CCIE Enterprise Infrastructure

Exam format

Cisco logo

CCIE Enterprise Infrastructure Exam Format

CCIE-ENT-INF

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The Cisco CCIE Enterprise Infrastructure certification is an expert-level program that validates advanced knowledge and skills in designing, deploying, operating, and optimizing complex enterprise network infrastructures. It covers traditional routing and switching, SD-Access, SD-WAN, network automation, security integration, and network assurance. Candidates must pass both a rigorous written exam (400-201 ENCOR) and a grueling eight-hour hands-on lab exam (LAB v1.1+). This certification is the gold standard for network engineers, architects, and consultants seeking the highest level of technical credibility in the enterprise networking domain. The program reflects the industry shift toward intent-based networking, software-defined architectures, and programmable infrastructure. CCIE holders are recognized globally as elite networking experts capable of handling the most complex network challenges, from migration strategies to end-to-end automation.

100 questions
480 min
83% to pass
6 domains

Exam facts at a glance

The published specifications for this certification.

SpecificationValue
Questions100
Time limit480 minutes (288s per question)
Passing score83% — Not published by the provider (Cisco does not publish the cut score in advance; score reports show the passing score per exam)
Domains6
LevelExpert
Question bank here100 questions
Published formatLAB EXAM (CCIE Enterprise Infrastructure v1.1): "Duration: 8 hours"; official lab format = two fixed-sequence modules - "Module 1: Design (3 hours)" and "Module 2: Deploy, Operate and Optimize (5 hours)"; question/task counts are Not published by the provider. WRITTEN QUALIFYING EXAM (separate, 350-401 ENCOR, covered in another record): "Duration: 120 minutes", "Prerequisites: None", "Grading is pass/fail and results are available online within 48 hours".
SourceOfficial exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

DomainWeightTopicsPractice Qs
Security Services15%
  • Network security fundamentals (control plane policing, management plane protection)
  • Cisco TrustSec, MACsec, 802.1X, MAB
  • Zone-based firewall (ZBFW)
  • +4 more
15
Network Infrastructure20%
  • Layer 2 technologies (switching, VLANs, STP, MST, RSTP)
  • Layer 3 technologies (OSPF, EIGRP, BGP, route redistribution, summarization)
  • Multicast protocols (IGMP, PIM)
  • +4 more
20
Automation and Programmability15%
  • Automation workflows with Python (paramiko, netmiko, NAPALM)
  • Git, version control and CI/CD pipelines for network changes
  • Cisco DevNet certification overlap
  • +3 more
15
Software-Defined Infrastructure15%
  • Cisco SD-Access architecture (fabric, DNA Center, ISE integration)
  • Cisco SD-WAN (vEdge, vManage, vSmart, control policies, data policies)
  • Cisco SD-WAN security (app-aware routing, cloud on-ramp)
  • +3 more
15
Network Assurance and Optimization15%
  • Network monitoring (NetFlow, IP SLA, SNMP, syslog, telemetry)
  • Advanced troubleshooting methodologies (layered approach, debugging)
  • Performance optimization (TCP tuning, buffer tuning, path MTU discovery)
  • +3 more
15
Transport Technologies and Solutions20%
  • MPLS and MPLS L3VPN (label distribution, VPNv4, route targets)
  • MPLS L2VPN (VPWS, VPLS, FEC)
  • Segment Routing (SR-MPLS, SRv6 fundamentals)
  • +3 more
20

The heaviest domain is Security Services at 15%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: Active. Sequence: pass the qualifying written exam 350-401 ENCOR first (official wording: "To earn your certification, you'll take a core exam and a lab exam"), then the 8-hour lab exam; Cisco's official at-a-glance states "you must take and pass your lab exam within 3 years of passing your core exam"; certification is "valid for three years" renewable with Continuing Education credits or by retaking exams, no training course is required. Current lab blueprint is v1.1 (v1.0 lab went live 27 April 2020; v1.1 is a minor revision with <20% technical change and no format change), while the ENCOR written exam moved to v1.2 with wireless content removed (first date to test 19 March 2026; v1.1 last date to test 18 March 2026). Announced change: the AI Deploy-Operate-Optimize (AI DOO) module was officially announced 20 May 2026 - expert-level lab format becomes 3 modules/8 hours effective June 2027 starting with CCIE Data Center, with the CCIE Enterprise Infrastructure AI DOO release scheduled February 2028 (to be confirmed). Caveat: legacy-style cisco.com/c/en/us/training-events/... URL patterns return 404 (verified); lab price and duration are published on the certification page, not on a separate exam page. Official exam page

More about the CCIE Enterprise Infrastructure exam

Explore the rest of this page series: format, cost, difficulty, requirements and how to prepare.

Exam costPass rateWho can take itStudy plan

Related certifications

Explore other certifications in the same category and see how they stack up.

Avaya Messaging Technical Associate Support
Avaya Messaging Technical Associate Support
AvayaAvaya
CCNP Enterprise
CCNP Enterprise
CiscoCisco
Cisco Certified DevNet Associate
Cisco Certified DevNet Associate
CiscoCisco
CompTIA A+ (Core 1)
CompTIA A+ (Core 1)
CompTIACompTIA
CompTIA A+ (Core 2)
CompTIA A+ (Core 2)
CompTIACompTIA
Windows Server Hybrid Admin (Advanced)
Windows Server Hybrid Admin (Advanced)
MicrosoftMicrosoft

Frequently asked questions

Everything you need to know about the CCIE Enterprise Infrastructure exam.