Cisco Certified Network Professional

CCNPv9 ENCOR (350-401) Training in Kenya

Master enterprise networking core technologies with CCNPv9 ENCOR. Implement dual-stack IPv4/IPv6, virtualization, SD-WAN, advanced routing, wireless, network assurance, security, and Python automation. The gold standard for senior network engineers in Kenya's top organizations.

Exam Details Course Outline Enroll Now

CCNP ENCOR Exam Details

Exam Price

$400 USD
(Paid directly to Pearson VUE)

Duration

120 minutes
(2 hours)

Questions

90-110 questions
(Includes PBQs)

Passing Score

~800-825
(Scale: 300-1000)

Languages

English, Japanese

Question Types

Multiple choice, drag-and-drop, performance-based questions (PBQs), testlet scenarios

Get the official CCNP ENCOR (350-401) exam topics directly from Cisco:

Download CCNP ENCOR Exam Topics PDF

CCNP ENCOR v9 Course Outline

Our 6-week intensive program covers all 6 CCNP ENCOR domains with hands-on labs on real Cisco equipment and GNS3/EVE-NG. Master enterprise-grade networking skills demanded by Kenya's top employers.

  • 1.1 Explain architecture design fundamentals including scalability, high availability, and modularity
  • 1.2 Explain software-defined network (SDN) architecture
    • 1.2.a Data, control, and management planes
    • 1.2.b Northbound and southbound APIs
    • 1.2.c Comparison of traditional vs controller-based networking
  • 1.3 Compare traditional networks with fabric architectures
    • 1.3.a Overlay, underlay, and fabrics
    • 1.3.b Benefits of fabric-based networks (Cisco DNA, ACI)
  • 1.4 Explain concepts of virtualization
    • 1.4.a Virtualization of network functions (NFV, VNF)
    • 1.4.b Hypervisor types (Type 1 & Type 2)
  • 1.5 Explain components and concepts of wireless infrastructure
    • 1.5.a Controller-based architectures, SD-Access, CAPWAP
    • 1.5.b Access point operation and modes
    • 1.5.c Antenna characteristics
  • 1.6 Explain QoS concepts including marking, queuing, congestion, policing, shaping
  • 1.7 Explain hardware and software switching mechanisms
  • Hands-on lab: Design enterprise architecture, configure SDN concepts, virtualization setup

  • 2.1 Configure and verify VLANs and trunking
  • 2.2 Configure and verify VTP and Spanning Tree Protocol variants (PVST+, RSTP, MST)
  • 2.3 Configure and verify EtherChannel (LACP, PAgP, Static)
  • 2.4 Configure and verify First Hop Redundancy Protocols (HSRP, VRRP, GLBP)
  • 2.5 Configure and verify Virtual Routing and Forwarding (VRF-Lite)
  • 2.6 Describe network virtualization technologies
    • 2.6.a GRE, VXLAN, IPsec tunnels
    • 2.6.b SD-Access fabric components
  • 2.7 Configure and verify server virtualization concepts
    • 2.7.a vSphere, Hyper-V basics
    • 2.7.b Container platforms (Docker, Kubernetes basics)
  • Hands-on lab: Configure VLANs, trunking, EtherChannel, VRF-Lite, and VRRP on real Cisco switches

  • 3.1 Layer 2 connectivity and technologies
    • 3.1.a VLANs, Trunks, STP, EtherChannel
    • 3.1.b Private VLANs, Flex Links, Port Security
  • 3.2 Layer 3 connectivity and technologies
    • 3.2.a OSPFv2 and OSPFv3 (single and multi-area)
    • 3.2.b EIGRP (classic and named mode)
    • 3.2.c BGP fundamentals (eBGP, iBGP)
    • 3.2.d Route redistribution and filtering
    • 3.2.e Path manipulation (route maps, PBR)
  • 3.3 Multicast routing
    • 3.3.a PIM sparse mode, SSM
    • 3.3.b IGMPv2/v3
  • 3.4 IPv6 routing and addressing
    • 3.4.a OSPFv3, EIGRP for IPv6
    • 3.4.b SLAAC, DHCPv6, IPv6 transition mechanisms
  • 3.5 Wireless principles and configurations
    • 3.5.a RF fundamentals, channels, power levels
    • 3.5.b WLC configuration, mobility groups
    • 3.5.c Wireless security (WPA3, 802.1X)
  • 3.6 WAN technologies and QoS
    • 3.6.a MPLS concepts, SD-WAN architecture
    • 3.6.b DMVPN, FlexVPN, IPsec tunnels
  • Hands-on lab: Configure OSPF, EIGRP, BGP, IPv6, wireless, and SD-WAN on real Cisco routers

