ENCOR 350-401
Core exam for CCNP Enterprise certification, covering enterprise network technologies.
Getting Started: ENCOR Exam Essentials
Free knowledge base
Implementing and Operating Cisco Enterprise Network Core Technologies (ENCOR) v1.2 — key terms, tricks & tips
Everything from the course in one searchable place: 394 entries. Use it to review before a practice test or look up a word you forgot.
394 results · showing first 300, refine your search
Domain Weighting
Percentage indicating the importance and number of questions from an exam topic area.
Getting Started: ENCOR Exam Essentials
Simlet
A small simulation question type within the exam, requiring configuration or troubleshooting.
Getting Started: ENCOR Exam Essentials
Pearson VUE
Global network of test centers where Cisco certification exams are administered.
Getting Started: ENCOR Exam Essentials
Network Assurance
Domain focusing on monitoring, troubleshooting, and managing network performance.
Getting Started: ENCOR Exam Essentials
Automation
Domain covering network programmability, APIs, and configuration management tools.
Getting Started: ENCOR Exam Essentials
Infrastructure
Largest domain, including routing, switching, and IP services.
Getting Started: ENCOR Exam Essentials
Understanding the ENCOR 350-401 Exam Structure
To remember the ENCOR domains: 'AI IS NASTy'. Architecture, Infrastructure, Security, Network Assurance, Automation, Virtualization.
Getting Started: ENCOR Exam Essentials
Understanding the ENCOR 350-401 Exam Structure
The exam blueprint is the definitive guide. Pay close attention to the 'Configure and Verify' keywords, as these often indicate hands-on lab-style questions or detailed configuration knowledge is required.
Getting Started: ENCOR Exam Essentials
Understanding the ENCOR 350-401 Exam Structure
Underestimating the importance of lower-weighted domains; every point counts.
Getting Started: ENCOR Exam Essentials
Understanding the ENCOR 350-401 Exam Structure
Focusing solely on theoretical knowledge without understanding practical application.
Getting Started: ENCOR Exam Essentials
Understanding the ENCOR 350-401 Exam Structure
Not reviewing the official Cisco exam blueprint for the most current information.
Getting Started: ENCOR Exam Essentials
Active Learning
Engaging with material to retrieve and apply information, not just passively receive it.
Getting Started: ENCOR Exam Essentials
Cisco Learning Network (CLN)
Official online community and resource hub for Cisco certification candidates.
Getting Started: ENCOR Exam Essentials
Cisco Press
Publisher of official study guides and reference books for Cisco certifications.
Getting Started: ENCOR Exam Essentials
Packet Tracer
Cisco's network simulation tool for practicing network design and configuration.
Getting Started: ENCOR Exam Essentials
GNS3/EVE-NG
Network emulation software for building complex, multi-vendor network topologies.
Getting Started: ENCOR Exam Essentials
DevNet Sandbox
Cisco's virtual lab environments for practicing with Cisco technologies and APIs.
Getting Started: ENCOR Exam Essentials
Study Plan
A structured schedule outlining topics, resources, and time allocation for exam preparation.
Getting Started: ENCOR Exam Essentials
Practice Exam
A simulated test taken under timed conditions to assess readiness and identify weak areas.
Getting Started: ENCOR Exam Essentials
Effective Study Strategies and Resources
To remember the study cycle: ALL PRT. Assess, Learn, Lab, Practice, Review, Test. (Lab is for hands-on, Practice is for active recall)
Getting Started: ENCOR Exam Essentials
Effective Study Strategies and Resources
The exam expects you to not just know what a technology is, but how to implement and troubleshoot it. Pay close attention to configuration commands and 'show' commands in official documentation and labs.
Getting Started: ENCOR Exam Essentials
Effective Study Strategies and Resources
Relying solely on passive learning (reading/watching) without active engagement.
Getting Started: ENCOR Exam Essentials
Effective Study Strategies and Resources
Neglecting hands-on lab practice, which is crucial for practical application.
Getting Started: ENCOR Exam Essentials
Effective Study Strategies and Resources
Not creating a structured study plan, leading to haphazard and incomplete coverage.
Getting Started: ENCOR Exam Essentials
Effective Study Strategies and Resources
Ignoring official Cisco resources in favor of unverified third-party materials.
Getting Started: ENCOR Exam Essentials
Hierarchical Design
Network structured in layers (access, distribution, core).
Enterprise Network Architecture Fundamentals
Access Layer
Connects end devices to the network.
Enterprise Network Architecture Fundamentals
Distribution Layer
Aggregates access layer, routes, applies policies.
Enterprise Network Architecture Fundamentals
Core Layer
High-speed backbone, interconnects distribution layers.
Enterprise Network Architecture Fundamentals
Scalability
Ability of network to grow and handle increased demand.
Enterprise Network Architecture Fundamentals
Redundancy
Duplication of components to prevent single points of failure.
Enterprise Network Architecture Fundamentals
Modularity
Breaking network into independent, manageable blocks.
Enterprise Network Architecture Fundamentals
Flexibility
Network's ability to adapt to changes and new requirements.
Enterprise Network Architecture Fundamentals
Enterprise Network Design Models & Principles
ACD: Access Connects Devices, Distribution Directs Data, Core Carries Critical traffic. Remember the order and function!
Enterprise Network Architecture Fundamentals
Enterprise Network Design Models & Principles
The ENCOR exam expects you to differentiate between the access, distribution, and core layers, and understand their specific functions and benefits in a hierarchical design. Memorize the key characteristics of each layer.
Enterprise Network Architecture Fundamentals
Enterprise Network Design Models & Principles
Designing a flat network without distinct layers, leading to broadcast storms and poor scalability.
Enterprise Network Architecture Fundamentals
Enterprise Network Design Models & Principles
Neglecting redundancy at critical layers, creating single points of failure.
