Cisco Certified Network Associate (CCNA)

• VLANs and switch port roles: access, voice, native, and trunk behavior

  ≈ 3.9%2 h

  Covers VLAN purpose, segmentation, and the behavior of switch ports in access, voice, native, and trunk roles. The exam tests both concept recognition and practical interpretation of switchport configuration, VLAN assignment, and tagged versus untagged traffic handling.

  • Explain how VLANs create Layer 2 segmentation and reduce broadcast-domain scope within a switched network.
  • Differentiate access ports, trunk ports, voice VLAN behavior, and the native VLAN by their traffic handling and tagging characteristics.
  • Apply switchport settings to assign a port to a data VLAN, enable a voice VLAN, and interpret the resulting operational role of the interface.
  • Interpret how 802.1Q tagging is used on trunk links and how untagged traffic is associated with the native VLAN.
  • Verify VLAN membership and switch port operational mode using Cisco IOS show-command output.
  • Evaluate common endpoint-to-switch attachment scenarios and select the correct port role for PCs, IP phones, and interswitch links.

• Interswitch connectivity and 802.1Q trunking configuration and verification

  ≈ 2.5%1 h 15 min

  Focuses on interswitch links and the configuration and verification of 802.1Q trunking. The exam commonly tests command usage, operational status, allowed VLAN behavior, and interpretation of trunk-related output and mismatches.

  • Explain the purpose of interswitch connectivity and why trunk links are required to carry traffic for multiple VLANs between switches.
  • Configure an 802.1Q trunk on a switch interface using the correct Cisco IOS switchport commands.
  • Configure and interpret trunk parameters including encapsulated VLAN tagging behavior, native VLAN, and allowed VLAN lists.
  • Verify trunk establishment and operational status using Cisco IOS show-command output such as interface switchport and trunk information.
  • Identify the effects of trunk mismatches, including native VLAN mismatches and VLANs not permitted across a trunk.
  • Evaluate whether a given link should operate as an access link or an 802.1Q trunk based on topology and traffic requirements.

• Layer 2 discovery protocols: CDP and LLDP

  ≈ 1.5%1 h

  Covers Layer 2 neighbor discovery with Cisco Discovery Protocol and Link Layer Discovery Protocol. The exam tests recognition of each protocol’s role, differences in interoperability, and the ability to verify directly connected devices from command output.

  • Explain the purpose of Layer 2 neighbor discovery and the operational role of CDP and LLDP in identifying directly connected devices.
  • Differentiate CDP as a Cisco proprietary protocol and LLDP as an open standard used for multivendor discovery.
  • Interpret key neighbor information learned through CDP or LLDP, including device identity, local and remote interfaces, platform, and capabilities.
  • Verify CDP and LLDP operation and neighbor relationships using Cisco IOS show commands.
  • Determine when CDP or LLDP information can assist in documenting topology or troubleshooting local connectivity issues.

• EtherChannel with LACP configuration and verification

  ≈ 3%1 h 30 min

  Covers EtherChannel concepts and the configuration and verification of link aggregation using LACP. The exam tests bundle requirements, LACP modes, and the ability to interpret whether member links form a correct logical port channel.

  • Explain the purpose of EtherChannel in increasing bandwidth and providing redundancy while presenting multiple physical links as one logical interface.
  • Differentiate LACP from non-LACP EtherChannel approaches and identify the active and passive LACP negotiation modes.
  • Configure an EtherChannel bundle with LACP on switch interfaces using the correct channel-group parameters.
  • Apply EtherChannel compatibility requirements, including matching speed, duplex, trunk or access mode, and VLAN-related settings on member links.
  • Verify EtherChannel and LACP operation using Cisco IOS show-command output for port-channel status and member interfaces.
  • Identify common causes of EtherChannel formation failure from configuration snippets or verification output.

• Rapid PVST+ operation: root bridge selection, port roles, port states, PortFast, and basic protections

  ≈ 3.9%2 h

  Covers Rapid PVST+ operation in switched networks, including root bridge election, port roles, port states, PortFast, and basic protection features. The exam tests both conceptual understanding and interpretation of spanning-tree behavior from topology or command output.

