


Exam Specifications & Overview
Total Questions: 50 questions
Exam Duration: 60 minutes
Passing Score: 75%
Format: Multiple-choice, scenario-based questions, and performance-based terminal simulations.
Core Focus: Merging foundational theoretical networking concepts with practical Cisco IOS command-line implementation.
Comprehensive Exam Content Outline
Domain 1: Networking Fundamentals & Architecture (20%)
This domain covers the structural baseline of data transmission, architectural frameworks, and modern address planning.
1.1 OSI and TCP/IP Reference Models
Compare and contrast the 7-layer OSI model and the 4-layer TCP/IP stack.
Describe data encapsulation and de-encapsulation processes (Data, Segment, Packet, Frame, Bits).
Identify network protocols operating at specific layers (HTTP, HTTPS, DNS, TCP, UDP, IP, ICMP, ARP, Ethernet).
1.2 IPv4 and IPv6 Addressing Schemes
Advanced IPv4 Subnetting: Classless Inter-Domain Routing (CIDR), Variable Length Subnet Masking (VLSM), calculating network ID, broadcast address, and usable host ranges.
IPv6 Implementation: Global unicast, link-local, unique local, and multicast addresses. Modified EUI-64 interface ID generation.
IPv6 Subnetting: Allocating subnets within a /48 or /64 global prefix structure.
1.3 Infrastructure Components & Topology Design
Describe the function and deployment of physical infrastructure: Cat6/6a/8 cabling, Single-mode vs. Multi-mode fiber optics, SFP/SFP+ transceivers.
Analyze network topologies: Star, Mesh (Full and Partial), Spine-Leaf (Data Center design), and Three-Tier Enterprise architectures (Core, Distribution, Access).
Domain 2: Cisco Device Configuration & Switching Operations (25%)
Focuses on the initial configuration of Cisco switches and routers, local area management, and Layer 2 loop prevention.
2.1 Cisco IOS Navigation and Management
Establish administrative access via Console, SSHv2, and Telnet.
Execute foundational system commands: hostname, enable secret, banner motd, and line configurations (line con 0, line vty 0 4).
Manage configuration files: copy running-config startup-config, erase startup-config, and backing up IOS images via TFTP/SFTP.
2.2 VLAN Dynamics and Trunking Protocol (802.1Q)
Create, modify, and delete VLANs on Cisco Catalyst switches.
Configure switch ports as access or trunk modes.
Implement IEEE 802.1Q encapsulation for trunk links; manage native VLAN mismatches.
Configure Voice VLANs for VoIP integration.
2.3 Spanning Tree Protocol (STP) & EtherChannel
Explain the operation of 802.1D STP, Rapid STP (802.1w), and Per-VLAN Spanning Tree Plus (PVST+).
Determine root bridge election criteria (Bridge Priority and MAC address).
Modify port costs and bridge priorities to optimize traffic flow.
Configure Link Aggregation using EtherChannel: Link Aggregation Control Protocol (LACP) and Port Aggregation Protocol (PAgP).
Domain 3: Routing Protocols & Inter-VLAN Routing (20%)
Covers the mechanics of moving packets across distinct networks and configuring Layer 3 boundary routing.
3.1 Routing Core Mechanics
Interpret the structure of a Cisco Routing Table (Connected, Static, Dynamic routes, Administrative Distance, Metric).
Configure IPv4 and IPv6 Static Routes, Default Routes (0.0.0.0/0), and Floating Static Routes for redundancy.
3.2 Dynamic Routing: OSPFv2 and OSPFv3
Explain Link-State routing mechanics vs. Distance-Vector.
Configure single-area OSPFv2 (IPv4) and OSPFv3 (IPv6).
Verify OSPF neighbor adjacencies, Link-State Advertisements (LSAs), and area designations.
Configure passive interfaces and adjust interface costs to manipulate path selection.
3.3 Inter-VLAN Routing Implementations
Configure Router-on-a-Stick (RoaS) utilizing subinterfaces and 802.1Q encapsulation.
Implement Layer 3 Switching using Switched Virtual Interfaces (SVIs) and routed switch ports.
Domain 4: Network Security Essentials & Access Control (15%)
Enforces perimeter protection, access mitigation strategies, and the structural concepts behind contemporary security infrastructure.
4.1 Access Control Lists (ACLs)
Differentiate between Standard, Extended, and Named ACLs.
Configure and apply IPv4 ACLs to inbound/outbound interfaces to filter traffic based on source IP, destination IP, protocol, and port numbers.
Utilize Implicit Deny rules and implement structural troubleshooting steps for sequential ACL ordering.
4.2 Switchport Security & Layer 2 Mitigation
Configure switchport port-security to limit MAC addresses per port.
Define violation actions: Protect, Restrict, and Shutdown (Err-disabled state).
Explain mitigation strategies against common Layer 2 exploits: DHCP Snooping, Dynamic ARP Inspection (DAI), and IP Source Guard.
4.3 Identity, Access Management, and Modern Frameworks
Configure AAA (Authentication, Authorization, and Accounting) concepts using RADIUS and TACACS+.
Zero-Trust Network Access (ZTNA) Architecture: Apply fundamental concepts of "never trust, always verify," micro-segmentation, and continuous identity verification.
Configure fundamental firewall types (Stateful vs. Stateless) and basic zone-based policy concepts.
Domain 5: Wireless, WAN, and Cloud Integration (10%)
Addresses topologies extending beyond the local physical data room, incorporating hybrid infrastructures.
5.1 Wireless Networking (WLAN) Architecture
Compare Wi-Fi standards (802.11ax/Wi-Fi 6, 802.11be/Wi-Fi 7) and frequency bands (2.4GHz, 5GHz, 6GHz).
Analyze autonomous vs. lightweight Access Point (AP) architectures managed by a Wireless LAN Controller (WLC).
Configure secure wireless deployment: WPA2/WPA3 Enterprise (802.1X) authentication.
5.2 Wide Area Network (WAN) & Remote Access
Evaluate WAN technologies: Metro Ethernet, Broadband, and Dedicated Leased Lines.
Define Virtual Private Network (VPN) architectures: Site-to-Site IPsec VPNs, Generic Routing Encapsulation (GRE) tunnels, and Remote Access VPNs.
5.3 Cloud, SDN, and Automation Basics
Describe hybrid cloud connectivity (AWS Direct Connect, Azure ExpressRoute) into a traditional enterprise topology.
Introduce Software-Defined Networking (SDN) frameworks: Centralized control planes, decoupled data planes, and Fabric architectures.
Identify basic automation protocols: REST APIs, JSON/YAML data formatting, and fundamental configuration management tools (Ansible, Puppet).
Domain 6: Advanced Troubleshooting & Network Management (10%)
Focuses on operational health, diagnostic tools, and methodology for restoring disrupted network services.
6.1 Diagnostic Utilities and Cisco IOS Commands
Use native troubleshooting tools: ping, traceroute, arp -a, nslookup, and netstat.
Master critical verification commands:
show ip interface brief / show ipv6 interface brief
show ip route
show running-config
show vlan brief
show interface [type/number] status
show mac address-table
6.2 Infrastructure Monitoring Protocols
Configure and analyze Syslog logging levels (0-7 Emergencies to Debugging) on a remote collector.
Explain the operations of Simple Network Management Protocol (SNMPv2c vs. secure SNMPv3).
Implement Network Time Protocol (NTP) to synchronize system time across managed Cisco devices.
Leverage Cisco Discovery Protocol (CDP) and Link Layer Discovery Protocol (LLDP) for automated neighbor mapping.