Enterprise Network Architecture Fundamentals
Enterprise Network Design Models & Principles
Overcomplicating the core layer with policy enforcement, which should be handled at the distribution layer.
Enterprise Network Architecture Fundamentals
WLAN Controller (WLC)
Centralized device managing and configuring Access Points.
Enterprise Network Architecture Fundamentals
Access Point (AP)
Hardware device allowing wireless devices to connect to a wired network.
Enterprise Network Architecture Fundamentals
SD-WAN
Virtual WAN architecture for intelligent, policy-based traffic routing.
Enterprise Network Architecture Fundamentals
SD-Access
Cisco's intent-based networking for campus/branch, automating access.
Enterprise Network Architecture Fundamentals
Cisco DNA Center
Centralized management and automation platform for SD-Access.
Enterprise Network Architecture Fundamentals
Overlay Network
Virtual network built on top of an existing physical network.
Enterprise Network Architecture Fundamentals
Underlay Network
The physical network infrastructure that supports the overlay.
Enterprise Network Architecture Fundamentals
WLAN Deployment & SD-WAN/SD-Access Concepts
To remember SD-WAN benefits: A.C.E.S. - Agility, Cost Savings, Enhanced Performance, Security.
Enterprise Network Architecture Fundamentals
WLAN Deployment & SD-WAN/SD-Access Concepts
For the ENCOR exam, memorize the core components of SD-WAN (controller, edge devices, overlay/underlay) and SD-Access (DNA Center, fabric elements, VXLAN, LISP, TrustSec). Understand the 'why' behind these technologies: automation, agility, and improved user experience.
Enterprise Network Architecture Fundamentals
WLAN Deployment & SD-WAN/SD-Access Concepts
Confusing SD-WAN with traditional VPNs; SD-WAN is policy-driven and transport-agnostic, while VPNs are primarily for secure tunnels.
Enterprise Network Architecture Fundamentals
WLAN Deployment & SD-WAN/SD-Access Concepts
Underestimating the importance of the underlay network in SD-Access; a robust underlay is essential for the overlay to function correctly.
Enterprise Network Architecture Fundamentals
WLAN Deployment & SD-WAN/SD-Access Concepts
Failing to properly segment guest Wi-Fi traffic, leading to potential security breaches.
Enterprise Network Architecture Fundamentals
On-premises
IT infrastructure hosted and managed within an organization's own facilities.
Enterprise Network Architecture Fundamentals
Cloud Computing
Delivery of on-demand computing services over the internet from a third-party provider.
Enterprise Network Architecture Fundamentals
Hybrid Cloud
Combines on-premises infrastructure with public cloud resources, connected securely.
Enterprise Network Architecture Fundamentals
Edge Computing
Processing data closer to the source, reducing latency and bandwidth usage.
Enterprise Network Architecture Fundamentals
IoT
Network of physical objects embedded with sensors for data exchange over the internet.
Enterprise Network Architecture Fundamentals
CapEx
Capital Expenditure; upfront investment in physical assets.
Enterprise Network Architecture Fundamentals
OpEx
Operational Expenditure; ongoing costs for services or resources.
Enterprise Network Architecture Fundamentals
Cloud, On-Prem, Hybrid, Edge, & IoT Integration
To remember the deployment models, think 'C.O.H.E.I.': Cloud, On-Prem, Hybrid, Edge, IoT. It sounds like 'cohesive,' which is what you want your network to be!
Enterprise Network Architecture Fundamentals
Cloud, On-Prem, Hybrid, Edge, & IoT Integration
The ENCOR exam often tests your understanding of the *characteristics* and *use cases* for each deployment model. Look for keywords like 'scalability,' 'control,' 'latency,' and 'data sovereignty' to distinguish between them. Memorize that hybrid cloud connects on-prem and public cloud.
Enterprise Network Architecture Fundamentals
Cloud, On-Prem, Hybrid, Edge, & IoT Integration
Confusing hybrid cloud with multi-cloud: Hybrid is on-prem + public; multi-cloud is using multiple public cloud providers.
Enterprise Network Architecture Fundamentals
Cloud, On-Prem, Hybrid, Edge, & IoT Integration
Underestimating the complexity of managing hybrid environments, especially regarding network integration and security policy consistency.
Enterprise Network Architecture Fundamentals
Cloud, On-Prem, Hybrid, Edge, & IoT Integration
Assuming all IoT data must go to the cloud; edge computing is often critical for real-time IoT applications.
Enterprise Network Architecture Fundamentals
Network Security
Measures to protect network resources from unauthorized access or misuse.
Enterprise Network Architecture Fundamentals
Network Segmentation
Dividing a network into smaller, isolated segments for security and performance.
Enterprise Network Architecture Fundamentals
Network Virtualization
Abstracting network resources from physical hardware into software-based entities.
Enterprise Network Architecture Fundamentals
Microsegmentation
Granular segmentation down to individual workloads or applications.
Enterprise Network Architecture Fundamentals
Software-Defined Networking (SDN)
Separates control and data planes, enabling centralized network management.
Enterprise Network Architecture Fundamentals
Zero Trust
Security model where no user, device, or application is inherently trusted.
Enterprise Network Architecture Fundamentals
Network Assurance, Security, Segmentation & Virtualization
ASSURE SECURE SEGMENTS VIRTUALLY! (Assurance, Security, Segmentation, Virtualization)
Enterprise Network Architecture Fundamentals
Network Assurance, Security, Segmentation & Virtualization
The ENCOR exam expects you to distinguish between these concepts and understand their role in enterprise network design. Pay close attention to how SDN and virtualization enable advanced security and assurance capabilities.
Enterprise Network Architecture Fundamentals
Network Assurance, Security, Segmentation & Virtualization
Confusing network monitoring (reactive) with network assurance (proactive and predictive).
