CCNP ENCOR 350-401 · Security · Threat defense

Threat defense, 802.1X & TrustSec

Secure the edge where users plug in: 802.1X with EAP, MAC Authentication Bypass, guest and auth-fail VLANs, RADIUS-assigned VLANs and Security Group Tags, plus where firewalls, IPS, malware and web/email protection fit. Maps to ENCOR 5.3 (network security design: threat defense, endpoint security, next-generation firewall, TrustSec, MACsec, network access control with 802.1X, MAB and WebAuth).

66 min read12 chapters2 labs15 quiz8 scenarios15 interview Q&A

This module is part of the paid plans

The free Starter plan opens the first module of every path. Upgrade to unlock this module's lesson, labs, quiz and scenarios.

Your free Starter plan includes

  • ✓First module of every path — lessons and quizzes
  • ✓3 hands-on labs in total
  • ✓Practice questions (up to 10 per set)
  • ✓Build your own lab — 3 sessions a month, up to 4 devices

Inside this module

  • Lab · 802.1X with MAB fallback and dynamic VLANs
  • Lab · Nobody gets on the network
🎓 For educational purposes only — all devices are simulationsTerms of UsePrivacy Policy© 2026 Network Kings
CONFIG by Network Kings — an educational IT simulation platform for learning purposes only. It is not Cisco IOS, Junos, FortiOS or PAN-OS and contains no Cisco, Juniper, Fortinet or Palo Alto Networks software. Cisco, IOS, CCNA, CCNP, Juniper, JNCIA, JNCIS, JNCIP, Fortinet, FortiGate, FortiOS, NSE, Palo Alto Networks, PAN-OS and PCNSE are trademarks of their respective owners. Network Kings is not affiliated with or endorsed by Cisco Systems, Inc., Juniper Networks, Inc., Fortinet, Inc. or Palo Alto Networks, Inc.