CCNP and CCIE Enterprise Core ENCOR 350-401 Official Cert Guide Premium Edition eBook and Practice Test

Features

• Pre-chapter quiz — These quizzes allow readers to assess their knowledge of the chapter content and decide how much time to spend on any given section.
• Foundation Topics — These sections make up the majority of the page count, explaining concepts, configurations, with emphasis on the theory and concepts, and with linking the theory to the meaning of the configuration commands.
• Key Topics — Inside the Foundation Topics sections, every figure, table, or list that should absolutely be understood and remembered for the exam is noted with the words “Key Topic” in the margin. This tool allows the reader to quickly review the most important details in each chapter.
• Exam Preparation — This ending section of each chapter includes three additional features for review and study, all designed to help the reader remember the details as well as to get more depth. Readers will be instructed to review key topics from the chapter, complete tables and lists from memory, and define key terms.
• Final Preparation Chapter–This final chapter details a set of tools and a study plan to help readers complete their preparation for the exams.

• Copyright 2020
• Pages: 1024
• Edition: 1st

• Premium Edition eBook
• ISBN-10: 0-13-526203-8
• ISBN-13: 978-0-13-526203-0

CCNP and CCIE Enterprise Core ENCOR 350-401 Official Cert Guide, Premium Edition eBook and Practice Test

The exciting new CCNP and CCIE Enterprise Core ENCOR 350-401 Official Cert Guide, Premium Edition eBook and Practice Test is a digital-only certification preparation product combining an eBook with enhanced Pearson IT Certification Practice Test. The Premium Edition eBook and Practice Test contains the following items:

• The CCNP/CCIE ENCOR 350-401 Premium Edition Practice Test, including four full practice exams and enhanced practice test features
• PDF, EPUB, and Mobi/Kindle formats of the CCNP and CCIE Enterprise Core ENCOR 350-401 Official Cert Guide from Cisco Press, which are accessible via your PC, tablet, and smartphone

About the Premium Edition Practice Test

This Premium Edition contains an enhanced version of the Pearson Test Prep practice test software with four full practice exams. In addition, it contains all the chapter-opening assessment questions from the book. This integrated learning package

• Enables you to focus on individual topic areas or take complete, timed exams
• Includes direct links from each question to detailed tutorials to help you understand the concepts behind the questions
• Provides unique sets of exam-realistic practice questions
• Tracks your performance and provides feedback on a module-by-module basis, laying out a complete assessment of your knowledge to help you focus your study where it is needed most

Pearson Test Prep online system requirements:

Browsers: Chrome version 73 and above; Safari version 12 and above; Microsoft Edge 44 and above.

Devices: Desktop and laptop computers, tablets running on Android v8.0 and iOS v13, smartphones with a minimum screen size of 4.7. Internet access required.

Pearson Test Prep offline system requirements:

Windows 10, Windows 8.1; Microsoft .NET Framework 4.5 Client; Pentium-class 1 GHz processor (or equivalent); 512 MB RAM; 650 MB disk space plus 50 MB for each downloaded practice exam; access to the Internet to register and download exam databases

About the Premium Edition eBook

CCNP and CCIE Enterprise Core ENCOR 350-401 Official Cert Guide focuses specifically on the objectives for the Cisco CCNP/CCIE ENCOR 350-401 exam. Networking experts Brad Edgeworth, Ramiro Garza Rios, Dave Hucaby, and Jason Gooley share preparation hints and test-taking tips, helping you identify areas of weakness and improve both your conceptual knowledge and hands-on skills. Material is presented in a concise manner, focusing on increasing your understanding and retention of exam topics.

This complete study package includes

• A test-preparation routine proven to help you pass the exams
• Do I Know This Already? quizzes, which enable you to decide how much time you need to spend on each section
• Chapter-ending exercises, which help you drill on key concepts you must know thoroughly
• Practice exercises that help you enhance your knowledge
• More than 90 minutes of video mentoring from the author
• A final preparation chapter, which guides you through tools and resources to help you craft your review and test-taking strategies
• Study plan suggestions and templates to help you organize and optimize your study time

Well regarded for its level of detail, assessment features, comprehensive design scenarios, and challenging review questions and exercises, this official study guide helps you master the concepts and techniques that will enable you to succeed on the exam the first time.

