- Exam Snapshot: The Numbers You Must Know
- Domain Breakdown at a Glance
- Infrastructure Core: Routing, Switching, WAN
- Security Core: AAA, ACLs, CoPP, VPN
- Automation, AI, and Catalyst Center
- What Changed in Blueprint v1.2
- Registration, Format, and Retake Logistics
- Certification Lifecycle and Renewal
- Last-Mile Review Schedule
- FAQ
- ENCOR (350-401) is 120 minutes, costs US$400 plus tax, and is delivered via Pearson VUE or OnVUE.
- Infrastructure (30%) and Security (20%) together make up half the blueprint - prioritize them.
- Blueprint v1.2 drops wireless objectives and adds Catalyst Center AI workflows under Network Assurance.
- Passing earns Cisco Certified Specialist - Enterprise Core and the core credit for CCNP Enterprise.
Exam Snapshot: The Numbers You Must Know
Before you touch a single practice question, memorize the mechanics. Examiners occasionally reference exam logistics in scenario framing, and you'll need this to plan your own testing day. ENCOR (350-401) is a closed-book, computer-based exam delivered either at a Pearson VUE test center or through OnVUE online proctoring. It runs 120 minutes and is offered in English and Japanese. The question format mixes multiple-choice, drag-and-drop, and possible performance-based lab items - so don't train exclusively on multiple-choice banks.
There are no formal prerequisites, which is why so many candidates jump straight into ENCOR as their entry point into the CCNP Enterprise track. For a full walkthrough of eligibility nuances, see our ENCOR requirements guide. If you want the complete cost picture including Cisco Learning Credits, check the ENCOR certification cost breakdown.
Domain Breakdown at a Glance
Six domains make up the blueprint, and their weights should directly shape your study hours. This is the single most important table on this page - bookmark it.
| Domain | Weight | Study Priority |
|---|---|---|
| Infrastructure | 30% | Highest - routing, switching, WAN |
| Security | 20% | High - AAA, ACLs, CoPP, VPN |
| Architecture | 15% | Moderate - design principles |
| Automation and Artificial Intelligence | 15% | Moderate - Python, JSON, REST, EEM |
| Virtualization | 10% | Lower - VRFs, virtual switching |
| Network Assurance | 10% | Lower - telemetry, Catalyst Center AI |
Notice that Infrastructure and Security together account for half your exam. Everything else - Architecture, Virtualization, Automation and AI, Network Assurance - splits the remaining half fairly evenly. For an item-by-item breakdown of every topic inside each domain, read our complete guide to all six ENCOR content areas.
Key Takeaway
Allocate roughly half your total study time to Infrastructure and Security combined - that's where the exam concentrates its questions.
Infrastructure Core: Routing, Switching, WAN
Infrastructure is the largest domain at 30%, and it's also the most technically dense. Candidates consistently underestimate how deep the routing protocol coverage goes.
Routing and Switching Essentials
You need working, configuration-level command of these protocols, not just conceptual awareness.
- OSPF - areas, LSA types, path selection, and troubleshooting neighbor adjacency issues
- eBGP - path attributes, route filtering, and peering between autonomous systems
- Layer 2/3 switching - STP variants, EtherChannel, first-hop redundancy protocols
- WAN technologies - including tunneling concepts that feed into GRE and IPsec later in Security
Because Infrastructure carries triple the weight of Virtualization or Network Assurance, questions here frequently combine two protocols in a single scenario - for example, OSPF redistribution feeding into an eBGP edge. If you're trying to gauge how tough this domain feels in practice, our ENCOR difficulty guide breaks down where most candidates report friction.
Security Core: AAA, ACLs, CoPP, VPN
Security is worth 20% and is where many candidates lose points simply because they treat it as an afterthought behind routing and switching. Don't make that mistake.
Security Topics That Show Up Repeatedly
- AAA - authentication, authorization, and accounting flows and their device-level configuration
- ACLs - standard vs. extended, placement logic, and troubleshooting unexpected drops
- CoPP (Control Plane Policing) - protecting the control plane from flood conditions
- GRE/IPsec - tunneling and encryption combined for secure site-to-site connectivity
These topics often appear alongside Automation questions - for example, a scenario asking how a REST API call might trigger an ACL update. Treat Security and Automation as loosely connected domains rather than isolated silos.
Automation, AI, and Catalyst Center
Automation and Artificial Intelligence sits at 15% and is the domain most likely to feel unfamiliar to candidates coming from a traditional networking background rather than a scripting one.
