Cisco Certified Design Expert

400-007 (Written) · 352-001 (Practical) · ● Active · Expert · Cisco

Exam facts

CCDE Written Exam (400-007)

CCDE Practical Exam (352-001)

Concentration codes (optional, available at registration):

• Service Provider (SP) — large-scale, multi-tenant design
• Enterprise — distributed campus and WAN architectures
• Large-Scale Networks — hyperscale and complex topologies
• AI Infrastructure — emerging focus area for ML/AI workload optimization

Vendor source — Cisco CCDE home ↗
Official exam page — 400-007 CCDE Written ↗
Practical exam — 352-001 CCDE Practical ↗
Exam blueprint — CCDE v3.1 Written & Practical Topics ↗

About

The Cisco Certified Design Expert (CCDE) is an expert-level network architecture and design certification launched in 2007 that validates mastery of high-level network design and the ability to align technology solutions with business requirements. Unlike the CCIE (Cisco Certified Internetwork Expert), which focuses on configuration, deployment, and troubleshooting of operational networks, the CCDE emphasizes architectural thinking: analyzing business needs, designing scalable and resilient solutions, and bridging the gap between business strategy and technical implementation. The certification confers lifetime status upon completion, making it a rare credential in the Cisco portfolio—no renewal required.

The certification path requires two exams: a written exam (400-007, $400) covering core HLD (high-level design) principles, business-driven architecture, and design validation; followed by an 8-hour practical exam (352-001, $1,900) composed of four independent real-world design scenarios that simulate stakeholder constraints, legacy infrastructure, and trade-off analysis. Passing the written exam alone earns "CCDE Expert Specialist" status; the full "Cisco Certified Design Expert" credential requires both exams.

Optional concentration codes (Service Provider, Enterprise, Large-Scale Networks, AI Infrastructure) allow candidates to tailor the practical exam to their specialization and career focus. CCDE is particularly valued in enterprise and service-provider environments where network architects direct infrastructure evolution across large, complex topologies, and in organizations transitioning to cloud-hybrid models where design decisions must account for both legacy and modern infrastructure paradigms.

CCDE vs. CCIE: Key distinctions

CCDE (Design Expert) and CCIE (Internetwork Expert) are both expert-level Cisco credentials, but they measure fundamentally different competencies:

Why both exist: A network architect must understand design principles (CCDE), but many architects also pursue CCIE to validate deep technical chops in a specific domain (Enterprise, Data Center, Service Provider, Security). Some roles value both credentials; others prefer one over the other based on organizational structure and career trajectory.

Domain context — Networking / Architecture

Enterprise network design and large-scale infrastructure architecture — translating business strategy into resilient, scalable, cost-efficient network blueprints. Network architects using CCDE sit at the intersection of technical depth and business alignment.

Read full deep dive — Cisco Ecosystem →

Topics covered

Written Exam (400-007) — Weight by domain:

• 1.0 Business Strategy Design (15%) — Aligning network design to business goals, ROI, cost-benefit analysis, risk and compliance, organizational constraints
• 2.0 Control, Data, and Management Plane Design (25%) — Routing protocols (OSPF, ISIS, EIGRP, BGP), traffic engineering, scalability, convergence, operational models, SNMP/telemetry
• 3.0 Network Design (30%) — High-availability, redundancy, topology design (core, distribution, access), WAN design, multicast, QoS architecture
• 4.0 Service Design (15%) — VPN architectures (MPLS, IPSec), SD-WAN, segment routing, cloud interconnection, hybrid infrastructure
• 5.0 Security Design (15%) — Security policy integration, defense-in-depth, DDoS mitigation, threat modeling, identity/access architecture, encryption strategies

Practical Exam (Eight-hour format):
Four independent 2-hour scenario-based design challenges covering mixed business and technical requirements. Candidates document design decisions, create implementation plans, analyze trade-offs, and validate designs against stated constraints. Each scenario stands alone but may include skills such as HLD design, cost modeling, risk assessment, and technical validation.

Source: Cisco CCDE v3.1 Exam Blueprint ↗

Common skills at Networking · Expert

Shared technical and architectural skills expected at Expert level in network design and infrastructure strategy.

• Enterprise network architecture and topology design
• Advanced routing protocol design and scalability (OSPF, ISIS, EIGRP, BGP, segment routing)
• Traffic engineering, QoS modeling, and application performance alignment
• High-availability and disaster-recovery design
• Security architecture integration and threat modeling
• Business-to-technology translation and stakeholder communication
• Cost modeling and ROI analysis for infrastructure decisions
• Hybrid cloud and multi-cloud network connectivity strategies

Recommended courses at Networking · Expert

Course note: Orhan Ergun is widely recognized as the gold-standard CCDE bootcamp instructor; his self-paced course was updated in March 2026 with full v3.1 coverage. No other major training vendor (Pluralsight, A Cloud Guru, LinkedIn Learning) currently offers dedicated CCDE courses.

Practice exams

Practice note: Unlike AWS or Microsoft, Cisco does not publish official practice exams for the CCDE written exam via MeasureUp or other commercial platforms. Orhan Ergun's course includes mock scenarios; third-party dump sites carry unofficial practice materials of variable quality. Focus on scenario-based mock design rather than traditional multiple-choice drills for practical exam prep.

