● Explain the role and function of network components

• ● Routers
• ● Layer 2 and Layer 3 switches
• ● Next-generation firewalls and IPS
• ● Access points
• ● Controllers (Cisco DNA Center and WLC)
• ● Endpoints
• ● Servers
• ● PoE

● Describe the characteristics of network topology architectures

• ● Two-tier
• ● Three-tier
• ● Spine-leaf
• ● WAN
• ● Small office/home office (SOHO)
• ● On-premise and cloud

● Compare physical interface and cabling types

• ● Single-mode fiber, multimode fiber, copper
• ● Connections (Ethernet shared media and point-to-point)

● Identify interface and cable issues (collisions, errors, mismatch duplex, and/or speed)

● Compare TCP to UDP

● Configure and verify IPv4 addressing and subnetting

● Describe the need for private IPv4 addressing

● Configure and verify IPv6 addressing and prefix

● Describe IPv6 address types

• ● Unicast (global, unique local, and link-local)
• ● Anycast
• ● Multicast
• ● Modified EUI 64

● Verify IP parameters for Client OS (Windows, Mac OS, Linux)

● Describe wireless principles

• ● Nonoverlapping Wi-Fi channels
• ● SSID
• ● RF
• ● Encryption

● Explain virtualization fundamentals (server virtualization, containers, and VRFs)

● Describe switching concepts

● MAC learning and aging

● Frame switching

● Frame flooding

● MAC address table

● Configure and verify VLANs (normal range) spanning multiple switches

• ● Access ports (data and voice)
• ● Default VLAN
• ● Connectivity

● Configure and verify interswitch connectivity

• o Trunk ports
• o 802.1Q
• o Native VLAN

● Configure and verify Layer 2 discovery protocols (Cisco Discovery Protocol and LLDP)

● Configure and verify (Layer 2/Layer 3) EtherChannel (LACP)

● Describe the need for and basic operations of Rapid PVST+ Spanning Tree Protocol and identify basic operations

• o Root port, root bridge (primary/secondary), and other port names
• o Port states (forwarding/blocking)
• o PortFast benefits

● Compare Cisco Wireless Architectures and AP modes

● Describe physical infrastructure connections of WLAN components (AP,WLC, access/trunk ports, and LAG)

● Describe AP and WLC management access connections (Telnet, SSH, HTTP,HTTPS, console, and TACACS+/RADIUS)

● Configure the components of a wireless LAN access for client connectivity using GUI only such as WLAN creation, security settings, QoS profiles, and advanced WLAN settings

● Interpret the components of the routing table

• o Routing protocol code
• o Prefix
• o Network mask
• o Next hop
• o Administrative distance
• o Metric
• o Gateway of last resort

● Determine how a router makes a forwarding decision by default

• o Longest match
• o Administrative distance
• o Routing protocol metric

● Configure and verify IPv4 and IPv6 static routing

• o Default route
• o Network route
• o Host route
• o Floating static

● Configure and verify single area OSPFv2o Network route

• o Neighbor adjacencies
• o Point-to-point
• o Broadcast (DR/BDR selection)
• o Router ID

● Describe the purpose of first hop redundancy protocol

● Configure and verify inside source NAT using static and pools

● Configure and verify NTP operating in a client and server mode

● Explain the role of DHCP and DNS within the network

● Explain the function of SNMP in network operations

● Describe the use of syslog features including facilities and levels

● Configure and verify DHCP client and relay

● Explain the forwarding per-hop behavior (PHB) for QoS such as classification, marking, queuing, congestion, policing, shaping

● Configure network devices for remote access using SSH

● Describe the capabilities and function of TFTP/FTP in the network

● Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques)

● Describe security program elements (user awareness, training, and physical access control)

● Configure device access control using local passwords

● Describe security password policies elements, such as management, complexity, and password alternatives (multifactor authentication, certificates, and biometrics)

● Describe remote access and site-to-site VPNs

● Configure and verify access control lists

● Configure Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security)

● Differentiate authentication, authorization, and accounting concepts

● Describe wireless security protocols (WPA, WPA2, and WPA3)

● Configure WLAN using WPA2 PSK using the GUI

● Explain how automation impacts network management

● Compare traditional networks with controller-based networking

Describe controller-based and software defined architectures (overlay, underlay, and fabric)

• o Separation of control plane and data plane
• o North-bound and south-bound APIs

● Compare traditional campus device management with Cisco DNA Center enabled device management

● Describe characteristics of REST-based APIs (CRUD, HTTP verbs, and data encoding)

● Recognize the capabilities of configuration management mechanisms Puppet, Chef, and Ansible

● Interpret JSON encoded data

● Determine and configure hardware settings

● Boot the system

● Change run levels/boot targets and shutdown or reboot system

● Design hard disk layout

● Install a boot manager

● Manage shared libraries

● Use Debian package management

● Use RPM and YUM package management

● Linux as a virtualisation guest

● Work on the command line

● Process text streams using filters

● Perform basic file management

● Use streams, pipes and redirects

● Create, monitor and kill processes

● Modify process execution priorities

● Search text files using regular expressions

● Basic file editing

● Create partitions and filesystems

● Maintain the integrity of filesystems

● Control mounting and unmounting of filesystems

● Manage file permissions and ownership

● Create and change hard and symbolic links

● Find system files and place files in the correct location

● LPIC-1 Exam 102

● Customise and use the shell environment

● Customise or write simple scripts

● Install and configure X11

● Graphical Desktops

● Accessibility

● Manage user and group accounts and related system files

● Automate system administration tasks by scheduling jobs

● Localisation and internationalisation

● Maintain system time

● System logging

● Mail Transfer Agent (MTA) basics

● Manage printers and printing

● Fundamentals of internet protocols

● Persistent network configuration

● Basic network troubleshooting

● Configure client side DNS

● Perform security administration tasks

● Setup host security

● Securing data with encryption