  • Explain the purpose of Rapid PVST+ in preventing Layer 2 switching loops while maintaining one spanning-tree instance per VLAN.
  • Determine root bridge selection based on spanning-tree bridge ID values and evaluate how priority influences the election result.
  • Differentiate Rapid PVST+ port roles, including root, designated, alternate, and disabled, and relate them to loop-free forwarding paths.
  • Interpret Rapid PVST+ port states and the transition behavior associated with rapid convergence.
  • Apply PortFast appropriately to edge ports and explain why it should not be used on links to other switches.
  • Explain the purpose of basic spanning-tree protection features, including BPDU Guard and Root Guard, and identify where they should be deployed.

• Cisco wireless architectures and access point modes

  ≈ 2%1 h 15 min

  Covers Cisco wireless architectures and the operational modes of access points. The exam tests identification of controller-based versus autonomous approaches and recognition of AP modes and their intended use cases.

  • Differentiate controller-based wireless LAN architectures from autonomous access point deployments in Cisco environments.
  • Explain the role of the wireless LAN controller in centralized policy, management, and AP control.
  • Identify common Cisco access point modes and describe their primary functions, including local, monitor, sniffer, FlexConnect, and bridge modes.
  • Evaluate deployment scenarios and select the appropriate AP mode for client access, remote site operation, monitoring, or point-to-point connectivity.
  • Interpret high-level wireless design descriptions to distinguish where centralized versus distributed switching behavior is expected.

• WLAN infrastructure, AP discovery and join, and WLC management connectivity

  ≈ 1.5%1 h 15 min

  Focuses on the components that support Cisco WLAN operation, how lightweight APs discover and join a WLC, and the management connectivity required for controller operation. The exam tests sequence recognition, infrastructure dependencies, and interpretation of controller and AP management relationships.

  • Identify the key WLAN infrastructure components involved in Cisco controller-based wireless networks, including APs, WLCs, management interfaces, and upstream switching infrastructure.
  • Explain the lightweight AP discovery and join process at a high level, including how an AP locates and registers with a wireless LAN controller.
  • Interpret the role of management IP connectivity in enabling AP-to-WLC communication and ongoing controller management.
  • Differentiate management connectivity used for controller administration from client data forwarding functions in a wireless deployment.
  • Evaluate a basic join or management scenario and identify whether IP reachability or controller discovery is the likely issue.

• WLAN creation and client connectivity in the GUI, including security, QoS, and core WLAN settings

  ≈ 1.5%1 h 30 min

  Covers creation of a WLAN in the controller GUI and the settings that affect client connectivity, including security, QoS, and core WLAN parameters. The exam tests recognition of required configuration elements and the ability to interpret whether a WLAN is correctly defined for users to connect.

  • Create or interpret a WLAN configuration in the controller GUI using core settings such as WLAN name, SSID, enable state, and client-facing parameters.
  • Associate a WLAN with the correct network or policy context as required for client service in a controller-based deployment.
  • Select and apply the appropriate WLAN security settings for client authentication and encryption at the level expected on the CCNA exam.
  • Interpret basic WLAN QoS settings and their role in supporting different client traffic behaviors.
  • Verify from GUI-oriented scenarios whether a WLAN is configured correctly for client association and identify obvious misconfigurations affecting connectivity.

About 11 h 45 min of study, lessons and core practice

• Routing table components and route source interpretation

  ≈ 3.9%1 h 30 min

  Covers how Cisco IOS routing tables are structured and how to interpret route sources, route codes, next-hop information, exit interfaces, and candidate default indicators. The exam tests this through output interpretation, route identification, and distinguishing directly connected, local, static, and dynamically learned routes.

  • Identify the key components of an IPv4 and IPv6 routing table entry, including route source code, destination prefix, administrative distance, metric, next-hop address, exit interface, and route age where shown.
  • Interpret common Cisco IOS route source codes, including connected, local, static, default static, and OSPF-derived routes, from routing table output.
  • Differentiate directly connected routes from local host routes and explain how each is installed in the routing table.
  • Recognize how default routes are represented in the routing table and determine whether a gateway of last resort is present.
  • Interpret routing table output to determine how a destination network was learned and which forwarding information is associated with it.