Enterprise Network Architecture Fundamentals
Network Assurance, Security, Segmentation & Virtualization
Believing that segmentation alone provides complete security; it must be combined with strong security policies.
Enterprise Network Architecture Fundamentals
Network Assurance, Security, Segmentation & Virtualization
Thinking virtualization is only about servers; it applies extensively to network functions too.
Enterprise Network Architecture Fundamentals
Device Virtualization
Logically partitioning a single physical network device into multiple independent virtual devices.
Network Virtualization Techniques
Data Path Virtualization
Separating data forwarding from the physical network infrastructure using logical overlays.
Network Virtualization Techniques
Virtual Device Context (VDC)
A feature on Cisco Nexus switches to create multiple logical switches from one physical device.
Network Virtualization Techniques
Virtual Routing and Forwarding (VRF)
Multiple independent routing tables within a single router, providing data plane separation.
Network Virtualization Techniques
VRF-Lite
A simpler implementation of VRF, typically without MPLS, for local network segmentation.
Network Virtualization Techniques
VXLAN
Virtual Extensible LAN; an encapsulation protocol for creating logical Layer 2 networks over Layer 3.
Network Virtualization Techniques
Device and Data Path Virtualization
To remember Device vs. Data Path: 'Devices are like separate apartments in one building (VDC), Data Paths are like separate roads on one highway (VXLAN).'
Network Virtualization Techniques
Device and Data Path Virtualization
The exam often tests your understanding of specific Cisco virtualization technologies. Be prepared to distinguish between VDCs and VRF-Lite, and know the purpose of VXLAN in data center environments.
Network Virtualization Techniques
Device and Data Path Virtualization
Confusing device virtualization (e.g., VDC) with data path virtualization (e.g., VXLAN); they serve different but complementary purposes.
Network Virtualization Techniques
Device and Data Path Virtualization
Assuming VRF-Lite provides full control plane isolation like a VDC; VRF-Lite primarily isolates routing tables.
Network Virtualization Techniques
Device and Data Path Virtualization
Underestimating the importance of the underlay network's stability for overlay network performance.
Network Virtualization Techniques
Control Plane
Makes decisions about where network traffic goes.
Network Virtualization Techniques
Data Plane
Forwards network packets based on control plane decisions.
Network Virtualization Techniques
Abstraction
Hiding complex details of underlying systems.
Network Virtualization Techniques
Multi-tenancy
Multiple independent users share a single system.
Network Virtualization Techniques
Network Function Virtualization (NFV)
Virtualizing network services like firewalls.
Network Virtualization Techniques
Network Virtualization Concepts & Technologies
To remember the benefits of virtualization, think 'F.A.S.T.E.R.': Flexibility, Agility, Security, Time-saving, Efficiency, Reduced costs.
Network Virtualization Techniques
Network Virtualization Concepts & Technologies
The ENCOR exam frequently tests the core definitions and benefits of network virtualization. Pay close attention to the distinction between control and data planes, and how virtualization impacts each. Keywords like 'abstraction,' 'agility,' 'segmentation,' and 'resource pooling' are often associated with correct answers.
Network Virtualization Techniques
Network Virtualization Concepts & Technologies
Confusing network virtualization with server virtualization; while related, they focus on different resource types.
Network Virtualization Techniques
Network Virtualization Concepts & Technologies
Believing virtualization completely eliminates physical hardware; it abstracts, but still relies on underlying physical infrastructure.
Network Virtualization Techniques
Network Virtualization Concepts & Technologies
Underestimating the security implications of improper segmentation in virtualized environments.
Network Virtualization Techniques
Virtual Switch
Software-based switch connecting VMs and physical network.
Network Virtualization Techniques
Hypervisor
Software that creates and runs virtual machines.
Network Virtualization Techniques
Standard Virtual Switch
Basic virtual switch configured per host.
Network Virtualization Techniques
Distributed Virtual Switch
Centralized virtual switch spanning multiple hosts.
Network Virtualization Techniques
Virtual Router
Software-based router providing Layer 3 functions as a VM.
Network Virtualization Techniques
vMotion
VMware technology for live migration of running VMs.
Network Virtualization Techniques
pNIC
Physical Network Interface Card on a host server.
Network Virtualization Techniques
Virtual Port
Software port on a virtual switch to which a VM connects.
Network Virtualization Techniques
Virtual Switching and Routing Implementations
Think of a 'Virtual Switch' as a 'Software Switch' – S for Software, S for Switch. It's just like a physical switch, but it lives inside your computer!
Network Virtualization Techniques
Virtual Switching and Routing Implementations
For the ENCOR exam, remember that a distributed virtual switch centralizes network configuration and policies across multiple hosts, simplifying management and enabling advanced features like vMotion, unlike standard virtual switches which are host-specific.
Network Virtualization Techniques
Virtual Switching and Routing Implementations
Confusing the capabilities of a standard virtual switch with a distributed virtual switch. Distributed switches offer centralized management and advanced features across multiple hosts.
Network Virtualization Techniques
Virtual Switching and Routing Implementations
Underestimating the importance of VLAN planning between physical and virtual networks. Consistent VLAN tagging is crucial for seamless connectivity.
Network Virtualization Techniques
Virtual Switching and Routing Implementations
Forgetting that virtual routers are often deployed as virtual appliances (VMs) and consume host resources, just like any other VM.
Network Virtualization Techniques
Virtual Firewall
Software-based security appliance protecting virtual networks.
Network Virtualization Techniques
Virtual Load Balancer
Software distributing traffic across servers for performance.
Network Virtualization Techniques
Service Chaining
Directing traffic through a sequence of network services.
Network Virtualization Techniques
VNF (Virtual Network Function)
Software implementation of a network appliance function.