The official study guide helps you master all the topics on the CCNP/CCIE ENCOR exam, including

• Enterprise network architecture
• Virtualization
• Network assurance
• Security
• Automation

Table of Contents

Introduction

Part I Forwarding

Chapter 1 Packet Forwarding

“Do I Know This Already?” Quiz 2

Foundation Topics 3

Network Device Communication 3

    Layer 2 Forwarding 4

    Layer 3 Forwarding

Forwarding Architectures

    Process Switching

    Software CEF

    Hardware CEF

    Stateful Switchover

    SDM Templates

Exam Preparation Tasks

Part II Layer 2

Chapter 2 Spanning Tree Protocol

“Do I Know This Already?” Quiz

Foundation Topics

Spanning Tree Protocol Fundamentals

    IEEE 802.1D STP

    Building the STP Topology

    STP Topology Changes

Rapid Spanning Tree Protocol

    RSTP (802.1W) Port States

    RSTP (802.1W) Port Roles

    RSTP (802.1W) Port Types

    Building the RSTP Topology

Exam Preparation Tasks

Chapter 3 Advanced STP Tuning

“Do I Know This Already?” Quiz

Foundation Topics

STP Topology Tuning

    Root Bridge Placement

    Modifying STP Root Port and Blocked Switch Port Locations

    Modifying STP Port Priority

Additional STP Protection Mechanisms

    Root Guard

    STP Portfast

    BPDU Guard

    BPDU Filter

    Problems with Unidirectional Links

Exam Preparation Tasks

Chapter 4 Multiple Spanning Tree Protocol

“Do I Know This Already?” Quiz

Foundation Topics

Multiple Spanning Tree Protocol

    MST Instances (MSTIs)

