What is CCNA? CCNA, or Cisco Certified Network Associate, is...
Read MoreWhat is CCNP?
CCNP, or Cisco Certified Network Professional, is a networking certification offered by Cisco.
CCNP offers various specializations for candidates.
It has one core exam and one concentration exam. The core exam covers the basic fundamentals of the specialization you choose, while the concentration exam enables you to go more in-depth.
Currently, Cisco offers the following tracks for the CCNP certification.
- CCNP Enterprise
- CCNP Data Center
- CCNP Security
- CCNP Service Provider, and
- CCNP Collaboration
The demand for this certification is increasing, as companies worldwide move their systems to the Cloud.
According to Robert Half’s Technology Salary Guide report, CCNP is one of the most valuable certifications in the world.
According to Global Knowledge, one-third of IT professionals in North America identified Cisco to be their favorite company. As a result, CCNP has become one of their favorite certifications.
Each CCNP exam, core and concentration, costs $300 US dollars.
The exam contains multiple-choice questions, drag & drop questions, fill-in-the-blank & scenario-based questions.
In the scenario-based questions, you will be given a detailed case study or scenario and you will be expected to choose your answers based on that scenario. This type of question is meant to check your practical approach towards the networking concepts covered in the certification.
CCNP is valid for three years.
Now, let’s look at the…
Skills Measured by the CCNP Certification
CCNP covers a wide range of topics, depending upon which core and concentration exam you choose.
Let’s take a look at the skills measured by each core exam.
CCNP Enterprise
Architecture (Weightage: 15%)
- Design principles in Enterprise Networks
- Design Principles of WLAN deployment
- On-premises and cloud infrastructure deployments
- Principles of the Cisco SD-Access solution
- Wired and wireless QoS, and
- Switching mechanisms (hardware and software)
Virtualization (Weightage: 10%)
- Virtualization technologies
- Hypervisors, and
- Network virtualization concepts
Infrastructure (Weightage: 30%)
- Layer 2
- Troubleshooting 802.1q trunking protocols
- Troubleshooting static and dynamic EtherChannels
- Spanning Tree Protocols (RSTP and MST)
- Routing concepts of EIGRP and OSPF
- Learning OSPF environments
- Configuration of eBGP between directly connected neighbors
- Wireless, and
- Layer 1 concepts, such as RF power, RSSI, SNR, interference noise, band and channels, and wireless client devices capabilities
Network Assurance (Weightage: 10%)
- Diagnose network problems using tools such as debugs, conditional debugs, trace route
- Using device monitoring using syslog for remote logging
- Using NetFlow and Flexible NetFlow
- Using SPAN/RSPAN/ERSPAN
- IPSLA, and
- Learning to describe Cisco DNA Center workflows
Security (Weightage: 20%)
- Device access controls
- Using infrastructure security features
- REST API security, and
- Wireless security features
Automation (Weightage: 15%)
- Python components and scripts
- JSON encoded files, and
- Interpreting REST API response codes and results in payload using Cisco DNA Center and RESTCONF
For a more complete curriculum, download the latest CCNP Enterprise exam objectives.
CCNP Data Center
Network (Weightage: 25%)
- Routing Protocols
- Analysis of packet flow
- Cloud service deployment models
- Network configuration management
- Infrastructure monitoring such as NetFlow and SPAN, and
- Network assurance concepts such as streaming telemetry
Compute (Weightage: 25%)
- Cisco Unified Compute System Rack Servers
- HyperFlex Infrastructure Concepts and benefits
- Firmware and software updates and their impacts on B-Series and C-Series servers
- Compute configuration management, and
- Infrastructure monitoring such as SPAN and Intersight
Automation (Weightage: 15%)
- Automation and scripting tools, and
- Evaluation of automation and orchestration technologies
Security (Weightage: 15%)
- Applying Network Security
- ACI contracts and microsegmentation
- Keychain authentication, and
- Storage security
Storage (Weightage: 20%)
- Storage Network
- Describe NFS and NAS concepts
- Describe software updates and their impacts, and
- Implement infrastructure monitoring
For a more complete curriculum, check out the latest CCNP Data Center exam objectives.
