Module2: Network Access

• Configure and test a VLAN (normal range) that spans multiple switches
• Configure and test connectivity between switches
• Configure and verify Layer 2 discovery protocols (Cisco Discovery Protocol and LLDP)
• Configure and verify (Layer 2/Layer 3) EtherChannel (LACP)
• Describe the need for and basic operations of Rapid PVST+ Spanning Tree protocol and define the basic operations
• Compare Cisco wireless architectures and access point modes
• Describe the physical infrastructure connections (AP, WLC, access/trunk ports and LAGs) of the WLAN components
• Describe the AP and WLC management access connections (Telnet, SSH, HTTP, HTTPS, console and TACACS+/RADIUS)
• Configure wireless LAN access components for client connectivity using GUI only, e.g. WLAN creation, security settings, QoS profiles and additional WLAN settings

Module3: IP Connectivity

• Interpret routing table components
• Determine how the router makes forwarding decisions by default
• Configure and test IPv4 and IPv6 static routing
• Configure and verify single-zone OSPFv2 configuration and verification
• Describe the purpose of the First Expectation Backup Protocol

Module 4: IP Services

• Configure and verify internal source NAT using static and pool routes
• Configure and verify NTP operation in client and server mode
• Explain the role of DHCP and DNS in the network.
• Explain the role of SNMP in network operation
• Describe the use of syslog functions, including options and levels
• Configure and verify DHCP client and repeater operation
• Explain QoS forwarding behaviour per endpoint (PHB), e.g. classification, marking, queuing, congestion, tuning, shaping
• Configure network devices for remote access using SSH
• Describe TFTP/FTP capabilities and features on the network

Module 5: Security Fundamentals

• Define the main security concepts (threats, vulnerabilities, exploits and mitigation methods)
• Describe the elements of a security programme (user awareness, training and physical access control)
• Configure device access control using local passwords
• Describe the elements of a security password policy, such as management, complexity and password alternatives (multi-factor authentication, certificates and biometrics)
• Describe remote access and site-to-site VPN
• Configure and check access control lists
• Configure Layer 2 security features (DHCP snooping, dynamic ARP inspection and port security)
• Differentiate between authentication, authorisation and accounting concepts.
• Describe wireless security protocols (WPA, WPA2 and WPA3)
• Configure a WLAN using WPA2 PSK using the GUI

Module 6: Automation and programmability

• Explain how automation affects network management
• Compare traditional networks with controller-based networks
• Describe controller-based and software-defined architectures (overlay, underlay and fabric)
• Compare traditional campus device management with Cisco DNA Center enabled device management
• Describe the characteristics of REST-based APIs (CRUD, HTTP verbs and data encoding)
• Recognize the capabilities of the configuration management mechanisms Puppet, Chef and Ansible.
• Interpret JSON encoded data