Network Virtualization Techniques
SDN (Software-Defined Networking)
Network control decoupled from forwarding, managed centrally.
Network Virtualization Techniques
Virtual Firewalls, Load Balancers & Services
To remember the benefits of virtual services: A.S.C.A.L.E. - Agility, Scalability, Cost-effective, Automation, Lower footprint, Elasticity.
Network Virtualization Techniques
Virtual Firewalls, Load Balancers & Services
For the ENCOR exam, memorize that NFV allows network functions (like firewalls) to run as software on commodity hardware, and SDN provides the centralized control plane for managing these functions. Look for questions on benefits like agility, scalability, and cost reduction.
Network Virtualization Techniques
Virtual Firewalls, Load Balancers & Services
Confusing virtualized services with simply moving physical appliances to a VM without leveraging virtualization benefits like orchestration.
Network Virtualization Techniques
Virtual Firewalls, Load Balancers & Services
Underestimating the importance of proper resource allocation (CPU, RAM, network I/O) for virtualized services.
Network Virtualization Techniques
Virtual Firewalls, Load Balancers & Services
Neglecting to integrate virtual service management with overall network orchestration and automation tools.
Network Virtualization Techniques
VLAN
Logical segmentation of a physical network into separate broadcast domains.
Core Infrastructure Services
802.1Q
IEEE standard for VLAN tagging on trunk links.
Core Infrastructure Services
STP
Protocol preventing Layer 2 loops by blocking redundant paths.
Core Infrastructure Services
Root Bridge
The central switch in an STP topology, elected by lowest BID.
Core Infrastructure Services
NTP
Protocol for synchronizing device clocks across a network.
Core Infrastructure Services
DNS
Translates human-readable domain names into IP addresses.
Core Infrastructure Services
DHCP
Dynamically assigns IP addresses and network configuration to clients.
Core Infrastructure Services
DORA
Four-step process of DHCP: Discover, Offer, Request, Acknowledge.
Core Infrastructure Services
Layer 2 Technologies & IP Services
For DHCP's DORA process: 'D'iscover 'O'ffers 'R'eally 'A'lluring IP addresses!
Core Infrastructure Services
Layer 2 Technologies & IP Services
Memorize the default STP port states (Blocking, Listening, Learning, Forwarding, Disabled) and the faster RSTP states (Discarding, Learning, Forwarding). Also, know the DORA process for DHCP. The exam often asks about the purpose and order of these steps.
Core Infrastructure Services
Layer 2 Technologies & IP Services
Forgetting to configure trunk links on all inter-switch connections for VLANs, leading to communication issues.
Core Infrastructure Services
Layer 2 Technologies & IP Services
Not changing the native VLAN on trunk ports from the default VLAN 1, creating a potential security vulnerability.
Core Infrastructure Services
Layer 2 Technologies & IP Services
Improperly configuring STP priorities or port costs, leading to an unintended root bridge or inefficient path selection.
Core Infrastructure Services
Layer 2 Technologies & IP Services
Having multiple active DHCP servers on the same subnet without proper configuration, causing IP address conflicts.
Core Infrastructure Services
Autonomous System (AS)
A collection of IP networks and routers under a single administration.
Core Infrastructure Services
Interior Gateway Protocol (IGP)
Routing protocol operating within an Autonomous System (e.g., OSPF, EIGRP).
Core Infrastructure Services
Exterior Gateway Protocol (EGP)
Routing protocol operating between Autonomous Systems (e.g., BGP).
Core Infrastructure Services
Distance Vector
Routing algorithm where routers advertise distances and directions to neighbors.
Core Infrastructure Services
Link-State
Routing algorithm where routers build a full network topology map.
Core Infrastructure Services
First Hop Redundancy Protocol (FHRP)
Provides default gateway redundancy for hosts on a LAN.
Core Infrastructure Services
HSRP
Cisco proprietary FHRP for default gateway redundancy and failover.
Core Infrastructure Services
VRRP
Open-standard FHRP for default gateway redundancy.
Core Infrastructure Services
GLBP
Cisco proprietary FHRP providing default gateway redundancy and load balancing.
Core Infrastructure Services
Layer 3 Routing Protocols & FHRP
For FHRPs, remember 'H-V-G': HSRP for Hot Standby, VRRP for Vendor-agnostic Redundancy, GLBP for Gateway Load Balancing.
Core Infrastructure Services
Layer 3 Routing Protocols & FHRP
The ENCOR exam expects you to differentiate between OSPF and EIGRP (link-state vs. distance-vector principles, metrics, convergence). For FHRPs, know the purpose of HSRP, VRRP, and GLBP, and their key operational differences (e.g., Cisco proprietary vs. open standard, load balancing capability).
Core Infrastructure Services
Layer 3 Routing Protocols & FHRP
Confusing the purpose of routing protocols (path discovery) with FHRPs (default gateway redundancy).
Core Infrastructure Services
Layer 3 Routing Protocols & FHRP
Assuming all routing protocols use the same metric or algorithm; OSPF uses cost, EIGRP uses composite metric.
Core Infrastructure Services
Layer 3 Routing Protocols & FHRP
Not understanding that FHRPs operate at Layer 2 (virtual MAC) and Layer 3 (virtual IP) for local subnet redundancy, not end-to-end routing.
Core Infrastructure Services
Wireless LAN Controller (WLC)
Centralized management for Access Points.
Core Infrastructure Services
CAPWAP
Protocol for AP-WLC communication.
Core Infrastructure Services
FlexConnect Mode
AP mode for local switching when WLC is down.
Core Infrastructure Services
Quality of Service (QoS)
Prioritizes network traffic to ensure performance.
Core Infrastructure Services
DSCP
IP header field for traffic classification.
Core Infrastructure Services
Classification
Identifying different types of network traffic.
Core Infrastructure Services
Queuing
Buffering and prioritizing packets for transmission.
