Exam Overview
The Cisco 300-420 ENSLD exam is a concentration exam for the CCNP Enterprise certification. It validates your ability to design enterprise networks, including advanced addressing, routing, campus, WAN, and network services. This exam is intended for network design engineers, network architects, and CCNP Enterprise candidates who want to prove their design skills.
Exam Domains
- Design of Enterprise Networks: Campus, WAN, branch, and data center design principles.
- Advanced Addressing and Routing Solutions: IPv4/IPv6, OSPF, EIGRP, BGP, and route redistribution.
- Advanced Enterprise Campus Networks: VLANs, STP, VXLAN, SD-Access, and high availability.
- WAN for Enterprise Networks: SD-WAN, MPLS, VPN, and WAN optimization.
- Network Services: QoS, multicast, NAT, DHCP, and network management.
Key Concepts & Common Difficulties
- IPv6 design and migration: Candidates often miss dual-stack, tunneling, and address planning nuances. Focus on IPv6 address types, SLAAC, and transition mechanisms like NAT64 and 6to4.
- SD-WAN architecture: The controller roles (vManage, vBond, vSmart) and policy application are commonly confused. Understand the control plane vs data plane and how policies are pushed.
- SD-Access fabric: LISP and VXLAN interaction, border and edge node roles, and underlay/overlay separation are frequently misunderstood. Study the fabric roles and traffic flow.
- QoS design: Mapping business requirements to QoS models (IntServ vs DiffServ) and queuing strategies is often oversimplified. Practice classifying and marking traffic and selecting queuing methods.
- BGP design: Route reflectors, confederations, and path selection are tricky. Learn BGP attributes, communities, and how to design scalable iBGP topologies.
Study Strategy
- Prerequisites: Solid understanding of CCNA-level routing and switching, plus CCNP ENCOR topics. Review OSPF, EIGRP, BGP, and VLANs before diving into design.
- Study order: Start with design fundamentals, then advanced addressing and routing, followed by campus, WAN, and network services. Use Cisco design guides and white papers.
- Practice: Work through design scenarios and case studies. Use official Cisco documentation and online labs to reinforce concepts like SD-WAN and SD-Access.
- Exam-day tips: Read each question carefully, looking for design best practices. Eliminate answers that violate scalability or redundancy. Manage time by flagging difficult questions.
- Review: Focus on weak domains. Create flashcards for key design principles and practice explaining designs to peers.
- Resources: Use Cisco Press books, Cisco Live sessions, and community forums. Stay updated on the latest v1.1 blueprint.
What you'll find here
- 7 highly debated topics with an expert breakdown of every option
- 28 community-verified topics with consensus explanations
- Debate ranking showing which concepts cause the most confusion
Study recommendation
Start with the debated topics — they mark the areas where candidates most often get the answer wrong on the real exam.
Featured analysis
Most debated concepts with community insightWhich three key differentiators that DNA Assurance provides that our…
The three claimed differentiators are Time Travel + proactive guided remediation + hybrid (on-prem/cloud) analytics. Apple Insights exists but the…
Deep analysisWhich two activities should occur during an SE's discovery process? (Choose…
Discovery = learn + align (current state, map innovation). Building reference architectures and applying the PPDIOO lifecycle model happen in the…
Deep analysisWhich option will help build your customers platform during the discovery phase?
Discovery -> POV report. Design artifacts (detailed/high-level) and the business case belong to other phases, not the discovery output that builds…
Deep analysisWhich is a function of the Proactive Insights feature of Cisco DNA Center…
Proactive Insights = trend analysis that highlights problem areas. Single-user context (Client 360), packet path (Path Trace), and synthetic tests…
Deep analysisWhich three ways are SD-Access and ACI Fabric similar? (Choose three.)
The shared DNA is overlay segmentation (VNID) + SGT-driven group policy. EPGs belong to ACI only; SD-Access uses Virtual Networks plus SGTs, not EPGs.
Deep analysisAn engineer is designing a QoS solution for a customer. The customer's internet…
Shaping is an egress (outbound) tool; policing is an ingress (inbound) tool. Match each to its direction: shape outbound, police inbound.
Deep analysis