成长值: 63250
|
本帖最后由 小乔 于 2020-2-27 10:45 编辑
6 u [3 P* c6 e4 M$ C9 C$ T5 B8 D+ ?7 Q! C8 K! g1 V- h& x
350-401 ENCOR Exam: Implementing Cisco Enterprise Network Core Technologies) j% E A0 [! N4 ]
Exam Description
- R; i! B) D3 e# N" R- j9 }; z2 m+ @9 M: h5 t; r
The Implementing Cisco Enterprise Network Core Technologies v1.0 (ENCOR 350-401) exam is a 120-minute exam associated with the CCNP Enterprise, CCIE Enterprise Infrastructure, CCIE Enterprise Wireless, and Cisco Certified Specialist – Enterprise Core certifications. This exam tests a candidate\'s knowledge of implementing core enterprise network technologies including dual stack (IPv4 and IPv6) architecture, virtualization, infrastructure, network assurance, security and automation. The course, Implementing Cisco Enterprise Network Core Technologies, helps candidates to prepare for this exam.7 E3 j/ }2 }+ ~( F. H
6 I0 H: d& R7 ]8 o$ d+ hThe following topics are general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. To better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.
6 G0 r, |) E X: M, N: b( L* [# R8 M" r0 E* {" S1 A: \, c" N
% N# b: u& P# B
) y, @/ j( {& x) m0 S第一部分 architecture 15%
' N, ^0 e! w, c8 k; m7 I9 w+ z1.1 Explain the different design principles used in an enterprise network
3 u! d+ t. R( I0 ], {5 V u1.1.a Enterprise network design such as Tier 2, Tier 3, and Fabric Capacity planning6 \( u: U: }8 J4 s) F" s
1.1.b High availability techniques such as redundancy, FHRP, and SSO* {& B! ~& l( ~% B4 A: ~. u
1.2 Analyze design principles of a WLAN deployment
, q- P4 w! y0 Z& ~; `" W& T1.2.a Wireless deployment models (centralized, distributed, controller-less, controller based, cloud, remote branch)
: K6 A9 o" S/ B9 W& |9 [1.2.b Location services in a WLAN design/ P0 ~' W8 \9 c6 y) l8 p
1.3 Differentiate between on-premises and cloud infrastructure deployments
& D# X4 e. T+ X2 [1.4 Explain the working principles of the Cisco SD-WAN solution5 n* z v2 r) ?. c( [% [' v3 l
1.4.a SD-WAN control and data planes elements# t6 V* u& }! F3 U5 Y# W
1.4.b Traditional WAN and SD-WAN solutions
+ C; X( ?, ]* Y! ?( }* m( P1.5 Explain the working principles of the Cisco SD-Access solution9 M9 t8 } F& y/ K& E
1.5.a SD-Access control and data planes elements1 d: t/ b+ h* B2 h1 E
1.5.b Traditional campus interoperating with SD-Access: R5 G+ }, O0 p; e6 L4 U! z
1.6 Describe concepts of wired and wireless QoS9 b4 w' G! C# m3 N4 a" W
1.6.a QoS components
2 G- Z/ i; V0 P' v4 F1.6.b QoS policy* t+ ^% ] [: ?/ h# [1 E
1.7 Differentiate hardware and software switching mechanisms
" N6 X* |( U, ]7 | z: o8 [1.7.a Process and CEF
# ~" b- G" {6 R: `7 M% P1.7.b MAC address table and TCAM2 o! u# B: T- ~! A7 H/ i! W
1.7.c FIB vs. RIB6 A$ E9 Q& @$ z. g
1 z( ?+ l$ t, Q& I第二部分 virtualization 10%
: e" \% G' n' m- I2.1 Describe device virtualization technologies
9 b9 [! v" Y. J1 b& ?; D2.1.a Hypervisor type 1 and 2
% M, H' y9 ^- h, \3 q i$ _2.1.b Virtual machine2 ~$ H3 r+ M& y: Z/ n# G
2.1.c Virtual switching
/ [0 I5 B7 O! C6 I0 c* c2.2 Configure and verify data path virtualization technologies! h0 ?$ G/ L5 }1 N0 [6 ]* ? M7 h
2.2.a VRF
- t3 H1 s4 G3 o7 h' f2.2.b GRE and IPsec tunneling& h5 M4 W% v5 f8 H) i2 D. A5 b6 l! e
2.3 Describe network virtualization concepts
, z1 v+ {" W! q. e0 F. t" t2.3.a LISP
- @* d5 {4 P- w9 D2.3.b VXLAN
; p0 Q; S7 \" u: z6 _& s2 p% ?4 c) i9 e( Z8 I
第三部分 infrastructure 30%
, q- ~, E8 ~& ^6 t9 |3.1 Layer 23 ]$ u! A- v# x! h4 a
3.1.a Troubleshoot static and dynamic 802.1q trunking protocols
) v i9 I- o6 l3.1.b Troubleshoot static and dynamic EtherChannels) l ~1 ~; L9 ^* x4 G
3.1.c Configure and verify common Spanning Tree Protocols (RSTP and MST)- z) }5 K+ T2 K0 ]
3.2 Layer 3& h$ a9 Z9 |- s& `5 ^7 ^: o
3.2.a Compare routing concepts of EIGRP and OSPF (advanced distance vector vs. linked state, load balancing, path selection, path operations, metrics)