  • 4.1 Configure and verify SNMPv2 and SNMPv3
  • 4.2 Configure and verify syslog and NetFlow/IPFIX
  • 4.3 Configure and verify IP SLA
  • 4.4 Explain Cisco DNA Center Assurance concepts
    • 4.4.a Network health monitoring
    • 4.4.b AI-driven analytics and insights
    • 4.4.c Application health monitoring
  • 4.5 Troubleshoot network issues using EEM applets
  • 4.6 Configure and verify SPAN, RSPAN, and ERSPAN
  • 4.7 Troubleshoot routing protocols (OSPF, EIGRP, BGP)
  • 4.8 Troubleshoot switching issues (STP, EtherChannel, VLANs)
  • 4.9 Use ping, traceroute, show commands for diagnostics
  • Hands-on lab: Configure SNMP, NetFlow, IP SLA, SPAN; troubleshoot complex network scenarios

  • 5.1 Configure and verify device access control
    • 5.1.a AAA with TACACS+ and RADIUS
    • 5.1.b Local user authentication
    • 5.1.c Management plane security
  • 5.2 Configure and verify infrastructure security
    • 5.2.a Port Security, DHCP Snooping
    • 5.2.b Dynamic ARP Inspection, IP Source Guard
    • 5.2.c Storm Control, BPDU Guard
  • 5.3 Configure and verify ACLs (standard, extended, IPv6)
  • 5.4 Configure and verify NAT (static, dynamic, PAT)
  • 5.5 Configure and verify device management and management tools
    • 5.5.a NTP, CDP, LLDP
    • 5.5.b SSH, HTTPS
  • 5.6 Describe wireless security (WPA2/WPA3, PSK, Enterprise, 802.1X, EAP methods)
  • 5.7 Configure site-to-site IPsec VPNs
  • 5.8 Describe threat defense technologies and firewall modes
  • 5.9 Configure Cisco TrustSec, MACsec concepts
  • Hands-on lab: Configure AAA, port security, ACLs, NAT, IPsec VPNs on enterprise equipment

  • 6.1 Interpret Python scripts for network automation
    • 6.1.a Data types, functions, classes, conditions, loops
    • 6.1.b Reading and understanding Python code
  • 6.2 Describe benefits of Python and Ansible for network automation
  • 6.3 Describe the function of RESTCONF and NETCONF APIs
  • 6.4 Describe data formats: JSON, XML, YAML
  • 6.5 Describe Cisco DNA Center APIs for network management
  • 6.6 Describe client and endpoint APIs for Cisco platforms
  • 6.7 Describe EEM applets for network event automation
  • 6.8 Describe configuration management tools: Puppet, Chef, Ansible
  • 6.9 Interpret YANG models and JSON schemas
  • 6.10 Use Postman and Python requests for API interaction
  • Hands-on lab: Write Python scripts to automate device configs, use RESTCONF/NETCONF APIs, parse JSON data

Your Pathway to Senior Network Engineer

CCNP ENCOR is the cornerstone of the CCNP Enterprise certification. After completing this course, you'll unlock elite networking roles at Kenya's top organizations:

CCNP ENCOR

Master enterprise networking core technologies.

Current Course
CCNP ENARSI

Add advanced routing specialization.

Next Step
Senior Network Engineer

Lead enterprise network design.

First Role
CCIE Enterprise

Pursue the highest Cisco certification.

Ultimate Goal

Why Choose Sama Tech for CCNP ENCOR Training?

98% Pass Rate

Our proven methodology and expert guidance ensure you pass the CCNP ENCOR exam on your first attempt.

Real Cisco Equipment

Practice on actual Cisco routers, switches, and wireless controllers—not just simulators.

Python Automation

Hands-on Python labs for RESTCONF/NETCONF APIs—critical skills for modern network engineers.

M-Pesa Installments

Flexible payment plans available. Pay via M-Pesa, bank transfer, or corporate billing.

Enroll in CCNP ENCOR Training

6 Weeks • Advanced Level

KES 45,000

M-Pesa Installments Available

  • Complete CCNP ENCOR (350-401) Exam Preparation
  • 60+ Hours of Hands-On Labs on Real Cisco Equipment
  • GNS3 & EVE-NG Virtual Lab Environment Access
  • Expert Instruction by CCNP Guru Certified Trainers
  • Python Automation & API Labs
  • Advanced Routing, Wireless & SD-WAN Configuration
  • Flexible Schedules (Evening & Weekend)
  • Career Support: Resume Review & Mock Interviews
  • Bundle with ENARSI & Save 15%
Enroll via WhatsApp Enroll Online

M-Pesa installments available 7-day money-back guarantee

CCNP ENCOR FAQs

Common questions about the CCNPv9 ENCOR (350-401) course at Sama Tech Institute Kenya.

Cisco has no formal prerequisites for CCNP ENCOR, but we strongly recommend:
  • CCNA certification or equivalent knowledge (200-301 level)
  • 2-3 years of hands-on networking experience
  • Strong understanding of routing (OSPF, EIGRP, BGP), switching, and IP addressing
  • Basic familiarity with command-line interfaces
  • Understanding of IPv4 and IPv6 fundamentals
If you don't have CCNA yet, we recommend completing our CCNA v2.0 course first. Many students successfully transition directly from CCNA to CCNP ENCOR with our expert guidance. Contact us on WhatsApp for a free readiness assessment.

