnose network problems using tools such as debugs, conditional debugs, trace route,
ping, SNMP, and syslog
4.2Configure and verify device monitoring using syslog for remote logging
4.3Configure and verify NetFlow and Flexible NetFlow
4.4Configure and verify SPAN/RSPAN/ERSPAN
4.5Configure and verify IPSLA
4.6Describe Cisco DNA Center workflows to apply network configuration, monitoring, and
management
4.7 Configure and verify NETCONF and RESTCONF

5. Security
5.1 Configure and verify device access control
5.2 Configure and verify infrastructure security features
5.3 Describe REST API security
5.4 Configure and verify wireless security features
5.5 Describe the components of network security design

6. Automation
6.1 Interpret basic Python components and scripts
6.2 Construct valid JSON encoded file
6.3 Describe the high-level principles and benefits of a data modeling language, such as
YANG
6.4 Describe APIs for Cisco DNA Center and vManage
6.5 Interpret REST API response codes and results in payload using Cisco DNA Center and
RESTCONF
6.6 Construct EEM applet to automate configuration, troubleshooting, or data collection
6.7 Compare agent vs. agentless orchestration tools, such as Chef, Puppet, Ansible, and
SaltStack

1. Layer 3 Technologies
1.1 Troubleshoot administrative distance (all routing protocols)
1.2 Troubleshoot route map for any routing protocol (attributes, tagging, filtering)
1.3 Troubleshoot loop prevention mechanisms (filtering, tagging, split horizon, route
poisoning)
1.4 Troubleshoot redistribution between any routing protocols or routing sources
1.5 Troubleshoot manual and auto-summarization with any routing protocol
1.6 Configure and verify policy-based routing
1.7 Configure and verify VRF-Lite
1.8 Describe Bidirectional Forwarding Detection
1.9 Troubleshoot EIGRP (classic and named mode)
1.10 Troubleshoot OSPF (v2/v3)
1.11 Troubleshoot BGP (Internal and External)

2. VPN Technologies
2.1 Describe MPLS operations (LSR, LDP, label switching, LSP)
2.2 Describe MPLS Layer 3 VPN
2.3 Configure and verify DMVPN (single hub)

3. Infrastructure Security
3.1 Troubleshoot device security using IOS AAA (TACACS+, RADIUS, local database)
3.2 Troubleshoot router security features
3.3 Troubleshoot control plane policing (CoPP) (Telnet, SSH, HTTP(S), SNMP, EIGRP, OSPF,
BGP)
3.4 Describe IPv6 First Hop security features (RA guard, DHCP guard, binding table, ND
inspection/snooping, source guard)

4. Infrastructure Services
4.1 Troubleshoot device management
4.2 Troubleshoot SNMP (v2c, v3)
4.3 Troubleshoot network problems using logging (local, syslog, debugs, conditional debugs,
timestamps)
4.4 Troubleshoot IPv4 and IPv6 DHCP (DHCP client, IOS DHCP server, DHCP relay, DHCP
options)
4.5 Troubleshoot network performance issues using IP SLA (jitter, tracking objects, delay,
connectivity)
4.6 Troubleshoot NetFlow (v5, v9, flexible NetFlow)
4.7 Troubleshoot network problems using Cisco DNA Center assurance (connectivity,
monitoring, device health, network health)