ENAUTO logo
Focused certification exam prep
Start practice

ENAUTO Exam Domains 2026: Complete Guide to All 5 Content Areas

TL;DR
  • The 300-435 ENAUTO v2.0 blueprint has five domains totaling 100%, effective February 3, 2026.
  • Controller-Based Network Automation is the heaviest domain at 30%, followed by Device-Level Network Automation at 25%.
  • AI in Automation is a new 15% domain; do not treat it as an afterthought.
  • The exam runs 90 minutes through Pearson VUE and costs USD 300 plus applicable tax.

The ENAUTO v2.0 Blueprint at a Glance

The Automating and Programming Cisco Enterprise Solutions exam (300-435 ENAUTO) is Cisco's concentration exam for enterprise network automation and programmability. Version 2.0 took effect on February 3, 2026, and it reorganizes the objectives into five domains that together account for 100% of the scored content. If you studied from an older blueprint, the shape of the exam has changed enough that you should re-read the official objectives rather than assume your notes still map cleanly.

Here is the complete weighting, using the domain names exactly as the v2.0 objectives list them:

DomainNameWeight
1Network Automation Foundation10%
2Device-Level Network Automation25%
3Controller-Based Network Automation30%
4Operations20%
5AI in Automation15%

The scope source for everything in this guide is Cisco's published exam objectives for Automating and Programming Cisco Enterprise Solutions v2.0 (300-435). Where this article and Cisco's current blueprint ever disagree, the blueprint wins. Note also that some prose on Cisco's exam page still carries legacy DevNet wording, so rely on the current objectives document and the CCNP Automation program page for the authoritative picture.

This article is the domain-by-domain companion to our broader ENAUTO study guide. If you are still deciding whether the exam fits your plans, start with what the ENAUTO certification actually is and come back here once you are committed.

How the Weights Should Shape Your Prep

Two domains, Controller-Based Network Automation (30%) and Device-Level Network Automation (25%), together make up 55% of the exam. Add Operations at 20% and you have three-quarters of the content sitting in hands-on automation work rather than conceptual material. That distribution tells you what kind of exam this is: it rewards candidates who have actually called APIs, parsed responses, and reasoned about controller behavior, not candidates who memorized definitions.

Weights are not a ranking of difficulty: A 10% domain can still cost you points if your fundamentals are shaky, because foundation concepts (data formats, API behavior, version control) underpin the questions in every other domain. Treat Domain 1 as a prerequisite skill set that is tested lightly in isolation but heavily by implication.

The exam is delivered as a proctored written test, closed-book, with Cisco's confidentiality rules in force. Expect scenario-style items that ask you to interpret a code snippet, an API response, or a described workflow and pick the correct behavior or next step. For a candid look at how that format feels in practice, see our breakdown of how hard the ENAUTO exam really is.

Domain 1: Network Automation Foundation (10%)

The smallest domain covers the shared vocabulary and tooling that the rest of the exam assumes. Do not skip it because of its weight. Questions in the larger domains routinely depend on you reading JSON or YAML fluently, understanding REST semantics, and knowing how automation code is managed and tested.

Foundation Topics to Master

Think of this domain as the grammar of the exam. If you cannot read the payloads and scripts in later questions quickly, you will lose time you need elsewhere in a 90-minute window.

  • Data formats and encoding: reading and constructing JSON, XML, and YAML structures
  • REST API fundamentals: methods, status codes, headers, authentication patterns, and pagination
  • Python scripting basics as applied to network tasks, including parsing and manipulating structured data
  • Version control and collaborative workflows for automation code
  • Automation design principles: idempotency, repeatability, and testing before pushing changes

What the questions tend to look like

Foundation items are often short: a snippet of structured data and a question about what a particular element represents, or a description of an HTTP exchange and a question about what status code or method applies. They are fast points if your basics are solid and slow points if they are not. Spend your time here early so that fluency carries into the heavier domains.

Domain 2: Device-Level Network Automation (25%)

This domain focuses on automating individual network devices directly, without relying on a central controller. It is the second-largest slice of the exam and the place where model-driven programmability concepts concentrate.

Device-Level Automation Topics

Expect to move between protocols, data models, and tooling, and to justify which approach fits a given scenario.

  • Model-driven programmability on Cisco platforms: YANG data models and how they describe configuration and operational state
  • NETCONF and RESTCONF: operations, transport, and when each is appropriate
  • gNMI and model-driven telemetry for streaming operational data from devices
  • On-box and off-box automation approaches, including scripting that runs on the device versus from an external host
  • Configuration management tools and how they push desired state to devices
  • Interpreting RPC messages and responses, including error handling

Where candidates lose points

The most common trap is confusing what a protocol does with the data model it carries. YANG describes structure; NETCONF and RESTCONF are the mechanisms for reading and writing that structure. Questions are written to see whether you can keep those layers separate. A second trap is telemetry: knowing the difference between polling a device and subscribing to streamed updates, and recognizing when each makes sense, comes up repeatedly.

