How many questions are on the CCNP Enterprise exam?

The CCNP Enterprise exam has 100 questions, and the vendor's published description is: Not published by the provider; exam duration is 120 minutes.

How long do you have to complete the CCNP Enterprise exam?

You get 120 minutes, which is about 72 seconds per question. The published format is: Not published by the provider; exam duration is 120 minutes.

What score do you need to pass the CCNP Enterprise exam?

The passing score is 83% (Not published by the provider (the widely reported 825 of 1000 figure could not be verified on any official cisco.com page)).

What are the domains on the CCNP Enterprise exam?

There are 6 domains: Security, Automation, Architecture, Virtualization, Infrastructure, Network Assurance. The official weights are Security 15%, Automation 15%, Architecture 15%, Virtualization 10%, Infrastructure 30%, Network Assurance 15%.

How should I use the domain weights when revising?

Weight by percentage, not by domain. 15% is the one where lost points cost you the most, and Certilum scores you per domain so you can see exactly where that is.

Does Certilum have practice questions for the CCNP Enterprise exam?

Yes: 100 questions in our bank for this certification, each tagged to the exam domain it belongs to, with the official domain weights applied.

Exam format

CCNP Enterprise Exam Format

350-401

Everything the official exam blueprint specifies: question count, time limit, scoring and the weight each domain carries. The CCNP Enterprise certification (exam 350-401 ENCOR) validates advanced knowledge in enterprise networking, including dual-stack (IPv4/IPv6) architecture, virtualization, infrastructure (routing, switching, multicast), network assurance, security, and automation. It is a rigorous, practice-oriented exam designed for network engineers who design, implement, manage, and troubleshoot complex enterprise networks. The certification path includes passing the core ENCOR exam plus one concentration exam. Cisco updated this exam in 2024 to emphasize SD-WAN, Cisco DNA Center, network programmability, and security hardening. Candidates must demonstrate hands-on skills in Cisco IOS-XE and SD-Access environments.

100 questions

120 min

83% to pass

6 domains

certilum

Exam facts at a glance

The published specifications for this certification.

Specification	Value
Questions	100
Time limit	120 minutes (72s per question)
Passing score	83% — Not published by the provider (the widely reported 825 of 1000 figure could not be verified on any official cisco.com page)
Domains	6
Level	Professional
Question bank here	100 questions
Published format	Not published by the provider; exam duration is 120 minutes
Source	Official exam specification, published by the vendor

Official domain weights

The percentage of the exam each domain carries. Weight your revision by these numbers, not by what you find hardest.

Domain	Weight	Topics	Practice Qs
Security	15%	Implement and troubleshoot device security (AAA via RADIUS/TACACS+, ACLs, CoPP, port security) Configure secure connectivity (IPsec VPNs, DMVPN, FlexVPN, GETVPN) Implement wireless security (802.1X, WPA2/3, EAP, Rogue AP detection) +2 more	15
Automation	15%	Interpret JSON, XML, YAML, and YANG data models for network configuration Implement automation with Ansible and Terraform for Cisco IOS-XE devices Configure and verify RESTCONF and NETCONF APIs +2 more	15
Architecture	15%	Describe network design principles (hierarchical, modular, Cisco Enterprise Campus Architecture) Analyze high availability and redundancy (FHRP, VRRP, HSRP, StackWise, VSS) Understand WAN connectivity (MPLS, DMVPN, FlexVPN, SD-WAN components) +2 more	15
Virtualization	10%	Describe device virtualization (VRF, VSS, Virtual Switching System) Configure and verify VRF-Lite and VXLAN concepts Understand network virtualization (NFV, LISP, Cisco SD-WAN vEdge and Controllers) +1 more	10
Infrastructure	30%	Configure and verify Layer 2 technologies (STP, RSTP, MST, EtherChannel, port security) Implement and troubleshoot Layer 3 technologies (OSPFv2/v3, EIGRP, BGP for IPv4/IPv6, route redistribution) Configure and verify multicast (PIM, IGMP, MSDP) +2 more	30
Network Assurance	15%	Implement and troubleshoot network management protocols (SNMPv3, syslog, NetFlow, IP SLA) Configure Cisco DNA Center automation (assurance, templates, software image management) Implement and verify switch monitoring (SPAN, RSPAN, ERSPAN) +1 more	15

The heaviest domain is Security at 15%, and that is where lost points cost you the most. Certilum scores you per domain so you can see the difference between a knowledge gap and a formatting problem.

Note from the vendor record: Exam is active: the official Cisco Learning Network CCIE Enterprise page states 'The 350-401 ENCOR exam will undergo a minor update with wireless content removed in version 1.2. First date to test is March 19, 2026. Last date to test using v1.1 is March 18, 2026.' The legacy URL https://www.cisco.com/c/en/us/training-events/training-certifications/exams/current-list/350-401-encor.html returns HTTP 404; the current official page is the /site/us/en/... URL above, which (as checked) still describes v1.1 while the official exam topics page publishes v1.2. Cisco lists 'Prerequisites: None' (CCNA knowledge recommended but not required); CCNP Enterprise requires this core exam plus one concentration exam (e.g. 300-410 ENARSI), and the certification is valid for 3 years with recertification via exam or Continuing Education credits. Score reports show each section score and the passing score for that exam, but Cisco does not publish the cut score in advance. Official exam page