What "Automation and AI" Actually Tests
- Python fundamentals - enough to read and modify scripts that interact with network devices
- JSON - data structures used in API responses and configuration payloads
- REST APIs - request methods, status codes, and how controllers expose device data
- EEM (Embedded Event Manager) - scripting reactive automation directly on IOS devices
You do not need to be a professional developer to pass this domain, but you do need to comfortably parse JSON output and understand what a REST call is doing conceptually. This domain overlaps with Network Assurance in the current blueprint, since Catalyst Center's AI-driven workflows touch both automation and monitoring.
What Changed in Blueprint v1.2
The current ENCOR blueprint is version 1.2, and two changes matter more than any others if you last looked at ENCOR materials a few years ago.
If your study materials still reference wireless controllers, WLAN security, or RF fundamentals as ENCOR topics, those resources are outdated for v1.2. Redirect that study time toward Catalyst Center dashboards, assurance workflows, and how AI-driven insights surface in day-to-day network monitoring instead.
Registration, Format, and Retake Logistics
Understanding the mechanics of scheduling and retaking the exam prevents avoidable stress on exam day.
- Delivery options: Pearson VUE test centers or OnVUE online proctoring - choose based on your comfort with remote proctoring requirements.
- Duration: 120 minutes, closed-book, no reference materials allowed.
- Languages: English and Japanese.
- Fee: US$400 plus applicable tax; Cisco Learning Credits accepted.
- Retake policy: After a failed attempt, you must wait five calendar days, counted starting the day after the attempt, before you can retest.
That five-day retake window means a failed attempt is not a minor setback you can immediately correct - plan your first attempt seriously rather than treating it as a diagnostic run. For a deeper look at what "passing" actually requires numerically, see our ENCOR passing score guide, and for exact testing windows and scheduling advice, check ENCOR exam dates 2026.
Certification Lifecycle and Renewal
Passing ENCOR earns the Cisco Certified Specialist - Enterprise Core credential. It also does two other important things: it satisfies the core exam requirement for CCNP Enterprise, and it qualifies you to sit the CCIE Enterprise Infrastructure lab exam. Note that full CCNP Enterprise certification still requires passing a separate concentration exam beyond ENCOR alone.
Key Takeaway
ENCOR alone does not equal CCNP Enterprise - you still need a concentration exam to complete that certification.
Both the written-exam credit and the resulting certification carry a three-year validity period. To renew before expiration, you can pass eligible exams or accumulate Continuing Education (CE) credits - 40 CE credits for Specialist-level renewal, or 80 CE credits if you're renewing at the CCNP level. One detail candidates often miss: CE-only renewal does not extend the window you have for combining multiple exam passes toward a higher certification. Track your three-year clock carefully.
Last-Mile Review Schedule
In the final two weeks before your test date, structure review time around domain weight rather than personal preference. This is not a generic study calendar - it's built specifically around ENCOR's own percentages.
Infrastructure and Security Drill-Down
- Reconfigure OSPF and eBGP scenarios from memory, no notes
- Rebuild AAA, ACL, and CoPP configurations on lab devices or a simulator
- Review GRE/IPsec tunnel setup end-to-end
Architecture, Virtualization, Assurance, Automation Sweep
- Walk through VRF and virtual switching design cases
- Practice reading JSON payloads and mapping REST API calls to outcomes
- Review Catalyst Center AI workflow screenshots under Network Assurance
- Write and trace a short EEM script
For a full-length version of this preparation approach with week-by-week detail beyond the final sprint, our ENCOR study guide for passing on your first attempt covers the complete timeline. And if you want to sanity-check your readiness against realistic question patterns, run through practice sets on our ENCOR practice test platform before booking your seat.
FAQ
It's a closed-book, computer-based exam combining multiple-choice questions, drag-and-drop items, and possible performance-based lab tasks, delivered over 120 minutes at a Pearson VUE center or via OnVUE online proctoring.
Start with Infrastructure (30%) and Security (20%), since together they represent half the exam. Architecture, Virtualization, Network Assurance, and Automation and AI split the remaining half.
Yes. Blueprint version 1.2 excludes wireless objectives entirely and instead incorporates Catalyst Center AI workflows into the Network Assurance domain.
You must wait five calendar days before retesting, with the count starting the day after your failed attempt. Plan your study schedule so your first attempt is your best shot.
No. Passing ENCOR satisfies the core exam requirement and also earns Cisco Certified Specialist - Enterprise Core, plus eligibility for the CCIE Enterprise Infrastructure lab exam, but full CCNP Enterprise still requires a separate concentration exam.
For more context on where ENCOR fits into broader career and certification planning, browse our related coverage on whether ENCOR certification is worth the investment, roles that hire for ENCOR-validated skills, and the ENCOR earnings analysis. When you're ready to test your recall against realistic exam-style questions, head back to the ENCOR practice test homepage and start a timed session.