CCNP Security
Security Concepts (Weightage: 25%)
- Common threats against on-premises and cloud environments
- Common security vulnerabilities
- Cryptography components such as hashing, encryption, PKI, SSL, IPsec, NAT-T IPv4 for IPsec
- VPN and remote access VPN deployment types
- Security intelligence authoring, sharing, and consumption
- North Bound and South Bound APIs in the SDN architecture
- DNAC APIs for network provisioning, optimization, monitoring, and troubleshooting, and
- Basic Python scripts used to call Cisco Security appliances APIs
Network Security (Weightage: 20%)
- Network security solutions that provide intrusion prevention and firewall capabilities
- Deployment models of network security solutions and architectures
- NetFlow and Flexible NetFlow records
- Configuring network infrastructure security methods
- Segmentation, access control policies, AVC, URL filtering, and malware protection
- Management options for network security solutions, and
- Configuring AAA for device and network access
Securing the Cloud (Weightage: 15%)
- Cloud security basics
- Public, private, hybrid, and community clouds
- Cloud service models: SaaS, PaaS, IaaS
- Patch management in the Cloud
- Application and data security in cloud environments, and
- Cloud logging and monitoring methodologies
Content Security (Weightage: 15%)
- Traffic redirection
- Web proxy authentication
- Cloud-based email and web solutions (ESA, CES, WSA), and
- Cisco Umbrella
Endpoint protection and detection (Weightage: 10%)
- Compare Endpoint Protection Platforms (EPP) and Endpoint Detection & Response (EDR) solutions
- Antimalware, retrospective security, Indication of Compromise (IOC), antivirus, dynamic file analysis, and endpoint-sourced telemetry
- Endpoint-based security
- Importance of a multifactor authentication (MFA) strategy, and
- Endpoint patching strategy
Secure Network Access, Visibility and Enforcement (Weightage: 15%)
- Identity management and secure network access
- Network access device functionality such as 802.1X, MAB, WebAuth, and
- Network access with CoA
For a more complete curriculum, download the latest CCNP Security exam objectives.
CCNP Service Provider
Architecture (Weightage: 15%)
- Service provider architectures
- Cisco network software architecture
- Service provider virtualization
- QoS architecture
- Control plan security
- Management plane security, and
- Data plane security
Networking (Weightage: 30%)
- IS-IS (IPv4 and IPv6)
- OSPF (v2 and v3)
- BGP path selection algorithm
- Routing policy language and route maps (BGP, OSPF, IS-IS)
- Routing protocols
- IPv6 transition (NAT44, NAT64, 6RD, MAP, and DS Lite), and
- High availability
MPLS and Segment Routing (Weightage: 20%)
- Implementing MPLS
- Traffic engineering, and
- Segment routing
Services (Weightage: 20%)
- VPN services
- Configuring L2VPN and Carrier Ethernet
- L3VPN
- Multicast services, and
- QoS services
Automation (Weightage: 15%)
- Programmable APIs used to include Cisco devices in network automation
- Configuring a Cisco device using a REST API
- Network Services Orchestration (NSO)
- Data analytics and model-driven telemetry in service provider, and
- SNMP (v2c/v3)
For a more complete curriculum, download the latest CCNP Service Provider exam objectives.
CCNP Collaboration
Infrastructure and Design (Weightage: 20%)
- Licensing (Smart, Flex)
- Sizing
- Security (certificates, SRTP, TLS)
- Edge devices in the Cisco Collaboration architecture such as Expressway and Cisco Unified Border Element
- Cisco Collaboration solutions, and
- Troubleshooting network components in a Cisco Collaboration solution
Protocols, Codecs, and Endpoints (Weightage: 20%)
- Troubleshooting elements of a SIP conversation
- Configuring codec negotiations
- Deploy SIP endpoints, and
- Troubleshoot collaboration endpoints
Cisco IOS XE Gateway and Media Resources (Weightage: 15%)
- Configuring voice gateway elements
- Configure ISDN PRI/BRI
- Troubleshooting ISDN PRI/BRI
- Identification of media resources for a given scenario (hardware and software)
Call Control (Weightage: 25%)
- Cisco Unified Communications Manager digit analysis process
- Route patterns (traditional and +E.164 format)
- Translation patterns, and
- Mobile and Remote Access (MRA)
QoS (Weightage: 10%)
- Understanding problems that can lead to poor voice and video quality
- QoS requirements
- Class models for providing QoS on a network, and
- DiffServ values as it pertains to collaboration
- QoS trust boundaries and their significance in LAN-based classification and marking
- Location-based CAC bandwidth requirements, and
- LLQ (class map, policy map, service policy)
Collaboration Applications (Weightage: 10%)
- Cisco Unity Connection mailbox and MWI
- Cisco Unity Connection SIP integration options to call control
- Cisco Unity Connection call handlers, and
- Deployment of Cisco Jabber on premises
For a more complete curriculum, download the latest CCNP Collaboration exam objectives.