Core Infrastructure Services
Wireless Infrastructure & QoS Mechanisms
Wireless APs are like 'Worms' (WLC, Modes, Roaming, Security) and QoS is like 'Quick' (Classification, Queuing, Policing, Marking).
Core Infrastructure Services
Wireless Infrastructure & QoS Mechanisms
The exam expects you to differentiate between centralized and distributed wireless architectures, understand various AP modes (Local, FlexConnect), and recognize key QoS mechanisms like classification, marking (DSCP, CoS), policing, shaping, and queuing (LLQ, WFQ). Look for scenarios involving traffic prioritization.
Core Infrastructure Services
Wireless Infrastructure & QoS Mechanisms
Confusing AP modes: Remember Local mode sends all traffic to the WLC, while FlexConnect can switch locally.
Core Infrastructure Services
Wireless Infrastructure & QoS Mechanisms
Ignoring QoS for critical applications: Assuming network bandwidth alone will solve performance issues for VoIP/video.
Core Infrastructure Services
Wireless Infrastructure & QoS Mechanisms
Applying QoS only at one point: QoS needs to be consistently applied end-to-end across the network path for effectiveness.
Core Infrastructure Services
Multicast
One-to-many communication where a single stream is sent to a group.
Core Infrastructure Services
IGMP
Internet Group Management Protocol, used by hosts to join/leave multicast groups.
Core Infrastructure Services
PIM
Protocol Independent Multicast, used by routers to build multicast routing tables.
Core Infrastructure Services
NAT
Network Address Translation, remapping IP addresses in packet headers.
Core Infrastructure Services
PAT
Port Address Translation (NAT Overload), many private IPs share one public IP using ports.
Core Infrastructure Services
PTP
Precision Time Protocol (IEEE 1588), for highly accurate clock synchronization.
Core Infrastructure Services
SNMP
Simple Network Management Protocol, for managing and monitoring network devices.
Core Infrastructure Services
NetFlow
Protocol for collecting IP traffic flow information for analysis.
Core Infrastructure Services
Multicast, NAT, PTP, and Network Monitoring
For NAT types: 'S'ingle 'D'evice, 'D'iverse 'P'ool, 'P'orts 'A'll 'T'ogether. (Static, Dynamic, PAT)
Core Infrastructure Services
Multicast, NAT, PTP, and Network Monitoring
The exam often tests the differences between Static NAT, Dynamic NAT, and PAT. Remember that PAT is also known as NAT Overload and uses port numbers to distinguish between internal hosts sharing a single public IP. For multicast, know the roles of IGMP (hosts) and PIM (routers).
Core Infrastructure Services
Multicast, NAT, PTP, and Network Monitoring
Confusing multicast with broadcast: Multicast sends to a specific group of interested receivers, while broadcast sends to everyone on a segment.
Core Infrastructure Services
Multicast, NAT, PTP, and Network Monitoring
Misunderstanding PAT vs. Static/Dynamic NAT: PAT uses port numbers to allow multiple internal hosts to share one public IP, while Static/Dynamic NAT typically maps entire IP addresses.
Core Infrastructure Services
Multicast, NAT, PTP, and Network Monitoring
Underestimating the importance of precise time: PTP is critical for applications where even microsecond discrepancies can cause major issues, unlike NTP which is sufficient for general synchronization.
Core Infrastructure Services
SNMP Agent
Software on a network device that collects and stores management information.
Advanced Infrastructure Management
MIB
Management Information Base; a hierarchical database of network device parameters.
Advanced Infrastructure Management
Syslog Server
A central host that receives and stores log messages from network devices.
Advanced Infrastructure Management
NetFlow Collector
A server that receives and analyzes flow records exported by network devices.
Advanced Infrastructure Management
IP SLA Operation
A configured test that generates traffic to measure network performance metrics.
Advanced Infrastructure Management
Community String
A password-like string used for authentication in SNMPv1 and SNMPv2c.
Advanced Infrastructure Management
Flow Record
A summary of network traffic characteristics, including source/destination IP/port.
Advanced Infrastructure Management
Jitter
Variation in the delay of received packets, critical for real-time applications.
Advanced Infrastructure Management
SNMP, Syslog, NetFlow, and IP SLA Configuration
SNMP: 'See Network's Many Parts'. Syslog: 'See Your Logs'. NetFlow: 'Network's Every Traffic Flow'. IP SLA: 'I Promise Service Level Agreement'.
Advanced Infrastructure Management
SNMP, Syslog, NetFlow, and IP SLA Configuration
For the ENCOR exam, memorize the default UDP ports for SNMP (161/162) and Syslog (514). Understand the security differences between SNMPv2c and SNMPv3. Be able to distinguish the primary purpose of each protocol: SNMP for device state, Syslog for events, NetFlow for traffic, and IP SLA for performance measurement.
Advanced Infrastructure Management
SNMP, Syslog, NetFlow, and IP SLA Configuration
Using SNMPv1/v2c in production without strong access controls, risking security breaches due to clear-text community strings.
Advanced Infrastructure Management
SNMP, Syslog, NetFlow, and IP SLA Configuration
Not centralizing Syslog messages, making it difficult to correlate events across multiple devices during an outage.
Advanced Infrastructure Management
SNMP, Syslog, NetFlow, and IP SLA Configuration
Enabling NetFlow on too many interfaces without adequate collector capacity, leading to dropped flow records or collector overload.
Advanced Infrastructure Management
CDP
Cisco Discovery Protocol; proprietary Layer 2 protocol for neighbor discovery.
Advanced Infrastructure Management
LLDP
Link Layer Discovery Protocol; open-standard Layer 2 protocol for neighbor discovery.
Advanced Infrastructure Management
TLV
Type-Length-Value; data elements used by LLDP to carry specific information.
