CNPLE study guide
CNPLE · Work through your exam, one topic at a time.
The Certified Network Professional Engineer (CNPE, sometimes written CNPLE) is a vendor-neutral credential intended for network engineers who design, operate, secure, and troubleshoot production networks rather than only configure single devices. It suits candidates with a few years of hands-on experience who are moving from task execution toward architecture ownership, or who need a structured way to demonstrate breadth across routing, security, operations, services, and automation. The CNPLE study guide has 7 sections and about 2,026 words.
01Network Architecture and Design
A candidate must be able to move between the three-tier model (core, distribution, access) and its collapsed variants, explain why a two-tier spine-leaf fabric suits east-west data-center traffic, and justify redundancy choices such as device-level versus link-level versus path-level protection. Understand hierarchical addressing, summarization boundaries, and how physical topology constrains the routing design.
301 words, about 2 min02Routing and Switching
Candidates must be fluent in switching fundamentals (VLANs, trunking, Spanning Tree variants, port security, EtherChannel) and in routing fundamentals for OSPF, EIGRP, and BGP. Know the OSPF neighbor state machine, area types, LSA types, and the order of preference for route selection.
296 words, about 1 min03Network Security
Understand the security zones and trust boundaries that shape a design: untrusted internet, DMZ, internal user, and management planes. Know stateful versus stateless filtering, ACL direction and implicit deny, NAT interactions with inspection, and the difference between authentication, authorization, and accounting.
288 words, about 1 min04Network Operations and Troubleshooting
Candidates must reason systematically through the layers: physical, data link, network, transport, application. Know the diagnostic value of interface counters, syslog severity levels, SNMP polling versus traps, NetFlow and sFlow records, and packet capture placement.
293 words, about 1 min05Network Services and Applications
Know how DHCP works (DORA, relay behavior, option 82), DNS resolution paths and record types (A, AAAA, CNAME, MX, TXT, PTR), and how NAT and PAT affect application reachability. Understand QoS building blocks: classification, marking, queuing, shaping, policing, and the behavior of priority queues.
288 words, about 1 min06Network Automation and Programmability
Understand the shift from CLI-driven change to model-driven, idempotent automation. Know the difference between imperative scripts and declarative configuration, and the role of YANG models, NETCONF, RESTCONF, and gRPC/gNMI.
272 words, about 1 min07Network Governance, Compliance, and Professional Practice
Understand how policy, standards, and procedures differ, and how they map to controls. Know the purpose of frameworks and regulations in general terms (risk management, data protection, audit evidence) without overstating specifics.
288 words, about 1 min