    MST Configuration

    MST Verification

    MST Tuning

    Common MST Misconfigurations

    MST Region Boundary

Exam Preparation Tasks

Chapter 5 VLAN Trunks and EtherChannel Bundles

“Do I Know This Already?” Quiz

Foundation Topics

VLAN Trunking Protocol

    VTP Communication

    VTP Configuration

    VTP Verification

Dynamic Trunking Protocol

EtherChannel Bundle

    Dynamic Link Aggregation Protocols

    Verifying Port-Channel Status

    Viewing EtherChannel Neighbors

    Verifying EtherChannel Packets

    Advanced LACP Configuration Options

    Troubleshooting EtherChannel Bundles

    Load Balancing Traffic with EtherChannel Bundles

Exam Preparation Tasks

Part III Routing

Chapter 6 IP Routing Essentials

“Do I Know This Already?” Quiz

Foundation Topics

Routing Protocol Overview

    Distance Vector Algorithms

    Enhanced Distance Vector Algorithms

    Link-State Algorithms

    Path Vector Algorithm

Path Selection

    Prefix Length

    Administrative Distance

    Metrics

Static Routing

    Static Route Types

    Floating Static Routing

    Static Null Routes

    IPv6 Static Routes

Virtual Routing and Forwarding

Exam Preparation Tasks

Chapter 7 EIGRP

“Do I Know This Already?” Quiz

Foundation Topics

EIGRP Fundamentals

    Autonomous Systems

    EIGRP Terminology

    Topology Table

    EIGRP Neighbors

Path Metric Calculation

    Wide Metrics

    Metric Backward Compatibility

    Load Balancing

Failure Detection and Timers

    Convergence

Route Summarization

Exam Preparation Tasks

Chapter 8 OSPF

“Do I Know This Already?” Quiz

Foundation Topics

OSPF Fundamentals

    Inter-Router Communication

    OSPF Hello Packets

    Router ID

    Neighbors

    Designated Router and Backup Designated Router

OSPF Configuration

    OSPF Network Statement

    Interface-Specific Configuration

    Statically Setting the Router ID

    Passive Interfaces

    Requirements for Neighbor Adjacency

    Sample Topology and Configuration

    Confirmation of Interfaces

    Verification of OSPF Neighbor Adjacencies

    Verification of OSPF Routes

Default Route Advertisement

Common OSPF Optimizations

    Link Costs

    Failure Detection

    DR Placement

    OSPF Network Types

Exam Preparation Tasks

Chapter 9 Advanced OSPF

“Do I Know This Already?” Quiz

Foundation Topics

Areas

    Area ID

    OSPF Route Types

Link-State Announcements

LSA Sequences

    LSA Age and Flooding

    LSA Types

Discontiguous Networks

OSPF Path Selection

    Intra-Area Routes

    Interarea Routes

    Equal-Cost Multipathing

Summarization of Routes

    Summarization Fundamentals

    Interarea Summarization

    Summarization Metrics

    Configuration of Interarea Summarization

Route Filtering

    Filtering with Summarization

    Area Filtering

    Local OSPF Filtering

Exam Preparation Tasks

Chapter 10 OSPFv3

“Do I Know This Already?” Quiz

Foundation Topics

OSPFv3 Fundamentals

    OSPFv3 Link-State Advertisement

    OSPFv3 Communication

OSPFv3 Configuration

    OSPFv3 Verification

    Passive Interface

    Summarization

    Network Type

IPv4 Support in OSPFv3

Exam Preparation Tasks

Chapter 11 BGP

“Do I Know This Already?” Quiz

Foundation Topics

BGP Fundamentals

    Autonomous System Numbers

    Path Attributes

    Loop Prevention

    Address Families

    Inter-Router Communication

    BGP Neighbor States

Basic BGP Configuration

    Verification of BGP Sessions

    Prefix Advertisement

    Receiving and Viewing Routes

    BGP Route Advertisements from Indirect Sources

Route Summarization

    Aggregate Address

    Atomic Aggregate

    Route Aggregation with AS_SET

Multiprotocol BGP for IPv6

    IPv6 Configuration

    IPv6 Summarization

Exam Preparation Tasks

Chapter 12 Advanced BGP

“Do I Know This Already?” Quiz

Foundation Topics

BGP Multihoming

    Resiliency in Service Providers

    Internet Transit Routing

    Branch Transit Routing

Conditional Matching

    Access Control Lists

    Prefix Matching

    Regular Expressions (regex)

Route Maps

    Conditional Matching

    Optional Actions

    The continue Keyword

BGP Route Filtering and Manipulation

    Distribute List Filtering

    Prefix List Filtering

    AS Path ACL Filtering

    Route Maps

    Clearing BGP Connections

BGP Communities

    Well-Known Communities

    Enabling BGP Community Support

    Conditionally Matching BGP Communities

    Setting Private BGP Communities

Understanding BGP Path Selection

    Routing Path Selection Using Longest Match

    BGP Best Path Overview

Exam Preparation Tasks

Chapter 13 Multicast

“Do I Know This Already?” Quiz

Foundation Topics

Multicast Fundamentals

Multicast Addressing

    Layer 2 Multicast Addresses

Internet Group Management Protocol

    IGMPv2

    IGMPv3

    IGMP Snooping

Protocol Independent Multicast

    PIM Distribution Trees

    PIM Terminology

    PIM Dense Mode

    PIM Sparse Mode

    Reverse Path Forwarding

    PIM Forwarder

Rendezvous Points

    Static RP

    Auto-RP

    PIM Bootstrap Router

Exam Preparation Tasks

Part IV Services

Chapter 14 QoS

“Do I Know This Already?” Quiz

Foundation Topics

The Need for QoS

    Lack of Bandwidth

    Latency and Jitter

    Packet Loss

QoS Models

Classification and Marking

    Classification

    Marking

    DSCP Per-Hop Behaviors

    Scavenger Class

    Trust Boundary

    A Practical Example: Wireless QoS

Policing and Shaping

    Placing Policers and Shapers in the Network

    Markdown

    Token Bucket Algorithms

    Types of Policers

Congestion Management and Avoidance

    Congestion Management

    Congestion-Avoidance Tools

Exam Preparation Tasks

Chapter 15 IP Services

“Do I Know This Already?” Quiz

Foundation Topics

    Time Synchronization

    Network Time Protocol

    NTP Configuration

    Stratum Preference

    NTP Peers

First-Hop Redundancy Protocol

    Object Tracking

    Hot Standby Router Protocol

    Virtual Router Redundancy Protocol

    Global Load Balancing Protocol

Network Address Translation

    NAT Topology

    Static NAT

    Pooled NAT

    Port Address Translation

Exam Preparation Tasks

Part V Overlay

Chapter 16 Overlay Tunnels

“Do I Know This Already?” Quiz

Foundation Topics

Generic Routing Encapsulation (GRE) Tunnels

    GRE Tunnel Configuration

    GRE Configuration Example

    Problems with Overlay Networks: Recursive Routing

IPsec Fundamentals

    Authentication Header

    Encapsulating Security Payload

    Transform Sets

    Internet Key Exchange

    IPsec VPNs

    Site-to-Site IPsec Configuration

Cisco Location/ID Separation Protocol (LISP)

    LISP Architecture and Protocols

    LISP Operation

Virtual Extensible Local Area Network (VXLAN)