Advanced Infrastructure Management
EEM
Embedded Event Manager; Cisco IOS feature for event detection and automated response.
Advanced Infrastructure Management
Applet
A small program or script within EEM that defines an event and an action.
Advanced Infrastructure Management
Event
A trigger condition that initiates an EEM applet's action.
Advanced Infrastructure Management
Action
The command or set of commands executed by an EEM applet in response to an event.
Advanced Infrastructure Management
Proprietary
Owned and controlled by a specific vendor, like Cisco for CDP.
Advanced Infrastructure Management
CDP, LLDP, EEM for Network Automation
To remember EEM's core: 'EEM' is for 'Event, Execute, Manage'. An Event happens, you Execute an action, and thus Manage your network automatically!
Advanced Infrastructure Management
CDP, LLDP, EEM for Network Automation
The ENCOR exam expects you to differentiate between CDP (Cisco proprietary) and LLDP (vendor-neutral standard). Memorize the global and interface-level commands for enabling/disabling both, and how to verify neighbors. For EEM, understand its purpose, the event-action model, and basic applet configuration syntax.
Advanced Infrastructure Management
CDP, LLDP, EEM for Network Automation
Forgetting to disable CDP/LLDP on untrusted interfaces, creating a security vulnerability.
Advanced Infrastructure Management
CDP, LLDP, EEM for Network Automation
Not testing EEM applets in a lab, leading to unintended network disruptions in production.
Advanced Infrastructure Management
CDP, LLDP, EEM for Network Automation
Confusing CDP (Cisco-only) with LLDP (multi-vendor) on the exam or in real-world scenarios.
Advanced Infrastructure Management
SPAN
Switched Port Analyzer; mirrors traffic locally on a single switch.
Advanced Infrastructure Management
RSPAN
Remote SPAN; mirrors traffic across Layer 2 switches using a dedicated VLAN.
Advanced Infrastructure Management
ERSPAN
Encapsulated Remote SPAN; mirrors traffic across Layer 3 networks via GRE tunnels.
Advanced Infrastructure Management
Source Port
The interface(s) from which traffic is copied.
Advanced Infrastructure Management
Destination Port
The interface to which mirrored traffic is sent for analysis.
Advanced Infrastructure Management
RSPAN VLAN
A dedicated VLAN used to carry mirrored traffic between RSPAN switches.
Advanced Infrastructure Management
GRE Tunnel
Generic Routing Encapsulation; used by ERSPAN to encapsulate traffic over IP.
Advanced Infrastructure Management
Monitor Session
A configuration instance defining SPAN/RSPAN/ERSPAN parameters.
Advanced Infrastructure Management
SPAN, RSPAN, ERSPAN for Traffic Monitoring
Remember 'S-R-E' for 'Same Switch', 'Remote Layer 2', 'Encapsulated Layer 3'.
Advanced Infrastructure Management
SPAN, RSPAN, ERSPAN for Traffic Monitoring
The ENCOR exam expects you to differentiate between SPAN, RSPAN, and ERSPAN based on their operational scope (local, Layer 2, Layer 3) and the encapsulation methods used (none, VLAN, GRE). Pay attention to keywords like 'same switch', 'multiple switches Layer 2', and 'across IP network'.
Advanced Infrastructure Management
SPAN, RSPAN, ERSPAN for Traffic Monitoring
Configuring a destination port as a source port, which can lead to unexpected behavior or traffic loops.
Advanced Infrastructure Management
SPAN, RSPAN, ERSPAN for Traffic Monitoring
Not allocating sufficient bandwidth on the destination port, causing dropped packets in the mirrored traffic.
Advanced Infrastructure Management
SPAN, RSPAN, ERSPAN for Traffic Monitoring
Forgetting to configure the RSPAN VLAN on all intermediate switches or not allowing it on trunks for RSPAN sessions.
Advanced Infrastructure Management
Policing
Immediately drops or re-marks traffic exceeding a rate.
Advanced Infrastructure Management
Shaping
Buffers and delays excess traffic for smoother flow.
Advanced Infrastructure Management
Congestion Management
Determines packet transmission order during congestion.
Advanced Infrastructure Management
Congestion Avoidance
Proactively drops packets before queue full.
Advanced Infrastructure Management
IP Multicast
One-to-many communication to a group of receivers.
Advanced Infrastructure Management
PIM Sparse Mode
Multicast routing protocol using a Rendezvous Point.
Advanced Infrastructure Management
Rendezvous Point (RP)
Central meeting point for PIM-SM senders/receivers.
Advanced Infrastructure Management
Advanced QoS and Multicast Implementations
Police DROP, Shapers WAIT. Remember 'P' for Police and P for Punish (drop). 'S' for Shapers and S for Smooth (wait and send later).
Advanced Infrastructure Management
Advanced QoS and Multicast Implementations
The ENCOR exam frequently tests the distinction between policing and shaping. Remember that policing drops excess traffic, while shaping buffers and delays it. Also, be prepared to identify the role of IGMP and PIM in multicast, especially PIM-SM's use of a Rendezvous Point.
Advanced Infrastructure Management
Advanced QoS and Multicast Implementations
Confusing policing with shaping: Policing drops, shaping buffers.
Advanced Infrastructure Management
Advanced QoS and Multicast Implementations
Incorrectly applying QoS tools: LLQ for bulk data, or WRED for real-time traffic.
Advanced Infrastructure Management
Advanced QoS and Multicast Implementations
Misunderstanding the role of the RP in PIM-SM: It's a central point, not a forwarding path for all traffic.
Advanced Infrastructure Management
IP SLA
Cisco feature for active network performance monitoring.
Network Assurance and Monitoring
Syslog
Standard for sending system log/event messages to a server.
Network Assurance and Monitoring
SNMP Trap
Unsolicited message sent by an SNMP agent to a manager.