Practice tip for Domain 2: Do not just read about NETCONF operations. Send a get-config and an edit-config against a lab or sandbox device and inspect the XML that comes back. The exam expects you to recognize well-formed requests and to spot what is wrong with a malformed one.

Domain 3: Controller-Based Network Automation (30%)

This is the heaviest domain and the one that most deserves your calendar. Controller-based automation means operating the network through the APIs of a management platform rather than device by device. At 30% of the exam, a weak showing here is very difficult to offset elsewhere.

Controller-Based Topics

Know what each controller platform is responsible for, how its API is structured, and how to build workflows around it.

  • Cisco Catalyst Center (formerly DNA Center): intent APIs, device and site management, templates, and assurance data
  • Cisco SD-WAN (Catalyst SD-WAN) manager APIs: authentication, device and template operations, and monitoring
  • Cisco Meraki Dashboard API: organizations, networks, devices, and configuration through REST calls
  • Authentication flows for each platform, including token handling and session behavior
  • Asynchronous API patterns: submitting a task, polling for completion, and handling the result
  • Cisco NSO and other orchestration concepts at the level the blueprint describes

Think in workflows, not endpoints

Questions in this domain rarely ask you to recall a single URL. They describe a goal, such as onboarding devices, applying a template, or retrieving health data, and ask which sequence of API actions accomplishes it or which part of a script is wrong. That means you need a working mental model of each controller's object hierarchy and its authentication handshake, not a memorized endpoint list.

Key Takeaway

Give Domain 3 roughly a third of your total study hours. Build at least one small script per platform that authenticates, retrieves a resource list, and handles an asynchronous task. Hands-on repetition here pays back more than any other single activity in your preparation.

Because this domain carries so much weight, it is also where a quality set of practice questions makes the biggest difference. You can test your controller knowledge with scenario-based items on our ENAUTO practice test site.

Domain 4: Operations (20%)

Operations moves beyond building automation to running it. This domain covers what happens after the script works: monitoring, validation, troubleshooting, and keeping automated environments reliable and secure.

Operations Topics

The questions here reward a practitioner's judgment about what can go wrong in production and how to detect and recover from it.

  • Network monitoring and telemetry consumption, including turning streamed or polled data into actionable signals
  • Troubleshooting failed automation: reading logs, interpreting API error responses, and isolating whether a fault is in code, credentials, or the network
  • Pipeline and workflow concepts for testing and validating changes before they reach production
  • Security considerations for automation, including credential handling and least-privilege access to APIs
  • Change validation and rollback thinking, and confirming that intended state matches actual state

Troubleshooting is a reading skill

Many Operations items present a log excerpt, an HTTP error, or a traceback and ask you to identify the cause or the corrective action. Practice reading error output quickly: a 401 versus a 403, a malformed payload versus a missing field, a timeout versus a refused connection. The faster you can classify the failure, the faster you reach the right answer.

Domain 5: AI in Automation (15%)

AI in Automation is the domain that makes v2.0 feel different from earlier versions of this exam. At 15%, it is larger than the Foundation domain and not far behind Operations, so it deserves deliberate study rather than a last-minute skim.

AI in Automation Topics

The emphasis is on applying AI capabilities within network automation workflows, and on understanding their limits and risks, not on building machine learning models from scratch.

  • How AI and machine learning capabilities are surfaced in Cisco enterprise platforms and how automation can consume them
  • Using AI-assisted tooling to support scripting, configuration generation, and analysis, with appropriate validation of the output
  • Concepts around AI-driven insights and recommendations in network operations
  • Risks and governance: verifying generated output, avoiding blind trust, and handling data responsibly
  • Integrating AI-derived outputs into existing automation pipelines
Read the current objectives for this domain: Because AI in Automation is the newest area of the blueprint, the precise subtopics are the ones most worth checking against Cisco's official objectives document. Anchor your study to that list rather than to general AI articles, which cover far more than the exam tests.

A sensible approach is to learn what the exam expects at a practitioner level: what AI can reliably contribute to an automation workflow, where human review is non-negotiable, and how generated output should be validated before it touches a production network.

Exam Logistics Tied to the Blueprint

Knowing the domains is half of readiness; knowing the mechanics of sitting the exam is the other half. Here are the verified details for 300-435 ENAUTO v2.0.

ItemDetail
Exam code300-435 ENAUTO v2.0
Effective dateFebruary 3, 2026
ProviderPearson VUE
FeeUSD 300 plus applicable tax
Duration90 minutes
LanguagesEnglish and Japanese
DeliveryTest center or eligible OnVUE online proctoring
Format rulesClosed-book; confidentiality rules apply
PrerequisitesNone formally required
Passing thresholdDetermined statistically by Cisco

Because Cisco sets the passing threshold statistically, you will not find a fixed percentage to aim for. Our explainer on the ENAUTO passing score covers what that means for how you gauge readiness, and the ENAUTO certification cost breakdown walks through the fee and what to budget around it. If you are weighing eligibility questions, see ENAUTO requirements and prerequisites, and for scheduling logistics, ENAUTO exam dates and scheduling.