Yes! To earn the full CCNP Enterprise certification, you must pass two exams:
  • Core Exam: CCNP ENCOR (350-401) — This is the course you're viewing
  • Concentration Exam: Choose ONE of the following (most students pick ENARSI):
    • CCNP ENARSI (300-410) — Advanced Routing (most popular)
    • CCNP SD-WAN (300-415)
    • CCNP ENSDWI (300-420)
    • CCNP ENWLSD (300-425)
    • CCNP ENWLSI (300-430)
    • CCNP SPAUTO (300-435)
We recommend starting with ENCOR first, then immediately taking ENARSI. We offer a 15% discount when you bundle both courses together. Most of our CCNP Enterprise students complete both courses within 3-4 months.

CCNP Enterprise is the gold standard for senior networking roles in Kenya. Common job titles include:
  • Senior Network Engineer: Design and implement enterprise networks. Salary: KES 200,000 - 350,000.
  • Network Architect: Lead network design and strategy. Salary: KES 250,000 - 450,000.
  • Infrastructure Engineer: Manage complex multi-site networks. Salary: KES 180,000 - 300,000.
  • Network Consultant: Advise enterprises on network design. Salary: KES 200,000 - 400,000.
  • NOC Manager: Lead network operations centers. Salary: KES 220,000 - 380,000.
  • SD-WAN Engineer: Specialize in software-defined networking. Salary: KES 190,000 - 320,000.
Top employers hiring CCNP-certified engineers in Kenya:
  • Telecom: Safaricom, Airtel Kenya, Liquid Intelligent Technologies, Wananchi Group
  • Banking: Equity Bank, KCB, NCBA, Co-op Bank, Standard Chartered
  • ISPs: Jamii Telecom, Poa Internet, Mawingu Networks
  • Government: ICT Authority, Communications Authority, KRA
  • Multinationals: Microsoft, Google, Cisco Partner Companies

The automation section (15% of the exam) requires you to read and understand Python scripts, but not necessarily write complex programs from scratch. You should be comfortable with:
  • Basic syntax: Variables, data types, lists, dictionaries
  • Control flow: If statements, loops, functions
  • Reading code: Understanding what a script does
  • APIs: RESTCONF, NETCONF concepts
  • Data formats: JSON, XML, YAML parsing
In our course, we include hands-on Python labs specifically designed for network engineers. You'll learn enough Python to:
  • Automate device configurations using REST APIs
  • Parse JSON data from network devices
  • Write simple scripts to back up configurations
  • Use tools like Postman for API testing
No prior Python experience is required—we start from the basics and focus specifically on network automation use cases. If you want to dive deeper into Python, we also offer our Python Programming course which pairs perfectly with CCNP.

Absolutely! CCNP ENCOR is the essential foundation for CCIE Enterprise certification. Here's why:
  • Same core knowledge: The CCIE Enterprise Infrastructure written exam is actually the SAME as CCNP ENCOR (350-401). When you pass ENCOR, you automatically qualify for the CCIE Enterprise lab exam!
  • Advanced concepts: ENCOR introduces you to the complex topics (SDN, automation, virtualization) that CCIE dives much deeper into.
  • Practical skills: Our hands-on labs prepare you for the practical skills needed in the CCIE lab.
The path to CCIE:
  • Step 1: Pass CCNP ENCOR (350-401) ← This course
  • Step 2: Pass CCNP ENARSI (300-410) ← Next course
  • Step 3: Pass CCIE Enterprise Infrastructure Lab Exam
Many of our CCNP students go on to pursue CCIE. We offer advanced coaching and lab preparation for students ready to take on the CCIE challenge. CCIE-certified engineers in Kenya earn between KES 400,000 - 800,000+ per month!

We provide comprehensive lab access using multiple platforms to ensure you get maximum hands-on experience:
  • Real Cisco Equipment:
    • Cisco ISR 4000 Series Routers
    • Cisco Catalyst 9000 Series Switches
    • Cisco Catalyst 9800 Wireless Controllers
    • Cisco Meraki equipment for SD-WAN labs
  • Virtual Lab Platforms:
    • GNS3 with Cisco IOS/IOS-XE images
    • EVE-NG for complex topology simulations
    • Cisco Modeling Labs (CML) for advanced scenarios
  • Cloud & Automation Labs:
    • Python development environment for automation
    • DevNet Sandbox access for API testing
    • Docker and container labs
All labs are accessible 24/7 through our virtual platform, so you can practice anytime. For on-site students in Nairobi, you'll also have access to physical equipment during scheduled lab sessions. We provide detailed lab guides, video walkthroughs, and instructor support for every lab.

Ready to Become a CCNP Enterprise Engineer?

Join Kenya's elite network engineers working at Safaricom, top banks, and multinationals. Master enterprise networking, SD-WAN, and Python automation with expert instruction.

Chat on WhatsApp Enroll Online