Network Assurance and Monitoring
Monitoring Tools: NetFlow, IP SLA, SNMP, Syslog
Imagine a 'NET-FLOW' of water showing you exactly where all the water is going. 'IP SLA' is like a 'SLApping' test, actively hitting the network to see how fast it responds. 'SNMP' is a 'SNiMP' (Simple Network Management Protocol) that asks devices for their status. 'SYSLOG' is a 'SYS-tem LOG' book, recording everything that happens.
Network Assurance and Monitoring
Monitoring Tools: NetFlow, IP SLA, SNMP, Syslog
The ENCOR exam expects you to differentiate between passive (NetFlow, Syslog) and active (IP SLA) monitoring tools and understand their specific use cases for troubleshooting and assurance.
Network Assurance and Monitoring
Monitoring Tools: NetFlow, IP SLA, SNMP, Syslog
Confusing NetFlow (passive traffic analysis) with IP SLA (active performance testing).
Network Assurance and Monitoring
Monitoring Tools: NetFlow, IP SLA, SNMP, Syslog
Underestimating the security implications of SNMP if not properly secured.
Network Assurance and Monitoring
Monitoring Tools: NetFlow, IP SLA, SNMP, Syslog
Not configuring appropriate logging levels for Syslog, leading to too much or too little data.
Network Assurance and Monitoring
Top-Down Troubleshooting
Starts at the application layer, moving down the OSI model to isolate issues.
Network Assurance and Monitoring
Bottom-Up Troubleshooting
Starts at the physical layer, moving up the OSI model to isolate issues.
Network Assurance and Monitoring
Divide and Conquer
Splits the network into segments to pinpoint the problem source.
Network Assurance and Monitoring
Cisco EEM
Embedded Event Manager; a framework for automated event detection and action on Cisco devices.
Network Assurance and Monitoring
Event Detector
EEM component monitoring for specific events like syslog, interface status.
Network Assurance and Monitoring
EEM Policy
A script (Tcl or applet) defining actions to take when an event is detected.
Network Assurance and Monitoring
Automated Remediation
Using tools like EEM to automatically fix network issues without human intervention.
Network Assurance and Monitoring
MTTR
Mean Time To Repair; a metric for the average time to restore service after a failure.
Network Assurance and Monitoring
Troubleshooting Methodologies & EEM for Assurance
For troubleshooting steps, remember 'DGAHTD': Define, Gather, Analyze, Hypothesize, Test, Document. It's like 'Dig A Hole To Dig' for problem-solving!
Network Assurance and Monitoring
Troubleshooting Methodologies & EEM for Assurance
The ENCOR exam expects you to understand the general steps of troubleshooting methodologies (e.g., define, gather, analyze, hypothesize, test, document) and the core components and capabilities of Cisco EEM, including event detectors and actions. Keywords: EEM applet, event detector, action, Tcl.
Network Assurance and Monitoring
Troubleshooting Methodologies & EEM for Assurance
Jumping to conclusions and making changes without a clear hypothesis or understanding of the problem.
Network Assurance and Monitoring
Troubleshooting Methodologies & EEM for Assurance
Not documenting troubleshooting steps and findings, leading to repeated efforts or missed details.
Network Assurance and Monitoring
Troubleshooting Methodologies & EEM for Assurance
Overlooking the simple things first (e.g., cabling, power) when starting a troubleshooting process.
Network Assurance and Monitoring
SPAN, RSPAN, ERSPAN for Traffic Analysis
Think of SPAN as a 'Spotlight' on one switch. RSPAN is a 'Road' (VLAN) connecting switches. ERSPAN is an 'Expressway' (GRE tunnel) across the whole network.
Network Assurance and Monitoring
SPAN, RSPAN, ERSPAN for Traffic Analysis
For the ENCOR exam, memorize the scope of each (local, Layer 2, Layer 3) and their transport mechanisms (direct, RSPAN VLAN, GRE). Keywords like 'same switch', 'RSPAN VLAN', or 'routed network' are key identifiers.
Network Assurance and Monitoring
SPAN, RSPAN, ERSPAN for Traffic Analysis
Using a destination port for normal network traffic, which can cause performance issues or incorrect analysis.
Network Assurance and Monitoring
SPAN, RSPAN, ERSPAN for Traffic Analysis
Forgetting to configure the RSPAN VLAN consistently across all switches involved in an RSPAN session.
Network Assurance and Monitoring
SPAN, RSPAN, ERSPAN for Traffic Analysis
Not considering the performance impact of mirroring a large volume of traffic, especially with ERSPAN over a WAN link.
Network Assurance and Monitoring
Cisco DNA Center (DNAC)
Network management and automation platform for intent-based networking.
Network Assurance and Monitoring
Assurance
Proactive monitoring and analysis of network health and performance.
Network Assurance and Monitoring
Telemetry
Data collected from network devices for analysis and insights.
Network Assurance and Monitoring
Wired Assurance
Monitoring and troubleshooting for physical network infrastructure.
Network Assurance and Monitoring
Wireless Assurance
Monitoring and troubleshooting for Wi-Fi client and AP performance.
Network Assurance and Monitoring
AI/ML
Artificial Intelligence/Machine Learning used for intelligent network analysis.
Network Assurance and Monitoring
Root Cause Analysis
Process of identifying the underlying reason for a problem.
Network Assurance and Monitoring
Client 360 View
Detailed, comprehensive view of an individual network client's experience.
Network Assurance and Monitoring
Cisco DNA Center & Wireless Assurance Capabilities
Remember 'DNAC ASSURES' your network: **D**ata, **N**etwork **A**nalytics, **C**lient **A**ssurance, **S**ingle pane, **S**elf-healing, **U**ser experience, **R**oot cause, **E**nd-to-end, **S**mart (AI/ML).