Exam Preparation Tasks

Part VI Wireless

Chapter 17 Wireless Signals and Modulation

“Do I Know This Already?” Quiz

Foundation Topics

Understanding Basic Wireless Theory

    Understanding Frequency

    Understanding Phase

    Measuring Wavelength

    Understanding RF Power and dB

Carrying Data Over an RF Signal

    Maintaining AP—Client Compatibility

    Using Multiple Radios to Scale Performance

    Maximizing the AP—Client Throughput

Exam Preparation Tasks

Chapter 18 Wireless Infrastructure

“Do I Know This Already?” Quiz

Foundation Topics

Wireless LAN Topologies

    Autonomous Topology

    Lightweight AP Topologies

Pairing Lightweight APs and WLCs

    AP States

    Discovering a WLC

    Selecting a WLC

    Maintaining WLC Availability

    Cisco AP Modes

Leveraging Antennas for Wireless Coverage

    Radiation Patterns

    Gain

    Beamwidth

    Polarization

    Omnidirectional Antennas

    Directional Antennas

Exam Preparation Tasks

Chapter 19 Understanding Wireless Roaming and Location Services

“Do I Know This Already?” Quiz

Foundation Topics

Roaming Overview

    Roaming Between Autonomous APs

    Intracontroller Roaming

Roaming Between Centralized Controllers

    Layer 2 Roaming

    Layer 3 Roaming

    Scaling Mobility with Mobility Groups

Locating Devices in a Wireless Network

Exam Preparation Tasks

Chapter 20 Authenticating Wireless Clients

“Do I Know This Already?” Quiz

Foundation Topics

Open Authentication

Authenticating with Pre-Shared Key

Authenticating with EAP

    Configuring EAP-Based Authentication with External RADIUS Servers

    Configuring EAP-Based Authentication with Local EAP

    Verifying EAP-Based Authentication Configuration

Authenticating with WebAuth

Exam Preparation Tasks

Chapter 21 Troubleshooting Wireless Connectivity

“Do I Know This Already?” Quiz

Foundation Topics

Troubleshooting Client Connectivity from the WLC

    Checking the Client’s Connection Status

    Checking the Client’s Association and Signal Status

    Checking the Client’s Mobility State

    Checking the Client’s Wireless Policies

    Testing a Wireless Client

Troubleshooting Connectivity Problems at the AP

Exam Preparation Tasks

Part VII Architecture

Chapter 22 Enterprise Network Architecture

“Do I Know This Already?” Quiz

Foundation Topics

Hierarchical LAN Design Model

    Access Layer

    Distribution Layer

    Core Layer

Enterprise Network Architecture Options

    Two-Tier Design (Collapsed Core)

    Three-Tier Design

    Layer 2 Access Layer (STP Based)

    Layer 3 Access Layer (Routed Access)

    Simplified Campus Design

    Software-Defined Access (SD-Access) Design

Exam Preparation Tasks

Chapter 23 Fabric Technologies

“Do I Know This Already?” Quiz

Foundation Topics

Software-Defined Access (SD-Access)

    What Is SD-Access?

    SD-Access Architecture

    Physical Layer

    Controller Layer

    Management Layer

Software-Defined WAN (SD-WAN)

    Cisco SD-WAN Architecture

    vManage NMS

    vSmart Controller

    Cisco SD-WAN Routers (vEdge and cEdge)

    vBond Orchestrator

    vAnalytics

    Cisco SD-WAN Cloud OnRamp

    Cloud OnRamp for SaaS

    Cloud OnRamp for IaaS

Exam Preparation Tasks

Chapter 24 Network Assurance

Do I Know This Already?

Foundation Topics

Network Diagnostic Tools

    ping

    traceroute

Debugging

    Conditional Debugging

    Simple Network Management Protocol (SNMP)

    syslog

NetFlow and Flexible NetFlow

Switched Port Analyzer (SPAN) Technologies

    Local SPAN

    Specifying the Source Ports

    Remote SPAN (RSPAN)

    Encapsulated Remote SPAN (ERSPAN)

IP SLA

Cisco DNA Center Assurance

Exam Preparation Tasks

Part VIII Security

Chapter 25 Secure Network Access Control

“Do I Know This Already?” Quiz

Foundation Topics

Network Security Design for Threat Defense

Next-Generation Endpoint Security

    Cisco Talos

    Cisco Threat Grid

    Cisco Advanced Malware Protection (AMP)

    Cisco AnyConnect

    Cisco Umbrella

    Cisco Web Security Appliance (WSA)

    Cisco Email Security Appliance (ESA)

    Next-Generation Intrusion Prevention System (NGIPS)

    Next-Generation Firewall (NGFW)

    Cisco Firepower Management Center (FMC)

    Cisco Stealthwatch

    Cisco Identity Services Engine (ISE)

Network Access Control (NAC)

    802.1x

    MAC Authentication Bypass (MAB)

