📖 About this Domain
This domain covers key concepts related to 1: Architecture.
🎓 What You Will Learn
- Core concepts of 1: Architecture
- Best practices and implementation
- Real-world application scenarios
🛠️ Skills You Will Build
- Technical proficiency in 1: Architecture
- Problem-solving abilities
- Practical implementation skills
💡 Top Tips to Prepare
- Review official documentation and study guides
- Practice with hands-on exercises
- Focus on understanding core principles
📖 About this Domain
Network Assurance focuses on the tools and protocols required to monitor, troubleshoot, and verify enterprise network operations. This domain covers traditional methods like syslog and SNMP, and modern programmatic interfaces such as NETCONF and RESTCONF for network management.
🎓 What You Will Learn
- You will learn to configure and verify device monitoring using protocols like syslog for logging, SNMPv2c/v3 for device polling, and NetFlow for traffic analysis.
- You will learn to implement traffic mirroring with SPAN, RSPAN, and ERSPAN, and to measure network performance using IP SLA probes.
- You will learn to diagnose network issues using fundamental CLI tools including ping, traceroute, and various debug commands like conditional debugs.
- You will learn to configure and verify programmatic management protocols like NETCONF and RESTCONF, and describe Cisco DNA Center assurance workflows.
🛠️ Skills You Will Build
- You will build the skill to deploy comprehensive network monitoring solutions using NetFlow, SNMP, and syslog to gain visibility into network health.
- You will build the skill to perform in-depth traffic analysis and troubleshooting by configuring port mirroring technologies like SPAN, RSPAN, and ERSPAN.
- You will build the skill to proactively measure and verify service levels for network applications and services using IP SLA operations.
- You will build the skill to interact with network devices programmatically for monitoring and configuration tasks using NETCONF and RESTCONF.
💡 Top Tips to Prepare
- Practice configuring SNMPv3 in a lab environment, focusing on the security models like authPriv and associated group and user configurations.
- Master the configuration of Flexible NetFlow by creating custom flow records, flow monitors, and flow exporters for specific monitoring requirements.
- Lab the differences and configuration steps for SPAN, RSPAN, and ERSPAN to understand their specific use cases and limitations.
- Use tools like Postman or Python scripts to practice making NETCONF and RESTCONF calls to a virtual router for device state retrieval.
📖 About this Domain
The Automation domain introduces the principles of network programmability and automation. It covers the interpretation of Python scripts, interaction with APIs like RESTCONF, and the use of data models such as YANG. This section validates your ability to leverage modern tools for network management.
🎓 What You Will Learn
- You will learn to interpret basic Python scripts, focusing on data types, loops, and conditional logic for network operations.
- You will learn to describe data modeling with YANG and construct valid JSON payloads for API requests.
- You will learn to utilize REST APIs, including RESTCONF and Cisco DNA Center APIs, to programmatically manage network devices.
- You will learn to compare agent-based and agentless orchestration tools and implement on-box automation using EEM applets.
🛠️ Skills You Will Build
- The ability to read Python code and identify its function within a network automation script.
- The skill to interact with network controllers and devices programmatically using REST APIs and parse JSON data.
- The capability to differentiate between configuration management tools like Ansible, Puppet, and Chef for orchestration.
- The competence to construct a basic EEM applet on a Cisco IOS XE device to automate responses to network events.
💡 Top Tips to Prepare
- Focus on understanding Python fundamentals like dictionaries, lists, and loops, as script interpretation is a core task.
- Utilize the Cisco DevNet sandboxes to practice making RESTCONF and DNA Center API calls with tools like Postman.
- Memorize the primary HTTP response codes (e.g., 200, 201, 401, 404) and their significance in API interactions.
- Understand the high-level architectural differences between Ansible, Puppet, and Chef, particularly agent versus agentless models.
📖 About this Domain
This domain covers foundational network security principles for enterprise networks. It focuses on securing network devices and implementing infrastructure security features. You will learn both configuration and verification of critical security components.
🎓 What You Will Learn
- Configure device access control using local passwords and AAA with TACACS+ and RADIUS.
- Implement infrastructure security features including Access Control Lists (ACLs) and Control Plane Policing (CoPP).
- Describe network security design components like TrustSec, MACsec, and endpoint security with AMP.