Network Assurance and Monitoring
Cisco DNA Center & Wireless Assurance Capabilities
The ENCOR exam expects you to know that Cisco DNA Center is central to Cisco's intent-based networking strategy, providing assurance through telemetry, analytics, and automation, especially for wired and wireless networks. Keywords to spot: 'assurance', 'AI/ML', 'proactive monitoring', 'single pane of glass'.
Network Assurance and Monitoring
Cisco DNA Center & Wireless Assurance Capabilities
Confusing DNA Center with just a monitoring tool; it's also an automation and analytics platform.
Network Assurance and Monitoring
Cisco DNA Center & Wireless Assurance Capabilities
Underestimating the importance of AI/ML in DNA Center's assurance capabilities.
Network Assurance and Monitoring
Cisco DNA Center & Wireless Assurance Capabilities
Not recognizing that DNA Center provides both wired and wireless assurance, not just one or the other.
Network Assurance and Monitoring
Authentication
Verifying the identity of a user or device.
Network Device and Access Security
Authorization
Determining what an authenticated user is permitted to do.
Network Device and Access Security
Accounting
Tracking user activities and resource consumption.
Network Device and Access Security
SSH
Secure Shell, an encrypted network protocol for secure remote access.
Network Device and Access Security
TACACS+
Terminal Access Controller Access-Control System Plus, a centralized authentication protocol.
Network Device and Access Security
RADIUS
Remote Authentication Dial-In User Service, another centralized authentication protocol.
Network Device and Access Security
Role-Based Access Control (RBAC)
Assigning permissions based on a user's role within an organization.
Network Device and Access Security
Device Access Control & Infrastructure Security
AAA: Authentication, Authorization, Accounting. Remember these three 'A's for securing network access!
Network Device and Access Security
Device Access Control & Infrastructure Security
The ENCOR exam expects you to differentiate between TACACS+ and RADIUS, especially their port numbers and what they encrypt. TACACS+ (TCP 49) encrypts the entire packet, while RADIUS (UDP 1812/1813) encrypts only the password.
Network Device and Access Security
Device Access Control & Infrastructure Security
Using default passwords or weak credentials on network devices.
Network Device and Access Security
Device Access Control & Infrastructure Security
Enabling unencrypted management protocols like Telnet or HTTP.
Network Device and Access Security
Device Access Control & Infrastructure Security
Granting excessive privileges to users beyond what their role requires.
Network Device and Access Security
REST API
A set of architectural principles for designing networked applications.
Network Device and Access Security
OAuth 2.0
An authorization framework allowing third-party apps to access user data without credentials.
Network Device and Access Security
WPA2
Wi-Fi Protected Access II, a robust security protocol for wireless networks.
Network Device and Access Security
802.1X
An IEEE standard for port-based network access control, often used with EAP.
Network Device and Access Security
EAP
Extensible Authentication Protocol, a framework for authentication methods.
Network Device and Access Security
Rogue AP
An unauthorized access point installed on a network, posing a security risk.
Network Device and Access Security
WIPS
Wireless Intrusion Prevention System, detects and prevents wireless attacks.
Network Device and Access Security
REST API Security & Wireless Security
For REST API security, remember 'A.A.T.I.R.L.': Authentication, Authorization, TLS, Input validation, Rate limiting, Logging.
Network Device and Access Security
REST API Security & Wireless Security
The exam expects you to differentiate between WPA2 and WPA3 features, especially SAE and OWE. Also, know the components and flow of 802.1X/EAP authentication (supplicant, authenticator, authentication server).
Network Device and Access Security
REST API Security & Wireless Security
Using HTTP instead of HTTPS for REST API communication, exposing credentials and data.
Network Device and Access Security
REST API Security & Wireless Security
Relying on WEP or WPA for wireless security; these are outdated and insecure.
Network Device and Access Security
REST API Security & Wireless Security
Not segmenting guest Wi-Fi traffic from corporate network traffic, creating a security risk.
Network Device and Access Security
NAC
Network Access Control; restricts network access based on policy.
Network Device and Access Security
Supplicant
Client device requesting network access in 802.1X.
Network Device and Access Security
Authenticator
Network device enforcing 802.1X access control.
Network Device and Access Security
Authentication Server
Server (e.g., RADIUS) that validates user/device credentials.
Network Device and Access Security
IPS
Intrusion Prevention System; detects and blocks malicious activity.
Network Device and Access Security
DMZ
Demilitarized Zone; a network segment for public-facing services.
Network Device and Access Security
Network Access Control (NAC) & Threat Defense
To remember 802.1X components: 'S.A.S.' - Supplicant, Authenticator, Server. They work together to secure access!
Network Device and Access Security
Network Access Control (NAC) & Threat Defense
The ENCOR exam expects you to differentiate between the components of 802.1X (Supplicant, Authenticator, Authentication Server) and understand their roles. Also, be ready to identify common threat defense technologies like firewalls and IPS, and recognize the purpose of security zones.
Network Device and Access Security
Network Access Control (NAC) & Threat Defense
Confusing the roles of the Authenticator and Authentication Server in 802.1X (the Authenticator is the switch/AP, the Server is the RADIUS/ISE).
Network Device and Access Security
Network Access Control (NAC) & Threat Defense
Underestimating the importance of post-admission control in NAC; it's not just about initial access.
Network Device and Access Security
Network Access Control (NAC) & Threat Defense
Believing that a firewall alone is sufficient for comprehensive threat defense without IPS or advanced malware protection.
Network Device and Access Security
Management Plane
Used for device configuration, monitoring, and access.
Network Device and Access Security
CoPP
Control Plane Policing; protects the device CPU.
Network Device and Access Security
DPoP
Data Plane Policing; limits user traffic rates.
Network Device and Access Security
MPoP
Management Plane Policing; protects management access.
Network Device and Access Security