    Web Authentication (WebAuth)

    Enhanced Flexible Authentication (FlexAuth)

    Cisco Identity-Based Networking Services (IBNS) 2.0

    Cisco TrustSec

    MACsec

Exam Preparation Tasks

Chapter 26 Network Device Access Control and Infrastructure Security

“Do I Know This Already?” Quiz

Foundation Topics

Access Control Lists (ACLs)

    Numbered Standard ACLs

    Numbered Extended ACLs

    Named ACLs

    Port ACLs (PACLs) and VLAN ACLs (VACLs)

    PACL, VACL, and RACL Interaction

Terminal Lines and Password Protection

    Password Types

    Password Encryption

    Username and Password Authentication

    Configuring Line Local Password Authentication

    Verifying Line Local Password Authentication

    Configuring Line Local Username and Password Authentication

    Verifying Line Local Username and Password Authentication

    Privilege Levels and Role-Based Access Control (RBAC)

    Verifying Privilege Levels

    Controlling Access to vty Lines with ACLs

    Verifying Access to vty Lines with ACLs

    Controlling Access to vty Lines Using Transport Input

    Verifying Access to vty Lines Using Transport Input

    Enabling SSH vty Access

    Auxiliary Port

    EXEC Timeout

    Absolute Timeout

Authentication, Authorization, and Accounting (AAA)

    TACACS+

    RADIUS

    Configuring AAA for Network Device Access Control

    Verifying AAA Configuration

Zone-Based Firewall (ZBFW)

    The Self Zone

    The Default Zone

    ZBFW Configuration

    Verifying ZBFW

Control Plane Policing (CoPP)

    Configuring ACLs for CoPP

    Configuring Class Maps for CoPP

    Configuring the Policy Map for CoPP

    Applying the CoPP Policy Map

    Verifying the CoPP Policy

Device Hardening

Exam Preparation Tasks

Part IX SDN

Chapter 27 Virtualization

“Do I Know This Already?” Quiz

Foundation Topics

Server Virtualization

    Virtual Machines

    Containers

    Virtual Switching

Network Functions Virtualization

    NFV Infrastructure

    Virtual Network Functions

    Virtualized Infrastructure Manager

    Element Managers

    Management and Orchestration

    Operations Support System (OSS)/Business Support System (BSS)

    VNF Performance

    Cisco Enterprise Network Functions Virtualization (ENFV)

Exam Preparation Tasks

Chapter 28 Foundational Network Programmability Concepts

“Do I Know This Already?” Quiz

Foundation Topics

Command-Line Interface

Application Programming Interface

    Northbound API

    Southbound API

    Representational State Transfer (REST) APIs

    API Tools and Resources

    Introduction to Postman

    Data Formats (XML and JSON)

    Cisco DNA Center APIs

    Cisco vManage APIs

Data Models and Supporting Protocols

    YANG Data Models

Cisco DevNet

    Discover

    Technologies

    Community

    Support

    Events

GitHub

Basic Python Components and Scripts

Exam Preparation Tasks

Chapter 29 Introduction to Automation Tools

“Do I Know This Already?” Quiz

Foundation Topics

Embedded Event Manager

    EEM Applets

    EEM and Tcl Scripts

    EEM Summary

Agent-Based Automation Tools

    Puppet

    Chef

    SaltStack (Agent and Server Mode)

Agentless Automation Tools

    Ansible

    Puppet Bolt

    SaltStack SSH (Server-Only Mode)

    Comparing Tools

Exam Preparation Tasks

Chapter 30 Final Preparation

Getting Ready

Tools for Final Preparation

    Pearson Test Prep Practice Test Software and Questions on the Website

    Customizing Your Exams

    Updating Your Exams

    Premium Edition

    Chapter-Ending Review Tools

Suggested Plan for Final Review/Study

Summary

Glossary

Appendix A Answers to the “Do I Know This Already?” Questions

Appendix B CCNP Enterprise Core ENCOR 350-401 Official Cert Guide Exam Updates

Online Elements

Glossary

Appendix C Memory Tables

Appendix D Memory Tables Answer Key

Appendix E Study Planner

9781587145230   TOC   10/24/2019

Errata

We've made every effort to ensure the accuracy of this book and its companion content. Any errors that have been confirmed since this book was published can be downloaded below.

Download the errata (1.4 MB .doc)

Download replacement Figure 1-4 (49 KB .jpg)

Download replacement Figure 2-3 (81 KB .jpg)

Download replacement Figure 7-2 (54 KB .jpg)

Download replacement Figure 16-4 (185 KB .png)

Submit Errata