DOMAIN 1.0NETWORK FUNDAMENTALS20% OF EXAM
- 1.1Explain the role and function of network components (routers, L2/L3 switches, NGFW/IPS, APs, controllers, endpoints, servers, PoE)PARTIALRead / drill: FortiGate Home Lab on a BudgetReview: 4 flashcards for 1.1The home-lab guide explains firewall, switch and AP roles; the wider component list needs more material.
- 1.2Describe characteristics of network topology architectures (2-tier, 3-tier, spine-leaf, WAN, SOHO, on-prem & cloud)REVIEW ONLYReview: 2 flashcards for 1.2
- 1.3Compare physical interface and cabling types (SMF, MMF, copper; shared media and point-to-point)REVIEW ONLYReview: 14 flashcards for 1.3
- 1.4Identify interface and cable issues (collisions, errors, duplex/speed mismatch)PARTIALStart a lab: Trace an Ethernet Link and MAC Learning
All 3 labs for 1.4
Review: 2 flashcards for 1.4Interface state is practiced in the labs; physical faults and duplex issues have review cards, but need a physical troubleshooting lab.
- 1.5Compare TCP to UDPCOVEREDRead / drill: TCP vs UDP explained · Packet flow lab · Packet visualizerReview: 15 flashcards for 1.5
- 1.6Configure and verify IPv4 addressing and subnettingCOVEREDRead / drill: How subnetting clicked · CIDR cheat sheet · Subnet practice tool · CCNA Subnetting Practice Questions (With Answers Explained) · What Is VLSM? (Variable Length Subnet Masking) · How to Find the Broadcast Address of a Subnet · Subnetting Visualizer — See the Network/Host Bit Split · Subnet Survivor — Subnetting Practice GameStart a lab: Address Hosts inside a /26 Subnet
All 13 labs for 1.6
Review: 45 flashcards for 1.6
- 1.7Describe the need for private IPv4 addressing (RFC 1918)REVIEW ONLYReview: 5 flashcards for 1.7
- 1.8Configure and verify IPv6 addressing and prefixCOVEREDRead / drill: IPv6 for the CCNA · IPv6 subnetting practice · CLI cheat sheetStart a lab: Configure and Verify IPv6 Router Interfaces
All 4 labs for 1.8
Review: 10 flashcards for 1.8
- 1.9Describe IPv6 address types (unicast — global/unique-local/link-local; anycast; multicast; modified EUI-64)COVEREDRead / drill: IPv6 address types section · Address-types quiz · EUI-64 practice · CLI cheat sheetReview: 7 flashcards for 1.9
- 1.10Verify IP parameters for client OS (Windows, macOS, Linux)COMING SOON
- 1.11Describe wireless principles (non-overlapping channels, SSID, RF, encryption)COMING SOON
- 1.12Explain virtualization fundamentals (server virtualization, containers, VRFs)COMING SOON
- 1.13Describe switching concepts (MAC learning & aging, frame switching, frame flooding, MAC address table)PARTIALRead / drill: Packet Flow & Encapsulation Lab — Trace a Packet End to End · Packet Flow Visualizer — Encapsulation, ARP & Routing Step by StepStart a lab: Trace an Ethernet Link and MAC Learning
All 3 labs for 1.13
Review: 2 flashcards for 1.13MAC learning and frame forwarding have labs and a visualizer; MAC aging needs more coverage.
DOMAIN 2.0NETWORK ACCESS20% OF EXAM
- 2.1Configure and verify VLANs (normal range) spanning multiple switches — access ports (data & voice), default VLAN, inter-VLAN connectivityCOVEREDRead / drill: Lab 1 — VLAN segmentation · Lab 2 — Inter-VLAN routing · CLI cheat sheet · What Is a VLAN? A Plain-English CCNA Explanation · Why Can't My VLANs Ping Each Other? · What Is Router-on-a-Stick? (Inter-VLAN Routing)Start a lab: VLAN Guided Lab
All 11 labs for 2.1
Review: 8 flashcards for 2.1
- 2.2Configure and verify interswitch connectivity — trunk ports, 802.1Q, native VLANCOVEREDRead / drill: Lab 1 (trunking) · Lab 2 (router-on-a-stick) · CLI cheat sheet · Access Port vs Trunk Port: What's the Difference?Start a lab: VLAN Guided Lab
All 13 labs for 2.2
Review: 3 flashcards for 2.2
- 2.3Configure and verify Layer 2 discovery protocols (CDP and LLDP)COVEREDRead / drill: Lab 9 — CDP & LLDP neighbor discovery · CLI cheat sheetReview: 8 flashcards for 2.3
- 2.4Configure and verify L2/L3 EtherChannel (LACP)COVEREDRead / drill: Lab 7 — EtherChannel (PAgP / LACP / Static) · CLI cheat sheetStart a lab: Bundle Two Uplinks with LACP
All 3 labs for 2.4
Review: 8 flashcards for 2.4
- 2.5Interpret basic operations of Rapid PVST+ Spanning Tree Protocol — root bridge/port roles, port states, PortFast; root guard, loop guard, BPDU filter and BPDU guardCOVEREDRead / drill: Lab 3 — STP root election · Interactive STP lab · Lab 4 — RSTP · CLI cheat sheet · How Does STP Elect the Root Bridge? (Bridge ID Explained) · STP vs RSTP: What's the Difference? · STP Root Battle — CCNA Spanning Tree Root Bridge Practice GameStart a lab: Read Root, Designated and Alternate STP Ports
All 4 labs for 2.5
Review: 9 flashcards for 2.5
- 2.6Describe Cisco Wireless Architectures and AP modesREVIEW ONLYReview: 6 flashcards for 2.6
- 2.7Describe physical infrastructure connections of WLAN components (AP, WLC, access/trunk ports, LAG)COMING SOON
- 2.8Describe network device management access (Telnet, SSH, HTTP/S, console, TACACS+/RADIUS, cloud-managed)PARTIALStart a lab: Configure and Verify Authenticated SSH Access
All 1 labs for 2.8
SSH access is practiced; other management methods and centralized authentication remain to be covered.
