Networking
Cisco CCNA
Cisco Certified Network Associate
Network fundamentals and access, IP connectivity and services, security fundamentals, and automation.
Part AIntroduction
Part BExam objectives
"% of exam" is each domain's share of questions in the exam outline this guide follows.
1.0Network Fundamentals20% of exam · 13 objectives
- 1.1Explain the role and function of network components
- 1.3Compare physical interface and cabling types
- 1.4Identify interface and cable issues (collisions, errors, mismatch duplex, and/or speed)
- 1.13Describe switching concepts
- 1.5Compare TCP to UDP
- 1.6Configure and verify IPv4 addressing and subnetting
- 1.7Describe the need for private IPv4 addressing
- 1.8Configure and verify IPv6 addressing and prefix
- 1.9Compare IPv6 address types
- 1.10Verify IP parameters for Client OS (Windows, Mac OS, Linux
- 1.11Describe wireless principles
- 1.2Describe characteristics of network topology architectures
- 1.12Explain virtualization fundamentals (virtual machines)
2.0Network Access20% of exam · 9 objectives
- 2.1Configure and verify VLANs (normal range) spanning multiple switches
- 2.2Configure and verify interswitch connectivity
- 2.3Configure and verify Layer 2 discovery protocols (Cisco Discovery Protocol and LLDP)
- 2.5Describe the need for and basic operations of Rapid PVST+ Spanning Tree Protocol and identify basic operations
- 2.4Configure and verify (Layer 2/Layer 3) EtherChannel (LACP)
- 2.6Compare Cisco Wireless Architectures and AP modes
- 2.7Describe physical infrastructure connections of WLAN components (AP, WLC, access/trunk ports, and LAG)
- 2.8Describe AP and WLC management access connections (Telnet, SSH, HTTP, HTTPS, console, and TACACS+/RADIUS)
- 2.9Configure the components of a wireless LAN access for client connectivity using GUI only such as WLAN creation, security settings, QoS profiles, and advanced WLAN settings
3.0IP Connectivity25% of exam · 5 objectives
4.0IP Services10% of exam · 9 objectives
- 4.1Configure and verify inside source NAT using static and pools
- 4.2Configure and verify NTP operating in a client and server mode
- 4.3Explain the role of DHCP and DNS within the network
- 4.4Explain the function of SNMP in network operations
- 4.5Describe the use of syslog features including facilities and levels
- 4.6Configure and verify DHCP client and relay
- 4.7Explain the forwarding per-hop behavior (PHB) for QoS such as classification, marking, queuing, congestion, policing, shaping
- 4.8Configure network devices for remote access using SSH
- 4.9Describe the capabilities and function of TFTP/FTP in the network
5.0Security Fundamentals15% of exam · 10 objectives
- 5.1Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques)
- 5.2Describe security program elements (user awareness, training, and physical access control)
- 5.6Configure and verify access control lists
- 5.3Configure device access control using local passwords
- 5.4Describe security password policies elements, such as management, complexity, and password alternatives (multifactor authentication, certificates, and biometrics)
- 5.5Describe remote access and site-to-site VPNs
- 5.7Configure Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security)
- 5.8Differentiate authentication, authorization, and accounting concepts
- 5.9Describe wireless security protocols (WPA, WPA2, and WPA3)
- 5.10Configure WLAN using WPA2 PSK using the GUI
6.0Automation and Programmability10% of exam · 6 objectives
- 6.1Explain how automation impacts network management
- 6.2Compare traditional networks with controller-based networking & 6.3 Describe controller-based and software defined architectures (overlay, underlay, and fabric)
- 6.4Compare traditional campus device management with Cisco DNA Center enabled device management
- 6.5Describe characteristics of REST-based APIs (CRUD, HTTP verbs, and data encoding)
- 6.6Recognize the capabilities of configuration management mechanisms Puppet, Chef, and Ansible
- 6.7Interpret JSON encoded data