CCNA

Exam objectives

1. 1.0Network Fundamentals20% of the exam

   • 1.1Explain the role and function of network components
     • Routers
     • Layer 2 and Layer 3 switches
     • Next-generation firewalls and IPS
     • Access points
     • Controllers
     • Endpoints
     • Servers
     • PoE
   • 1.2Describe characteristics of network topology architectures
     • Two-tier
     • Three-tier
     • Spine-leaf
     • WAN
     • Small office/home office (SOHO)
     • On-premise and cloud
   • 1.3Compare physical interface and cabling types
     • Single-mode fiber, multimode fiber, copper
     • Connections (Ethernet shared media and point-to-point)
   • 1.4Identify interface and cable issues (collisions, errors, mismatch duplex, and/or speed)
   • 1.5Compare TCP to UDP
   • 1.6Configure and verify IPv4 addressing and subnetting
   • 1.7Describe private IPv4 addressing
   • 1.8Configure and verify IPv6 addressing and prefix
   • 1.9Describe IPv6 address types
     • Unicast (global, unique local, and link local)
     • Anycast
     • Multicast
     • Modified EUI-64
   • 1.10Verify IP parameters for Client OS (Windows, Mac OS, Linux)
   • 1.11Describe wireless principles
     • Nonoverlapping Wi-Fi channels
     • SSID
     • RF
     • Encryption
   • 1.12Explain virtualization fundamentals (server virtualization, containers, and VRFs)
   • 1.13Describe switching concepts
     • MAC learning and aging
     • Frame switching
     • Frame flooding
     • MAC address table
2. 2.0Network Access20% of the exam

   • 2.1Configure and verify VLANs (normal range) spanning multiple switches
     • Access ports (data and voice)
     • Default VLAN
     • InterVLAN connectivity
   • 2.2Configure and verify interswitch connectivity
     • Trunk ports
     • 802.1Q
     • Native VLAN
   • 2.3Configure and verify Layer 2 discovery protocols (Cisco Discovery Protocol and LLDP)
   • 2.4Configure and verify (Layer 2/Layer 3) EtherChannel (LACP)
   • 2.5Interpret basic operations of Rapid PVST+ Spanning Tree Protocol
     • Root port, root bridge (primary/secondary), and other port names
     • Port states and roles
     • PortFast
     • Root guard, loop guard, BPDU filter, and BPDU guard
   • 2.6Describe Cisco Wireless Architectures and AP modes
   • 2.7Describe physical infrastructure connections of WLAN components (AP, WLC, access/trunk ports, and LAG)
   • 2.8Describe network device management access (Telnet, SSH, HTTP, HTTPS, console, TACACS+/RADIUS, and cloud managed)
   • 2.9Interpret the wireless LAN GUI configuration for client connectivity, such as WLAN creation, security settings, QoS profiles, and advanced settings
3. 3.0IP Connectivity25% of the exam

   • 3.1Interpret the components of routing table
     • Routing protocol code
     • Prefix
     • Network mask
     • Next hop
     • Administrative distance
     • Metric
     • Gateway of last resort
   • 3.2Determine how a router makes a forwarding decision by default
     • Longest prefix match
     • Administrative distance
     • Routing protocol metric
   • 3.3Configure and verify IPv4 and IPv6 static routing
     • Default route
     • Network route
     • Host route
     • Floating static
   • 3.4Configure and verify single area OSPFv2
     • Neighbor adjacencies
     • Point-to-point
     • Broadcast (DR/BDR selection)
     • Router ID
   • 3.5Describe the purpose, functions, and concepts of first hop redundancy protocols
4. 4.0IP Services10% of the exam

   • 4.1Configure and verify inside source NAT using static and pools
   • 4.2Configure and verify NTP operating in a client and server mode
   • 4.3Explain the role of DHCP and DNS within the network
   • 4.4Explain the function of SNMP in network operations
   • 4.5Describe the use of syslog features including facilities and severity levels
   • 4.6Configure and verify DHCP client and relay
   • 4.7Explain the forwarding per-hop behavior (PHB) for QoS, such as classification, marking, queuing, congestion, policing, and shaping
   • 4.8Configure network devices for remote access using SSH
   • 4.9Describe the capabilities and functions of TFTP/FTP in the network
5. 5.0Security Fundamentals15% of the exam

   • 5.1Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques)
   • 5.2Describe security program elements (user awareness, training, and physical access control)
   • 5.3Configure and verify device access control using local passwords
   • 5.4Describe security password policies elements, such as management, complexity, and password alternatives (multifactor authentication, certificates, and biometrics)
   • 5.5Describe IPsec remote access and site-to-site VPNs
   • 5.6Configure and verify access control lists
   • 5.7Configure and verify Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security)
   • 5.8Compare authentication, authorization, and accounting concepts
   • 5.9Describe wireless security protocols (WPA, WPA2, and WPA3)
   • 5.10Configure and verify WLAN within the GUI using WPA2 PSK
6. 6.0Automation and Programmability10% of the exam

   • 6.1Explain how automation impacts network management
   • 6.2Compare traditional networks with controller-based networking
   • 6.3Describe controller-based, software defined architecture (overlay, underlay, and fabric)
     • Separation of control plane and data plane
     • Northbound and Southbound APIs
   • 6.4Explain AI (generative and predictive) and machine learning in network operations
   • 6.5Describe characteristics of REST-based APIs (authentication types, CRUD, HTTP verbs, and data encoding)
   • 6.6Recognize the capabilities of configuration management mechanisms, such as Ansible and Terraform
   • 6.7Recognize components of JSON-encoded data