• Router forwarding decisions: longest prefix match, administrative distance, and metric

  ≈ 3%1 h 15 min

  Covers the sequence a router uses to choose a path: longest prefix match first, then administrative distance between different route sources, then metric within the same routing source. The exam tests route selection from multiple candidates and asks which route will actually be used to forward traffic.

  • Apply longest prefix match to determine which route a router uses for a given destination IP address.
  • Compare competing routes from different routing sources by using administrative distance to determine the preferred route.
  • Compare competing routes learned by the same routing protocol by using metric to determine the best path.
  • Evaluate routing scenarios that include default, summary, network, and host routes to determine the final forwarding decision.
  • Interpret routing information to explain why one candidate route is installed in the routing table and another is not.

• IPv4 static routing: default, network, host, and floating static routes

  ≈ 4.9%2 h

  Covers configuration, purpose, and verification of IPv4 static routes, including default, network, host, and floating static routes. The exam tests both route interpretation and hands-on configuration using correct Cisco IOS syntax and verification commands.

  • Configure and verify an IPv4 default static route.
  • Configure and verify an IPv4 network static route to a remote destination prefix.
  • Configure and verify an IPv4 host static route for a single destination address by using a /32 prefix.
  • Configure and verify an IPv4 floating static route by setting an administrative distance higher than the preferred primary route.
  • Distinguish when a static route should use a next-hop address, an exit interface, or both, and interpret the resulting routing table entry.
  • Troubleshoot basic IPv4 static routing issues by using routing table and interface verification output.

• IPv6 static routing: default, network, host, and floating static routes

  ≈ 3.9%1 h 45 min

  Covers configuration, purpose, and verification of IPv6 static routes, including default, network, host, and floating static routes. The exam tests correct IOS configuration, especially the use of prefixes and the forwarding behavior of IPv6 next-hop and exit-interface choices.

  • Configure and verify an IPv6 default static route.
  • Configure and verify an IPv6 network static route to a remote destination prefix.
  • Configure and verify an IPv6 host static route by using a /128 prefix.
  • Configure and verify an IPv6 floating static route by setting an administrative distance higher than the preferred primary route.
  • Distinguish when an IPv6 static route should use a next-hop address, an exit interface, or both, particularly on point-to-point versus multiaccess links.
  • Troubleshoot basic IPv6 static routing issues by using route and interface verification output.

• Single-area OSPFv2 concepts: router IDs, network types, DR/BDR, and adjacency formation

  ≈ 3.9%2 h

  Covers the core behavior of single-area OSPFv2, including router ID selection, OSPF network types relevant to CCNA, DR/BDR operation on broadcast networks, and the conditions required for neighbor and adjacency formation. The exam tests conceptual understanding through scenario analysis and protocol-state interpretation rather than deep protocol internals.

  • Explain the purpose of single-area OSPFv2 and the role of Area 0 in CCNA-level deployments.
  • Determine how an OSPFv2 router ID is selected and identify how manual router ID configuration affects that selection.
  • Differentiate OSPFv2 point-to-point and broadcast network types in terms of neighbor relationships and adjacency behavior.
  • Explain the election and roles of the designated router (DR) and backup designated router (BDR) on broadcast multiaccess networks.
  • Identify the key parameters that must match for OSPFv2 neighbors to form an adjacency, including area membership and hello-related settings.
  • Interpret basic OSPF neighbor information to determine whether adjacency formation has succeeded or failed.

• Single-area OSPFv2 configuration and verification on point-to-point and broadcast networks

  ≈ 4.9%2 h 30 min

  Covers configuration and verification of single-area OSPFv2 on point-to-point and broadcast networks using Cisco IOS. The exam tests the ability to enable OSPFv2, advertise interfaces into Area 0, set router IDs where required, and verify neighbor relationships, interface participation, and learned routes.