Now, let’s look at the…
Pre-requisites for the CCNP
Cisco announced important changes to the structure of the CCNP certification in 2020. These changes removed the requirement of pre-requisites for taking the CCNP exam.
Anyone can attempt the certification exams whenever they want. However, as CCNP is an advanced-level certification, it’s recommended you have at least a basic understanding of the concepts covered in the certification.
According to Cisco, CCNP candidates usually have a minimum of three years of experience in a domain related to the CCNP certification track chosen.
We would suggest that you first get your CCNA before attempting the CCNP.
How to Prepare for the CCNP Certification Exam
There are several options which you can use to prepare for your CCNP exam. Next we’ll take a look at these options.
Self-Study Resources
There are ample self-study resources available to prepare for CCNP.
For example, you could use YouTube if you prefer to watch videos to learn. You can also use guided training, quizzes, self-paced courses, and books. Let’s take a look at some of the best self-study resources for CCNP.
Books
Using books to prepare for the CCNP exam will give you an in-depth understanding of the exam objectives.
Cisco has published its own books for the core and concentration exams.
If you don’t like reading books, you can choose other self-study methods.
Video Training
Video is an excellent option to prepare for the CCNP exam. The best thing about video is that it helps you understand difficult concepts in an easy way.
Cisco Learning Network has paid video training that covers all CCNP exams. However, these programs are expensive. For example, a training program for the CCNP Data Center exam costs over $2000 US dollars.
You can find free video training for CCNP on YouTube. There are several people with proven expertise who have made videos for this certification.
If you’re using video training, make sure you have the CCNP exam objectives in front of you. This will ensure that you don’t miss any important concepts.
Instructor-Led Training
If you want live training by an expert, Cisco offers instructor-led training courses too. Cisco partners with third-party training providers to deliver instructor-led classes.
If you don’t want to prepare for the CCNP exam on your own, and want to ask questions to an expert, you can consider instructor-led training.
Keep in mind that instructor-led training is often very expensive. For example, one CCNP class delivered by the Cisco Learning Network, that runs for four days costs $4000 US dollars. This could be out of budget for many people.
Practice Tests
CCNP has many practical and scenario based questions. It’s very important that you utilize practice tests before the actual exam.
Using a Google search you can find several websites that offer CCNP practice tests.
You can also use the Learn Cisco website for free CCNP practice tests.
Practice Labs
The CCNP exam extensively utilizes lab questions. The exam has several questions where you have to solve a given problem based on a scenario.
You can use Cisco’s practice lab bundle which also includes instructional videos for the labs. However, the cost of this bundle is over $1000.
Using Boson and GNS3 are also helpful in preparing for Cisco CCNP labs questions.
Now, let’s look at…
What jobs you can get with CCNP certification
You can become eligible for many IT job roles with a CCNP certification.
CCNP has evolved significantly over the last few years.
With its many flavors, CCNP enables you to get jobs in areas like data center, cybersecurity, automation, and software-based security systems.
Here are some of the job roles you should be considering after getting CCNP certified:
- Network Administrator
- Cybersecurity Expert
- Technical Support Engineer
- Network Engineer
- Network/Desktop Support Engineer
- Network Security Associate
- System Administrator
- Security Architect, and
- Network Architect
Let’s talk about how much money you can make with the…
CCNP Certification
CCNP could lead to a career with high salaries and growth.
According to ZipRecruiter, the annual median salary for CCNP-related jobs is around $113,901 US dollars.
According to PayScale, CCNP-related jobs on average have an annual salary of $95,364.
Salaries, however, vary a lot based on geography, skillset, experience, company, and market circumstances.
Let’s see what other people think about this certification. Here are a few…
Observations from Successful CCNP Holders in the Industry
The best advice comes to people who have passed the certification. Let’s see how they prepared, their experience, and changes they observed in their career.
Here’s a comment from Reddit user “FuchsiaLobster”
I roughly spent 1.5 hours per day studying for the first 15 days. 2 hours per day when I started to use flash cards, which grew to approximately 3 hours per day once the review stack reached its peak. Approximately 2 hours per day was added on top of the 3 hours once I started GNS3 labs. On the last 3 days using Boson, I probably studied for approximately 4 hours per day. During the month, I was also working my standard 9-5 hours and I have 10 months experience, mainly working with switching and access layer technology.
So, with all that said, I just want to add a disclaimer. I have an average learning rate and a month to learn and have a comprehensive understanding of all the technologies covered in the CCNP Route was impossible for me. To be honest, I don’t believe I have truly earned this as I will have to do a considerable amount of revision on this material to properly utilise what I’ve learnt in my job. I would strongly suggest that those of you who have a similar learning rate and want to have a proper understanding of the CCNP Route material should pace yourself slower than myself.