Books

Book note: The CCDE Quick Reference is compact and current. The Art of Network Architecture bridges design philosophy and practice—essential reading for understanding the "why" behind design decisions. CCDE v3 Practice Labs provides hands-on scenario walkthroughs aligned to the current blueprint. All authored or curated by Russ White (CCDE, CCIE #2635), a leading authority on network architecture.

Typical job titles at Networking · Expert

Direct Architecture Roles:
Network Design Architect · Senior Network Architect · Principal Network Architect · Distinguished Engineer (Network) · Senior Design Engineer · Lead Architect (Infrastructure)

Solutions & Broader Architecture:
Solutions Architect (Infrastructure) · Enterprise Network Architect · Senior Solutions Architect (Infrastructure) · Infrastructure Solutions Architect · Cloud Network Architect · Hybrid Cloud Architect

Leadership & Specialization:
Network Architecture Lead · Head of Network Architecture · Chief Architect (Infrastructure) · Technical Director (Networking) · Security Architect (network security design specialty) · Service Provider Architect (SP specialty)

Industry-Specific Variants:

• Financial services: Senior Network Architect, Head of Trading Infrastructure Design
• Healthcare: Enterprise Network Architect, Clinical Network Design Lead
• Telecommunications: SP Network Architect, Large-Scale Networks Design Engineer
• Public sector / Government: Federal Network Architect, Defense Network Design Specialist

(Job titles drawn from current job-board postings (LinkedIn, Glassdoor, CiscoJobs) that list CCDE, "network design," or "architecture" as required or preferred qualifications.)

Salary

Salary note: CCDE holders typically occupy senior architect or principal engineer roles, commanding premiums above mid-level network engineers. North American ranges reflect $150k–$280k USD for Network Architect and Senior Design Engineer roles. Regional salary variance reflects both local cost-of-living and demand for advanced architecture skills. South African market reflects strong demand for enterprise infrastructure expertise in banking and telecommunications sectors.

Skills validated

Concrete technologies, methodologies, and design practices this exam demonstrates proficiency with.

Architectural & Design Methodology:

• High-level network design (HLD) documentation and visual representation
• Topology architecture for campus, data center, and WAN environments
• Design requirements elicitation and stakeholder alignment
• Trade-off analysis: cost vs. performance, redundancy vs. complexity, flexibility vs. standardization
• Failure domain isolation and blast radius reduction

Routing & Control-Plane Design:

• Advanced routing protocol design and selection: OSPF, ISIS, EIGRP, BGP
• Segment routing (SR) and application-based routing architectures
• Routing protocol convergence and stability tuning
• Scalability analysis for large-scale deployments
• Multi-AS and multi-vendor interoperability design

Data-Plane & Traffic Management:

• Traffic engineering and QoS architecture (DiffServ, IntServ, policing, LLQ)
• MPLS-based traffic engineering and fast reroute (FRR)
• Multicast architecture and service delivery design
• Load balancing and equal-cost multipath (ECMP) optimization

WAN & Cloud Connectivity:

• MPLS VPN and IPSec VPN architecture for hybrid WANs
• SD-WAN design and deployment patterns (centralized, distributed, hybrid)
• Cloud interconnection strategies (direct, VPN, hybrid)
• Business continuity and disaster recovery (BC/DR) design

Security Architecture:

• Defense-in-depth strategy and security zoning design
• DDoS mitigation and traffic scrubbing architecture
• Zero-trust network principles and micro-segmentation
• Identity and access management (IAM) integration in network design
• Encryption and integrity validation placement and protocols

Data Center & Modern Infrastructure:

• Data center network design (fabric, overlay, underlay)
• Cloud-native design considerations (container networks, serverless)
• Hyperscaler architecture patterns and lessons (CLOS, leaf-spine)
• Capacity planning and growth modeling

Business Integration:

• Cost-benefit analysis and ROI calculation for design decisions
• Operational cost modeling (OPEX vs. CAPEX)
• Risk assessment and mitigation in design
• Compliance and regulatory integration (PCI-DSS, HIPAA, etc.)
• Vendor evaluation and technology selection criteria

Related certifications

• Peer expert credential: Cisco CCIE Enterprise Infrastructure ↗ — complementary expert-level cert focused on implementation, configuration, and troubleshooting vs. design
• Prerequisite knowledge: Cisco CCNP Enterprise (ENCOR 350-401) ↗ — CCNP-level routing, switching, and enterprise infrastructure knowledge assumed
• Foundation: Cisco CCNA (200-301) ↗ — foundational networking knowledge
• Vendor alternative (design focus): Juniper JNCIE-Design ↗ — vendor-neutral design principles
• Vendor overview: Cisco Vendor Overview ↗

Sources

• Cisco CCDE Home ↗
• Cisco 400-007 CCDE Written Exam ↗
• CCDE v3.1 Written & Practical Exam Blueprint ↗
• Orhan Ergun CCDE Self-Paced Course ↗
• Orhan Ergun CCDE Bootcamp ↗
• Cisco Press CCDE Practice Labs ↗
• CCDE Quick Reference (Cisco Press) ↗
• The Art of Network Architecture (Cisco Press) ↗
• Optimal Routing Design (Cisco Press) ↗
• Glassdoor: Network Architect Salary ↗
• Glassdoor: Senior Network Architect Salary ↗
• ZipRecruiter: Network Architect Jobs & Salary ↗
• The Differences Between CCIE and CCDE ↗