  • Configure single-area OSPFv2 on Cisco IOS routers and place the required interfaces into Area 0.
  • Configure a manual OSPFv2 router ID and verify its effect on OSPF operation.
  • Verify OSPFv2 neighbor relationships on point-to-point and broadcast networks by using Cisco IOS show commands.
  • Verify OSPFv2 interface participation, network type, and DR/BDR status on broadcast segments.
  • Interpret the routing table and OSPF-specific verification output to confirm that remote networks are being learned through OSPFv2.
  • Troubleshoot basic single-area OSPFv2 configuration problems that prevent adjacency formation or route exchange.

About 11 h of study, lessons and core practice

• Inside source NAT and PAT: static, dynamic pools, and overload

  ≈ 3%1 h 45 min

  This topic covers IPv4 inside source NAT and PAT, including static NAT, dynamic NAT using pools, and PAT overload. On the exam, candidates are tested on identifying translation behavior, choosing the correct NAT method for a scenario, and interpreting or applying standard Cisco IOS configuration and verification outputs.

  • Explain the purpose of inside source NAT and distinguish inside local, inside global, outside local, and outside global addresses.
  • Differentiate static NAT, dynamic NAT, and PAT overload, and evaluate which method meets a given connectivity or address-conservation requirement.
  • Configure and verify static inside source NAT for one-to-one IPv4 address translation.
  • Configure and verify dynamic inside source NAT using a pool and an ACL to define the translated source traffic.
  • Configure and verify PAT overload using an interface address or address pool, including the use of the overload keyword.
  • Interpret NAT translation and statistics output to confirm operation and identify common translation mismatches or missing configuration elements.

• Time, naming, and address-assignment services: NTP, DHCP, DHCP client and relay, and DNS

  ≈ 2.5%1 h 30 min

  This topic covers core IP services for time synchronization, name resolution, and IPv4 address assignment: NTP, DHCP, DHCP client operation, DHCP relay, and DNS. The exam tests recognition of service roles, configuration and verification of common Cisco IOS service features, and troubleshooting of basic service dependencies.

  • Explain the purpose of NTP and apply basic client/server synchronization configuration and verification on Cisco devices.
  • Explain the purpose of DNS and interpret its role in resolving hostnames to IP addresses for network applications and device management.
  • Configure and verify IPv4 DHCP server functions on a Cisco device, including excluded addresses, pools, default gateway, and DNS-server options.
  • Explain DHCP client operation and configure an interface to obtain IPv4 addressing information dynamically.
  • Explain the purpose of DHCP relay and configure relay forwarding for clients on a different subnet using the ip helper-address feature.
  • Interpret DHCP bindings, pool statistics, and related verification output to confirm successful address assignment and identify common addressing-service issues.

• Network monitoring and logging with SNMP and syslog facilities and severity levels

  ≈ 2%1 h 15 min

  This topic covers foundational network monitoring and event logging using SNMP and syslog, including syslog facilities and severity levels. The exam tests understanding of what each service does, how messages are categorized, and how to configure or verify basic monitoring and logging behavior on Cisco devices.

  • Explain the purpose of SNMP in network monitoring and distinguish polling and trap-based notification behavior at a foundational level.
  • Identify the role of SNMP managers and agents and interpret the use of community strings in basic SNMPv2c operation.
  • Explain the purpose of syslog for centralized event collection and local logging on network devices.
  • Identify and interpret standard syslog severity levels from 0 through 7, including emergency, alert, critical, error, warning, notification, informational, and debugging.
  • Identify syslog message facilities as categories that indicate the source or process generating a log message.
  • Configure and verify basic SNMP and syslog settings on Cisco devices, including host targets, community strings, trap generation, logging destinations, and severity thresholds.

• QoS per-hop behavior fundamentals: classification, marking, queuing, congestion, and policing

  ≈ 1.5%1 h

  This topic covers the fundamentals of QoS per-hop behavior, focusing on how traffic is classified, marked, queued, and controlled under congestion. The exam tests conceptual understanding of QoS tools and the ability to match a QoS mechanism to a traffic-handling requirement.