So, learning enough to get by in a month is possible for the CCNP Route, but I wouldn’t advise it if you want to actually use that knowledge beyond the exam room.
After I went through my weakest areas I took the Boson test again, and once again went through my weakest areas. Overall I did this process about four times for each test.
I made it a point to check the Cisco Learning Objectives for each exam often. If there was something on the list I didn’t think I understood 110% I made it a point too, this methodology was often reflected in my Boson test scores..”
https://www.reddit.com/r/ccnp/comments/9zzm3n/passed_my_ccnp_route_on_first_try_with_a_month_of/
Here’s a comment from Reddit user “kwiltse123”
“Passed ROUTE today by the skin of my teeth (790). I had passed SWITCH back in August after failing it once, so I was far from certain about ROUTE. I felt good about it in some respects, but not in other respects.
I used a combination of all of these as prep:
Boson sim exams
CCNP Official Cert Guide by Kevin Wallace (as part of trilogy)
A Reddit user posted their study notes a while back and it was extremely helpful: https://docs.google.com/document/d/1nefExc63lN821UfTAdAysYRICL3ABB-vLyJot_hoGFU/edit
A small lab of 3x 3750 routers and a few switches and VMs. All remotely accessible via console.
A few other random study sources like a colleagues book about IPv6.”
https://www.reddit.com/r/ccnp/comments/atnnin/passed_ccnproute_300101/
Here’s a comment from Reddit user “debaron54”
“Within two years have tripled my salary and I love life. A big part was certs but it was primarily because I love it and work hard. Certs will get you interviews but your passion and ambition are how you excel and stand out. That guy saying he hates the process is doing it wrong. You should master the materials and you take the exam if you want to prove you have mastered them. I have studied almost all of ccnp security books but have no intention of taking those exams.”
https://www.reddit.com/r/ccnp/comments/7wqw4j/how_did_ccnp_change_your_life/
Here’s a another comment from Reddit user “k2jsv”
“I received my book just after Christmas, and because of an ear infection I was home sick for a week. I was able to read the book cover to cover in that week. I did NOT read it for recall, I read it for recognition. I wanted the feel of the book and used that to help form my study plan.
– Starting 2nd or 3rd week of January I went to the library near me after work, and on the weekends for an hour or two every day. Each day would be about 15 to 20 pages, and taking hand written notes. Over the course of the book, I filled 1 and a half marble notebooks.
– After that second run of the book, I started reading other resources. I have some posted below that I still have links for, otherwise I have a bunch of PDFs. I used all that to fill in gaps on things I didn’t understand. And I would put notes of those gaps in the other half of the second marble notebook.
– Next step. I typed ALL of my notes into order that fit with the blueprint. By this point we were about to go into quarantine which afforded me 2 hours a day that I was not commuting so I was typing notes for almost 4 hours a day. Typing took about 2 and a half weeks. The notes were boiled down into their base concepts.
– Flash cards – I made flash cards of all of the commands in the OCG, a set of definitions from the OCG, and a set for all of the memory tables. I used ANKI and did a session of each set, every day.
Last thoughts. I am not sharing my notes, or flashcards. Here is why. I used someone else’s notes for for the CCNP Wireless Design (old version) and failed it once before passing the second time. I used to be a state instructor to teach EMTs how to be EMTs and people who took their own notes scored higher, and had a higher understanding of the material. It REALLY makes a difference making your own notes and then making your own flashcards from notes and resources. Repetition is the name of the game to truly learn this stuff. I feel I got a little lucky with this test because some of the questions seemed lower level than CCNP to me. But this is a beginning step for me, I am going to move onto ENARSI to firm up my Routing. Routing is my weakness, I live in Wireless and Switching for the last 10 years so I am fluent in those areas”
https://www.reddit.com/r/ccnp/comments/g7hc1j/ccnp_encor_passed/
The Truth About CCNP Certification
The CCNP certification validates your skills in the in-demand fields of networking, security, data center, software-based security, network architecture, automation, and Cloud security.
However, this certification’s main purpose is to solidify your resume, help you get interviews, and eventually land a job.
Having some practical experience will go a long way in helping you land a well-paying job.
Is Cisco CCNP Certification for You?
CCNP is one of the most popular and in-demand certifications. That’s because the objectives it covers are relevant to the industry.
If you already have your CCNA, and are interested in advancing your career in the area of IT networking then the CCNP certification is definitely worth it.