What passing earns you

Passing the exam earns the Cisco Certified Automation Specialist - Enterprise Automation and Programmability credential. It also functions as the concentration exam in two CCNP tracks: paired with AUTOCOR it completes CCNP Automation, and paired with ENCOR it completes CCNP Enterprise. Be aware that the CCNP Enterprise program page retains an older name for the Specialist award, so treat the CCNP Automation page and the current blueprint as the governing sources.

The Specialist award carries three-year validity with a 40-continuing-education-credit renewal requirement to be completed before expiry. Full CCNP credentials also run on a three-year cycle but require 80 CE credits.

Sequencing the Domains Across Your Study Weeks

You do not need an elaborate methodology, just an order that respects how the domains depend on one another. Foundation skills come first because everything else leans on them; the heaviest domain gets the most time; the newest domain gets a dedicated block instead of leftovers.

Week 1

Foundation and Environment Setup

  • Drill JSON, XML, and YAML reading until it is automatic
  • Practice REST calls and interpret status codes and headers
  • Stand up a sandbox environment you can reuse for later weeks
Weeks 2-3

Device-Level Automation

  • Work through YANG models and send NETCONF and RESTCONF requests
  • Explore model-driven telemetry and compare it to polling
  • Review configuration management tooling and desired-state concepts
Weeks 4-6

Controller-Based Automation

  • Script authentication, resource retrieval, and asynchronous tasks for each platform
  • Map each controller's object hierarchy until you can sketch it from memory
  • Complete at least one end-to-end workflow per platform
Week 7

Operations and AI in Automation

  • Practice reading logs, API errors, and tracebacks for root cause
  • Study the AI subtopics directly from the official objectives
  • Revisit weak areas flagged by practice questions

That ordering puts roughly the same proportion of effort on each domain as its blueprint weight suggests, while front-loading the skills that make later weeks faster. For a fuller plan including pacing and review cycles, see our ENAUTO study guide, and keep the ENAUTO cheat sheet handy for last-week revision.

Where the Blueprint Meets the Job Market

The domains map closely to the work of roles that sit between networking and software: network automation engineers, network reliability and operations engineers, and infrastructure engineers who maintain controller-driven enterprise environments. Employers running Catalyst Center, Catalyst SD-WAN, or Meraki at scale tend to value people who can drive those platforms through APIs instead of clicking through GUIs.

The addition of an AI domain also signals where Cisco expects enterprise operations to head, which is useful context when you talk about the credential with a hiring manager. If you want to see how this plays out in actual openings, read about ENAUTO-related jobs, and for a view of compensation and return on the investment, see the ENAUTO salary guide and our analysis of whether the ENAUTO certification is worth it. We keep those figures qualitative where reliable numbers are not available, so you are not working from invented statistics.

Key Takeaway

The blueprint is a map of daily automation work: write against device models, drive controllers through APIs, keep the whole thing observable and safe, and use AI tooling with sound judgment. If you study it as a set of tasks you can perform rather than facts you can recite, both the exam and the job conversation get easier.

When you are ready to test your coverage across all five domains, run timed questions on the ENAUTO practice exams and review every miss against the domain it belongs to. Tracking misses by domain tells you exactly where the next study session should go.

Frequently Asked Questions

How many domains are on the 300-435 ENAUTO v2.0 exam?

There are five: Network Automation Foundation (10%), Device-Level Network Automation (25%), Controller-Based Network Automation (30%), Operations (20%), and AI in Automation (15%). Together they account for 100% of the exam content.

Which ENAUTO domain is weighted most heavily?

Controller-Based Network Automation is the largest at 30%, followed by Device-Level Network Automation at 25%. Combined, those two domains represent more than half of the exam, so they should receive the bulk of your study time.

When did the v2.0 blueprint take effect?

ENAUTO v2.0 became effective on February 3, 2026. Always confirm against Cisco's current exam objectives and the CCNP Automation program page, since those govern if any older wording elsewhere differs.

Is there a prerequisite exam or certification for ENAUTO?

No formal prerequisites are required to sit the exam. Passing earns the Cisco Certified Automation Specialist - Enterprise Automation and Programmability credential, and it also serves as the concentration exam for CCNP Automation (with AUTOCOR) or CCNP Enterprise (with ENCOR).

How long is the exam and how much does it cost?

The exam is 90 minutes and costs USD 300 plus applicable tax. It is delivered through Pearson VUE at a test center or via eligible OnVUE online proctoring, in English and Japanese, under closed-book conditions.

How long does the credential stay valid?

The Specialist award is valid for three years and requires 40 continuing education credits completed before it expires. Full CCNP credentials also follow a three-year cycle but require 80 CE credits.

Ready to pass your ENAUTO exam?

Put this into practice with free ENAUTO questions across every exam domain.