  • Explain the purpose of QoS and identify why delay, jitter, loss, and bandwidth contention matter for different application types.
  • Explain classification and marking as QoS functions, including the role of Layer 2 CoS and Layer 3 DSCP markings.
  • Interpret per-hop behavior as the forwarding treatment a device applies to packets based on their classification and marking.
  • Differentiate queuing, congestion-avoidance or congestion-management behavior, and policing as QoS mechanisms used to influence packet forwarding under load.
  • Evaluate common traffic scenarios and determine when classification, marking, queuing, or policing is the appropriate QoS approach.

• Secure device management with SSH and the roles of TFTP and FTP

  ≈ <1%1 h

  This topic covers secure remote device management with SSH and the roles of TFTP and FTP in moving network device files. The exam tests recognition of secure versus insecure management methods, basic SSH enablement requirements, and the operational purpose of common file transfer services.

  • Explain why SSH is preferred for remote CLI device management and distinguish it from insecure plaintext remote access methods.
  • Configure and verify basic SSH access on a Cisco device, including hostname and domain requirements, local user credentials, RSA key generation, and VTY line transport settings.
  • Interpret common SSH verification output to confirm that secure remote access is enabled and functioning.
  • Explain the role of TFTP in simple file transfer operations such as configuration or image backup and restore.
  • Explain the role of FTP in file transfer operations and distinguish it from TFTP at a foundational level.

About 6 h 30 min of study, lessons and core practice

• Core security concepts and security program elements

  ≈ 2.5%1 h 15 min

  Covers foundational security concepts used across enterprise networks, including threat types, security principles, and basic security program elements. The exam tests recognition and explanation of these concepts in scenario-based questions, especially where candidates must distinguish preventive, detective, and corrective controls or apply least privilege and defense in depth.

  • Explain common security threats and vulnerabilities, including malware, phishing, social engineering, spoofing, credential attacks, and denial-of-service behavior.
  • Describe core security principles, including confidentiality, integrity, availability, least privilege, and defense in depth.
  • Differentiate security controls by purpose, including preventive, detective, and corrective controls.
  • Interpret basic device hardening measures, including minimizing unnecessary services, securing management access, and maintaining software updates.
  • Explain common security program elements, including user awareness, access control policy, password policy, and incident response concepts.

• Local device access control and password policy basics

  ≈ 2%1 h

  Covers securing direct and remote administrative access to Cisco devices with local credentials and basic password policy controls. The exam tests configuration recognition and simple implementation of console, VTY, privilege, and password-encryption features on routers and switches.

  • Configure local user accounts for device administration using the official Cisco IOS local authentication model.
  • Apply local access controls to console and VTY lines, including login methods and transport restrictions for secure management access.
  • Configure and distinguish enable secret, line passwords, and local username/password authentication for administrative access.
  • Implement basic password policy measures, including password length and secret protection features supported in Cisco IOS.
  • Interpret and verify password-protection settings, including service password-encryption and local access configuration in running configurations.

• IPv4 and IPv6 ACLs: standard, extended, placement, and verification

  ≈ 4.4%2 h 15 min

  Covers IPv4 and IPv6 access control lists, including standard and extended ACL logic, placement, application to interfaces, and verification. The exam tests both conceptual understanding and practical configuration/analysis of permit-deny behavior in routed network scenarios.

  • Differentiate standard and extended IPv4 ACLs by matching criteria and intended use.
  • Explain IPv4 and IPv6 ACL processing logic, including top-down evaluation, first-match behavior, and the implicit deny.
  • Apply ACL placement principles, including placing extended ACLs close to the source and standard ACLs close to the destination where appropriate.
  • Configure and apply named or numbered IPv4 standard and extended ACLs to interfaces in the correct direction.
  • Configure and apply IPv6 ACLs using named access lists and interface attachment.
  • Interpret and verify ACL operation using Cisco IOS show commands and packet-filtering outcomes in scenario-based questions.

• Layer 2 security features: port security, DHCP snooping, and dynamic ARP inspection

  ≈ 3%1 h 45 min

  Covers key campus Layer 2 protections used on switches: port security, DHCP snooping, and dynamic ARP inspection. The exam tests feature purpose, dependency relationships, basic configuration, and interpretation of switch behavior when attacks or violations occur.