+ j" j$ B3 h' A3.2.b Configure and verify simple OSPF environments, including multiple normal areas, summarization, and filtering (neighbor adjacency, point-to-point and broadcast network types, and passive interface)5 Z1 E2 F6 A* F; e
3.2.c Configure and verify eBGP between directly connected neighbors (best path selection algorithm and neighbor relationships)! T& H: H: B& ` h* f. ~7 Z
3.3 Wireless7 c0 V; Y9 Q6 w
3.3.a Describe Layer 1 concepts, such as RF power, RSSI, SNR, interference noise, band and channels, and wireless client devices capabilities7 `- p' ~0 p- R* O# ]* \. z
3.3.b Describe AP modes and antenna types
e: B0 K9 W. \% F3.3.c Describe access point discovery and join process (discovery algorithms, WLC selection process)
% W9 q( o8 m) |" u8 Z0 E3.3.d Describe the main principles and use cases for Layer 2 and Layer 3 roaming
# o8 O% z9 m- R( C# }6 L1 D3.3.e Troubleshoot WLAN configuration and wireless client connectivity issues8 j5 k+ ^; W6 }3 ~
3.4 IP Services; O( A2 C) y( u
3.4.a Describe Network Time Protocol (NTP)4 N: `0 U G# @
3.4.b Configure and verify NAT/PAT
2 C$ L7 U1 P4 X2 t- S3.4.c Configure first hop redundancy protocols, such as HSRP and VRRP* _! I% o/ j, M* U4 X* N% }9 p
3.4.d Describe multicast protocols, such as PIM and IGMP v2/v35 `9 ^. X9 [. _" L! T9 h
3 s5 P/ U5 \# G1 U第四部分 network assurance 10%
2 C0 l! y+ a2 j2 n7 g4.1 Diagnose network problems using tools such as debugs, conditional debugs, trace route, ping, SNMP, and syslog
# w/ u2 F e) P1 `$ b9 Y& }0 D4.2 Configure and verify device monitoring using syslog for remote logging. x; @+ {" J7 \
4.3 Configure and verify NetFlow and Flexible NetFlow
0 J5 N3 K4 c& k P2 }4.4 Configure and verify SPAN/RSPAN/ERSPAN9 D- c L" T: E6 z8 z6 W5 m
4.5 Configure and verify IPSLA8 o' o5 u0 L/ S: ?1 Y8 Z
4.6 Describe Cisco DNA Center workflows to apply network configuration, monitoring, and management
9 R4 `! M, T% E ]1 u" W' f8 Y9 {4.7 Configure and verify NETCONF and RESTCONF& G9 l( H% q$ T. K; w% V" f
1 y$ V" T% x" x' }
第五部分 security 20%" v; e( j7 |' I7 g y" v
5.1 Configure and verify device access control
. d) S; X) y; R, s0 |8 |5.1.a Lines and password protection
. Y6 Y6 t8 q# q* B5.1.b Authentication and authorization using AAA
% | z4 {* L8 M! u" I5.2 Configure and verify infrastructure security features/ V! s8 j6 w. H8 x% B' K" M/ X* X
5.2.a ACLs
! \6 B, y/ C5 \5.2.b CoPP o* p/ h8 r+ i" _2 r
5.3 Describe REST API security
0 z& D/ o" ?0 f" s5.4 Configure and verify wireless security features
3 a+ Q$ f9 y0 c6 @8 y5 a3 Y5.4.a EAP' A* z5 A% t% [. s$ `
5.4.b WebAuth
0 k/ N4 T, a- V4 a; D& R5.4.c PSK/ I7 m) D( i& W# B3 q; P: ^% n h
5.5 Describe the components of network security design
' t9 ]6 B* P# V- L5.5.a Threat defense
) R+ P! w0 o* @7 C. N5.5.b Endpoint security1 x/ q4 Y0 ]' J* k7 w; p* d/ ?
5.5.c Next-generation firewall. S( |+ m( i a
5.5.d TrustSec, MACsec
) F0 y& N- W' `* l7 r+ G5.5.e Network access control with 802.1X, MAB, and WebAuth
& }3 g) ]/ X A% f! h
1 \8 R9 y. V: j- C/ X& a第六部分 automation 15%
3 q2 h& x6 u# i, X" V6.1 Interpret basic Python components and scripts
" k7 J3 q5 e; {7 a2 E6.2 Construct valid JSON encoded file. E9 n& Y# q% L
6.3 Describe the high-level principles and benefits of a data modeling language, such as YANG* r c+ M4 ?6 R5 O d9 h
6.4 Describe APIs for Cisco DNA Center and vManage
% J" G7 G. ]7 d' o6.5 Interpret REST API response codes and results in payload using Cisco DNA Center and RESTCONF
, X8 M; P* r- w4 i$ s2 _6.6 Construct EEM applet to automate configuration, troubleshooting, or data collection2 Q( n) d( Z2 v6 I" W
6.7 Compare agent vs. agentless orchestration tools, such as Chef, Puppet, Ansible, and SaltStack
- c" z$ N3 e+ O" I( C
/ [/ B3 p, S" D A$ g- c- K) G/ c9 P! z& c6 @1 N1 O+ r0 r
, i! \" J( t8 `$ f! [; w( N' @来源: CCNP ENCOR(350-401)考试大纲(必考科目) |
|