ENAUTO 300-435 study plan
ENAUTO 300-435 · Give each week a clear focus.
8 weeks · About 6 hours per week
Network Programmability Foundation & Automate APIs and Protocols
Set up a local lab (Python 3 venv, Git repo, Postman or curl, a reserved sandbox or DevNet always-on IOS XE device) and verify connectivity with one successful API call
Explain and demonstrate the difference between data modeling formats (YAML, JSON, XML) by converting one sample interface inventory between all three and validating each with a parser
Describe the request/response anatomy of REST (methods, status codes, headers, auth) and annotate a real captured exchange from your lab
Write and run a Python script that issues a GET and a PUT against a REST endpoint, handles errors, and logs results
Map every domain objective in the official exam blueprint to a study artifact you will produce in weeks 2-8
Your checkpoint
A Git repository containing a working lab README, the three-format conversion script, and the annotated REST capture, with a one-page blueprint-to-artifact mapping table.
Automate APIs and Protocols & Network Programmability Foundation
Implement authentication flows against a controller API: basic auth, token-based auth with refresh, and API key headers, and document when each is appropriate
Consume a paginated REST API in Python, following continuation tokens or offset parameters until all pages are retrieved
Compare REST, NETCONF, RESTCONF, and gRPC/gNMI for transport, encoding, and typical use case, and choose one per scenario
Build a small Python client module with retry/backoff and rate-limit handling, then unit test it against mocked responses
Explain model-driven vs CLI-driven interfaces and identify which YANG models (native, openconfig, IETF) your lab device supports
Your checkpoint
A reusable Python API client library with passing unit tests plus a comparison matrix (REST vs NETCONF vs RESTCONF vs gNMI) validated against your own lab calls.
Network Device Programmability & Automate APIs and Protocols
Enable and verify model-driven programmability on a lab device (NETCONF over SSH, RESTCONF over HTTPS) and capture a successful session for each
Retrieve and modify device configuration using NETCONF with ncclient, including a candidate-datastore commit and a confirmed rollback
Explore a YANG module tree with pyang or a similar tool and extract the exact path needed for one interface and one routing operation
Perform equivalent configuration changes via RESTCONF and compare payloads with the NETCONF version
Write a Python script that configures an interface end-to-end from YANG-modeled data and verifies the resulting state
Your checkpoint
A side-by-side NETCONF and RESTCONF configuration script that changes and verifies one interface, with the YANG paths documented in the repo.
Network Device Programmability & Automate APIs and Protocols
Implement streaming telemetry with gRPC dial-out or dial-in on the lab device and visualize one metric
Parse structured and unstructured device output (JSON, XML, and CLI text) into a normalized data structure with a tested parser
Automate device backup and configuration diffing with a Python script and schedule it
Use Ansible or a comparable tool to push an idempotent configuration change and prove a second run reports no changes
Diagnose two deliberately broken automation runs (bad YANG path, wrong encoding) and record root cause and fix
Your checkpoint
A telemetry dashboard or log sample plus an idempotent automation playbook and a written postmortem for two debugging exercises.
Cisco DNA Center
Describe Cisco DNA Center architecture and the intent-based workflow from design to policy to assurance, and diagram it in your own words
Authenticate to the DNA Center API (token-based) and enumerate sites, devices, and templates with Python
Create and deploy a day-N template or configuration to a device through the API and verify compliance afterward
Query assurance and health endpoints and export device/client health metrics to a file
Interpret the difference between the intent API and the integration/ITSM flow and identify which endpoints support each
Your checkpoint
A Python notebook or script set that authenticates, lists inventory, deploys a template, and exports an assurance health report, with outputs saved to the repo.
Cisco DNA Center & Cisco SD-WAN
Automate a full DNA Center change workflow: discover or onboard a device, assign it to a site, apply a template, and confirm success via API
Explain Cisco SD-WAN (Viptela) architecture components (vManage, vSmart, vBond, vEdge/cEdge) and the control vs data plane roles
Authenticate to the vManage API and retrieve device inventory, templates, and alarms with Python
Compare DNA Center and SD-WAN controller APIs for auth, resource model, and templating approach
Document failure modes you encounter (auth expiry, 4xx payload errors) with the fix for each
Your checkpoint
An end-to-end DNA Center onboarding-and-template script plus a vManage inventory/alarm retrieval script, both committed with sample outputs.
Cisco SD-WAN
Create or modify an SD-WAN feature template and a device template via the vManage API and attach it to a device
Push a policy or configuration change through the SD-WAN API and verify it in the running config or monitoring endpoints
Use the SD-WAN API to collect interface, BFD, and control-connection status and summarize overlay health
Automate a rollback or template-detach procedure and confirm the device returns to the prior state
Explain SD-WAN security and segmentation concepts (VPNs, segmentation, policy) and how they appear in the API model
Your checkpoint
A working SD-WAN automation script that applies a template change, verifies overlay health, and rolls back, with a before/after evidence log.
Network Programmability Foundation & Automate APIs and Protocols & Network Device Programmability & Cisco DNA Center & Cisco SD-WAN
Re-run every weekly deliverable from a clean environment and fix anything that no longer works
Complete two timed practice sets covering all five domains and record per-domain accuracy
Re-study the two weakest domains using your own notes and artifacts rather than new material
Write a one-page cheat sheet of API auth patterns, YANG/NETCONF/RESTCONF commands, and DNA Center/SD-WAN endpoint families
Rehearse explaining three of your automation projects aloud in exam-style scenario terms
Your checkpoint
A clean-room rerun log, a scored practice-set report with per-domain accuracy, and a final one-page cheat sheet committed to the repo.
Milestones
Week 2: You can authenticate to a REST API, handle pagination and errors, and explain REST vs NETCONF vs RESTCONF vs gNMI without notes.
Week 4: You have made real configuration changes to a lab device via NETCONF and RESTCONF and pushed an idempotent change with an automation tool.
Week 6: You have completed a DNA Center workflow end-to-end via API and can retrieve SD-WAN inventory and alarms from vManage programmatically.
Week 8: All eight deliverables rerun cleanly, practice scores show no domain below your target threshold, and the cheat sheet is complete.