  • Configure and verify switch port security, including secure MAC address learning, maximum MAC limits, sticky learning, and violation modes.
  • Explain common switch access-layer threats addressed by port security, DHCP snooping, and dynamic ARP inspection.
  • Configure and verify DHCP snooping, including trusted and untrusted ports and VLAN-specific operation.
  • Explain how DHCP snooping builds the binding table and how that information supports other security features.
  • Configure and verify dynamic ARP inspection and identify its dependency on DHCP snooping bindings or ARP ACLs.
  • Interpret switch behavior during Layer 2 security events, including port-security violations, blocked rogue DHCP responses, and invalid ARP inspection failures.

• AAA concepts: authentication, authorization, accounting, and common centralized access-control services

  ≈ 1.5%1 h

  Covers the purpose of AAA and the role of centralized access-control services in network administration. The exam tests conceptual understanding of authentication, authorization, and accounting, plus recognition of common protocols such as RADIUS and TACACS+.

  • Explain the functions of authentication, authorization, and accounting in the AAA framework.
  • Differentiate local authentication from centralized AAA-based access control.
  • Compare RADIUS and TACACS+ at a high level, including their common use cases for network access and device administration.
  • Identify where AAA improves administrative control, policy consistency, and auditability in enterprise environments.
  • Interpret basic Cisco device scenarios that use AAA method lists and fallback behavior conceptually.

• Wireless security protocols and WLAN security basics, including WPA2 and WPA3

  ≈ 1.5%1 h

  Covers WLAN security basics and the operation of common wireless security protocols, especially WPA2 and WPA3. The exam tests the ability to identify secure WLAN designs, distinguish authentication modes, and recognize encryption and client-security implications.

  • Differentiate open, WPA2, and WPA3 WLAN security at a high level.
  • Explain the difference between personal and enterprise wireless authentication models.
  • Identify the role of encryption and authentication in securing wireless client communications.
  • Recognize common WLAN security settings and secure-design choices, including SSID protection expectations and strong passphrase use.
  • Interpret client-connectivity scenarios involving WPA2-PSK, WPA3-Personal, and controller-managed WLAN security settings.

• IPsec remote-access and site-to-site VPNs

  ≈ 1.5%45 min

  CCNA v1.1 only

  Describe the purpose, common use cases, and high-level operation of IPsec VPNs for secure remote-access and site-to-site connectivity, as required by the current CCNA blueprint.

  • Differentiate remote-access VPNs from site-to-site VPNs by user and traffic pattern
  • Explain why IPsec is used to provide confidentiality, integrity, and peer authentication
  • Identify the main building blocks of an IPsec VPN at a conceptual level
  • Recognize common deployment scenarios for branch connectivity and secure user access
  • Interpret basic diagrams and requirements for when IPsec VPNs are appropriate

About 9 h of study, lessons and core practice

• Network automation and AI/ML impact on network operations

  ≈ 1.5%1 h

  Covers why networks are automated and how AI/ML-assisted operations affect monitoring, assurance, troubleshooting, and routine change workflows. The exam typically tests recognition of automation benefits and the practical impact of AI/ML-driven analytics and recommendations in day-to-day network operations.

  • Explain the business and operational drivers for network automation, including consistency, speed, scalability, and reduction of manual error.
  • Compare manual device-by-device operations with automated workflows for provisioning, configuration changes, compliance checking, and troubleshooting.
  • Describe how AI and ML are used in network operations for pattern detection, anomaly identification, assurance, baselining, and predictive insights.
  • Interpret common outcomes of AI/ML-assisted operations, such as event correlation, recommended remediation, capacity trend analysis, and proactive fault identification.
  • Evaluate the operational benefits and limitations of automation and AI/ML, including data quality dependence, need for validation, and the role of human oversight.

• Traditional, controller-based, and software-defined networking models

  ≈ 2%1 h 15 min

  Covers traditional distributed management, controller-based networking, and software-defined networking models, with emphasis on how control and management functions differ. The exam tests conceptual comparison of these models and identification of where policy, configuration, and visibility are centralized.