- Explain wireless security features such as EAP, WebAuth, and PSK for securing WLANs.
🛠️ Skills You Will Build
- Implement and verify AAA for device administration to control authentication, authorization, and accounting.
- Configure standard, extended, and time-based ACLs to filter IPv4 and IPv6 traffic.
- Secure the control plane by implementing CoPP to protect the router's CPU from DoS attacks.
- Identify and describe the function of network access control mechanisms like 802.1X, MAB, and WebAuth.
💡 Top Tips to Prepare
- Practice ACL configuration and verification in a lab environment, focusing on syntax and placement.
- Understand the key differences between RADIUS and TACACS+ protocols for AAA implementation.
- Focus on the conceptual purpose of security design elements like TrustSec and endpoint security.
- Master the configuration steps for securing VTY and console lines on Cisco IOS devices.
📖 About this Domain
This domain covers virtualization technologies foundational to modern enterprise networks. It details device virtualization like hypervisors, data path virtualization using VRF and GRE, and network virtualization concepts including LISP and VXLAN.
🎓 What You Will Learn
- Differentiate between Type 1 bare-metal and Type 2 hosted hypervisors and describe virtual machine and virtual switch functions.
- Configure and verify data path segmentation using Virtual Routing and Forwarding (VRF) instances.
- Implement and verify Generic Routing Encapsulation (GRE) and IPsec tunnels for overlay connectivity.
- Describe network virtualization concepts including Locator/ID Separation Protocol (LISP) and Virtual Extensible LAN (VXLAN) overlays.
🛠️ Skills You Will Build
- Implement and troubleshoot VRF-Lite configurations to achieve routing table isolation on a single device.
- Configure point-to-point GRE tunnels and understand the encapsulation process for creating logical links.
- Analyze server virtualization architectures, identifying the roles of hypervisors, VMs, and virtual switching.
- Explain the control plane and data plane operations of LISP and VXLAN for network virtualization.
💡 Top Tips to Prepare
- Practice VRF-Lite CLI commands for creation, interface assignment, and verification using `show ip vrf`.
- Focus on GRE tunnel configuration steps and verification commands like `show ip interface brief` and `show interface tunnel`.
- Create a comparison chart for Type 1 vs. Type 2 hypervisors, noting their placement in the hardware/software stack.
- Memorize key terms for overlays: VTEP and VNI for VXLAN; EID and RLOC for LISP.
📖 About this Domain
This domain covers core enterprise network infrastructure technologies. It focuses on Layer 2 switching, Layer 3 routing protocols, wireless networking principles, and essential IP services. Mastery of these topics is critical for building and troubleshooting robust network foundations.
🎓 What You Will Learn
- You will learn to troubleshoot Layer 2 technologies like 802.1q trunking, EtherChannels, and Spanning Tree Protocols such as RSTP and MST.
- You will learn to configure and verify Layer 3 routing protocols including OSPFv2 for internal routing and eBGP for external connectivity.
- You will learn the fundamentals of wireless networking, including RF principles, AP modes, WLC discovery, and client roaming.
- You will learn to configure and describe key IP services like NTP, NAT/PAT, and First Hop Redundancy Protocols (FHRP) like HSRP and VRRP.
🛠️ Skills You Will Build
- You will build skills to configure and verify OSPF adjacencies, areas, and summarization in a multi-area environment.
- You will build skills to troubleshoot wireless client connectivity issues, including authentication and profile problems using the WLC GUI.
- You will build skills to implement network redundancy using EtherChannel for link aggregation and HSRP/VRRP for gateway failover.
- You will build skills to establish eBGP peering between directly connected autonomous systems and understand its path selection process.
💡 Top Tips to Prepare
- Focus on hands-on labs for configuring OSPFv2, eBGP, HSRP, and NAT/PAT to solidify command-line proficiency.
- Master the differences between RSTP and MST, including their operational states and configuration nuances.
- Understand the WLC discovery process and the steps a Lightweight AP takes to join a controller.
- Memorize the OSPF path selection criteria and the BGP best path selection algorithm.
Premium Access Includes
- ✓ Quiz Simulator
- ✓ Exam Mode
- ✓ Progress Tracking
- ✓ Question Saving
- ✓ Flash Cards
- ✓ Drag & Drops
- ✓ 3 Months Access
- ✓ PDF Downloads