- 2.9Interpret WLAN GUI configuration for client connectivity (WLAN creation, security, QoS profiles, advanced settings)COMING SOON
DOMAIN 3.0IP CONNECTIVITY25% OF EXAM
- 3.1Interpret components of the routing table (protocol code, prefix, mask, next hop, AD, metric, gateway of last resort)PARTIALRead / drill: What Is Administrative Distance? (AD Table) · Static Route vs Default Route: What's the Difference?Start a lab: Configure Your First IPv4 Static Routes
All 14 labs for 3.1
Review: 3 flashcards for 3.1Route codes, next hops and default routes are practiced; review the full routing-table field set.
- 3.2Determine how a router makes a forwarding decision by default (longest prefix match, AD, routing-protocol metric)COVEREDRead / drill: What Is Administrative Distance? (AD Table) · Static Route vs Default Route: What's the Difference? · RouteGuesser — CCNA Routing Decision Practice GameStart a lab: Configure and Test Floating Static Backup
All 2 labs for 3.2
Review: 2 flashcards for 3.2
- 3.3Configure and verify IPv4 and IPv6 static routing — default, network, host, floating staticCOVEREDRead / drill: Lab 6 — Static & floating static routes · CLI cheat sheet · What Is a Floating Static Route? (Backup Routing) · Static Route vs Default Route: What's the Difference?Start a lab: Configure Your First IPv4 Static Routes
All 12 labs for 3.3
Review: 5 flashcards for 3.3
- 3.4Configure and verify single area OSPFv2 — neighbor adjacencies, point-to-point & broadcast (DR/BDR), router IDCOVEREDRead / drill: OSPF concepts · Lab 5 — OSPF single-area · OSPF adjacency states · Multi-area & LSA types · Lab 8 — multi-area · CLI cheat sheet · How Is the OSPF DR/BDR Elected? (Priority + Router ID) · What Is OSPF Area 0 (the Backbone)?Start a lab: Build Your First OSPF Neighbor Relationship
All 11 labs for 3.4
Review: 23 flashcards for 3.4
- 3.5Describe the purpose, functions, and concepts of first hop redundancy protocols (FHRP — HSRP)REVIEW ONLYReview: 8 flashcards for 3.5
DOMAIN 4.0IP SERVICES10% OF EXAM
DOMAIN 5.0SECURITY FUNDAMENTALS15% OF EXAM
- 5.1Define key security concepts (threats, vulnerabilities, exploits, mitigation techniques)REVIEW ONLYReview: 2 flashcards for 5.1
- 5.2Describe security program elements (user awareness, training, physical access control)COMING SOON
- 5.3Configure and verify device access control using local passwordsCOVEREDStart a lab: Configure a Switch Management Address and Local Account
All 1 labs for 5.3
Review: 2 flashcards for 5.3
- 5.4Describe security password policy elements — management, complexity, MFA, certificates, biometricsCOMING SOON
- 5.5Describe IPsec remote access and site-to-site VPNsPARTIALRead / drill: VPN MTU & MSS: Why Big Files Hang and How to Fix ItReview: 7 flashcards for 5.5VPN overhead and troubleshooting are explained; full IPsec design and configuration are not covered.
- 5.6Configure and verify access control lists (standard & extended)COVEREDRead / drill: ACL Matching Drill — top-down evaluation · CLI Cheat Sheet — ACL config templates · What Is a Wildcard Mask? (ACLs & OSPF) · ACL Evaluation Lab — Standard, Extended & Named ACLsStart a lab: Apply and Verify a Standard IPv4 ACL
All 6 labs for 5.6
Review: 11 flashcards for 5.6
- 5.7Configure and verify Layer 2 security features (DHCP snooping, dynamic ARP inspection, port security)PARTIALStart a lab: Protect a Host Access Port with a Secure MAC
All 2 labs for 5.7
Review: 3 flashcards for 5.7Port security has labs. DHCP snooping and DAI have review cards; configuration practice is still missing.
- 5.8Compare authentication, authorization, and accounting conceptsREVIEW ONLYReview: 5 flashcards for 5.8
- 5.9Describe wireless security protocols (WPA, WPA2, WPA3) and authenticationREVIEW ONLYReview: 5 flashcards for 5.9
- 5.10Configure and verify WLAN within the GUI using WPA2 PSKCOMING SOON
DOMAIN 6.0AUTOMATION & PROGRAMMABILITY10% OF EXAM
- 6.1Explain how automation impacts network managementCOMING SOON
- 6.2Compare traditional networks with controller-based networkingREVIEW ONLYReview: 1 flashcards for 6.2
- 6.3Describe controller-based, software-defined architecture — overlay, underlay, fabric; control/data plane separation; northbound & southbound APIsREVIEW ONLYReview: 1 flashcards for 6.3
- 6.4Explain AI and machine learning in network operations — AIOps, predictive analytics, anomaly detection, traffic optimizationCOMING SOON
- 6.5Describe characteristics of REST-based APIs (authentication types, CRUD, HTTP verbs, data encoding)REVIEW ONLYReview: 4 flashcards for 6.5
- 6.6Recognize the capabilities of configuration management mechanisms — Ansible, TerraformREVIEW ONLYReview: 2 flashcards for 6.6
- 6.7Recognize components of JSON-encoded dataREVIEW ONLYReview: 2 flashcards for 6.7