  • Compare traditional network management with controller-based networking in terms of device configuration, policy deployment, and operational visibility.
  • Describe the characteristics of software-defined networking, including abstraction, centralized policy control, and programmability.
  • Explain the role of a controller in controller-based architectures, including centralized management, orchestration, and policy-based automation.
  • Differentiate distributed control in traditional networks from logically centralized management and policy models used in controller-based and software-defined approaches.
  • Identify typical advantages of controller-based networking, such as simplified operations, consistent policy application, and improved network-wide visibility.

• Control plane and data plane separation, overlays and underlays, fabrics, and northbound and southbound APIs

  ≈ 2%1 h 15 min

  Covers the separation of control plane and data plane, foundational overlay and underlay concepts, fabric-based architectures, and the purpose of northbound and southbound APIs. The exam tests understanding of these abstractions and the ability to classify functions and interfaces correctly.

  • Differentiate the control plane from the data plane and identify the primary function of each in packet forwarding and route decision processes.
  • Explain why separating control plane and data plane supports software-defined and programmable network designs.
  • Compare underlay and overlay networks, including the role of the underlay in transport and the role of the overlay in logical segmentation or service abstraction.
  • Describe a network fabric as a structured architecture that provides consistent connectivity, policy application, and scalable forwarding behavior across the infrastructure.
  • Differentiate northbound APIs from southbound APIs by identifying the systems they connect and the direction of communication between applications, controllers, and devices.

• Cisco DNA Center / Catalyst Center-enabled campus management compared with traditional device-by-device management

  ≈ 1.5%1 h

  Covers Cisco DNA Center, now Cisco Catalyst Center, as a controller-based campus management platform and compares it with traditional per-device administration. The exam tests high-level understanding of centralized provisioning, policy, assurance, and lifecycle management rather than deep product configuration.

  • Describe the role of Cisco DNA Center / Cisco Catalyst Center in centralized campus network management and automation.
  • Compare controller-enabled campus management with traditional device-by-device management for provisioning, policy deployment, software image management, and monitoring.
  • Identify management functions commonly associated with Cisco DNA Center / Catalyst Center, including discovery, inventory, configuration templating, assurance, and software lifecycle workflows.
  • Explain how centralized policy and automation in Cisco DNA Center / Catalyst Center can improve operational consistency and reduce administrative overhead.
  • Recognize that Cisco DNA Center has been renamed Cisco Catalyst Center and interpret exam references to either name in the same product-management context.

• REST-based APIs and JSON-encoded data

  ≈ 2%1 h 15 min

  Covers REST-based APIs and JSON data representation used in network programmability. The exam tests recognition of common HTTP methods, resource-oriented API interaction, and the ability to read basic JSON structures returned to or sent by network platforms.

  • Explain the purpose of a REST-based API and how it exposes network resources for programmatic access using HTTP.
  • Identify common HTTP methods used with REST APIs, including GET, POST, PUT, PATCH, and DELETE, and relate them to typical CRUD-style operations.
  • Interpret basic elements of an HTTP request and response in an API workflow, including URI, headers, status codes, and message body.
  • Read and interpret JSON-encoded data structures, including objects, arrays, key-value pairs, strings, numbers, booleans, and null values.
  • Distinguish JSON as a data-encoding format from REST as an architectural style for API interaction.

• Configuration management tools and automation ecosystems: Ansible, Puppet, and Chef

  ≈ <1%1 h

  Covers the purpose of configuration management and automation tools, specifically Ansible, Puppet, and Chef, in network operations. The exam tests high-level differentiation of these tools and their role in scalable, repeatable configuration deployment.

  • Explain the purpose of configuration management tools in automating provisioning, configuration consistency, and change control across multiple devices.
  • Differentiate Ansible, Puppet, and Chef at a high level as automation and configuration management ecosystems used to define and apply desired state.
  • Identify Ansible as an agentless automation tool commonly using playbooks to orchestrate tasks across infrastructure.
  • Recognize Puppet and Chef as configuration management platforms that support desired-state management through centralized definitions and automated enforcement.
  • Evaluate when configuration management tools are preferable to manual CLI administration for repetitive, large-scale, or compliance-driven operational tasks.

About 6 h 45 min of study, lessons and core practice