CNPA study materials
CNPA study resources

CNPA study plan

CNPA · Give each week a clear focus.

8 weeks · About 7 hours per week

Week 1

Network Fundamentals and Models

  • Diagram the OSI and TCP/IP models side by side, labeling the PDU, addressing, and representative protocols at each layer.

  • Explain the encapsulation and de-encapsulation process for a web request from browser to server, naming each header added or removed.

  • Classify ten common network devices and protocols (switch, router, firewall, ARP, DNS, DHCP, HTTP, TLS, ICMP, VLAN) by the OSI layer(s) they operate at and justify each placement.

  • Calculate the effect of adding a Layer 2 switch versus a router on broadcast domains and collision domains in a small topology.

Your checkpoint

A one-page reference sheet mapping OSI/TCP-IP layers to PDUs, devices, and protocols, plus a labeled encapsulation diagram for an HTTP request.

Week 2

Ethernet and Switching

  • Compare cut-through, store-and-forward, and fragment-free switching and state one scenario where each is preferred.

  • Trace a frame through a three-switch topology, showing how the MAC address table is built, aged, and used for forwarding, flooding, and filtering.

  • Configure VLANs, 802.1Q trunking, and access ports on a simulated or real switch, then verify with show commands.

  • Explain the purpose and operation of STP/RSTP, including root bridge election, port roles, and one convergence improvement in RSTP.

  • Differentiate collision domains and broadcast domains and calculate their counts for a given switched topology.

Your checkpoint

A working packet Tracer or lab configuration file with two VLANs, a trunk, and STP verified, plus a screenshot or text capture of the MAC address table and spanning-tree output.

Week 3

IP Addressing and Subnetting

  • Convert between binary, decimal, and hexadecimal for IPv4 addresses and subnet masks without a calculator.

  • Subnet a given Class C and Class B network into a specified number of subnets and list network, broadcast, and usable host ranges.

  • Apply VLSM to allocate addresses for a topology with point-to-point links and LANs of different sizes, documenting the allocation plan.

  • Identify private, loopback, link-local, and multicast IPv4 ranges and explain when each is used.

  • Summarize IPv6 address types (global unicast, link-local, unique local, multicast) and the purpose of SLAAC.

Your checkpoint

A completed subnetting worksheet with at least ten problems solved (including three VLSM designs) and a one-page IPv6 address-type summary.

Week 4

Routing Fundamentals

  • Explain the difference between static and dynamic routing and list two use cases for each.

  • Describe how a router builds its routing table and selects the best path using longest-prefix match and administrative distance.

  • Compare distance-vector and link-state protocols, naming at least one example of each and their loop-prevention mechanisms.

  • Configure and verify static routes and a single-area OSPF adjacency in a lab, then interpret the output of show ip route and show ip ospf neighbor.

Your checkpoint

A lab report showing a routing table before and after adding a static route and an OSPF-learned route, with a written explanation of the selected paths.

Week 5

Network Services and Application Protocols

  • Trace the DHCP DORA process and explain how a DHCP relay allows clients on different subnets to obtain addresses.

  • Describe the DNS resolution process from stub resolver to recursive resolver to authoritative server, and distinguish A, AAAA, CNAME, and MX records.

  • Explain how HTTP/HTTPS, SMTP, and SSH use TCP versus UDP, and identify the default port for each.

  • Capture a DNS query and an HTTP request in a lab or with a local tool, and annotate the key fields in each.

Your checkpoint

An annotated packet capture or sequence diagram showing a full DHCP lease and a DNS lookup, with a port/protocol reference table for at least eight application protocols.

Week 6

Wireless Networking

  • Compare 2.4 GHz and 5 GHz bands on range, throughput, and channel overlap, and recommend a band for a given scenario.

  • Explain the purpose of SSIDs, BSSIDs, and association, and describe how a client roams between access points.

  • Differentiate WPA2-Personal, WPA2-Enterprise, and WPA3, including the role of 802.1X/EAP in enterprise authentication.

  • Identify common wireless interference sources and propose two configuration changes to reduce co-channel interference.

Your checkpoint

A wireless site-survey style report for a two-floor office, including channel plan, band selection, and security recommendation with justification.

Week 7

Network Security Fundamentals

  • Explain the CIA triad and map three common attacks (phishing, on-path attack, DoS) to the triad component each primarily threatens.

  • Describe how a stateful firewall differs from a stateless ACL and give one rule that demonstrates the difference.

  • Explain the role of NAT and PAT in reducing exposure of internal addresses, and configure a basic NAT rule in a lab.

  • Outline how TLS provides confidentiality and integrity for HTTPS, naming the roles of certificates and the handshake.

Your checkpoint

A security control matrix listing at least six controls (firewall, ACL, NAT, TLS, WPA3, 802.1X) with the threat each mitigates and where it sits in the OSI model.

Week 8

Network Operations and Troubleshooting

  • Apply a structured troubleshooting method (identify, hypothesize, test, resolve, document) to three simulated faults: no link, no DHCP address, and unreachable remote subnet.

  • Use ping, traceroute, ipconfig/ifconfig, and show interface/route commands to isolate faults at Layers 1–3.

  • Interpret common interface counters (CRC errors, late collisions, duplex mismatch) and state the likely cause of each.

  • Create a final one-page quick-reference of commands and concepts across all eight domains.

Your checkpoint

A troubleshooting journal documenting three fault scenarios with the commands used, the evidence found, and the resolution, plus the final one-page quick-reference sheet.

Milestones

Week 2: Score at least 80% on a 20-question self-quiz covering Domains 1 and 2, and successfully ping between hosts in different VLANs using inter-VLAN routing in the lab.

Week 4: Complete a timed 30-question mixed quiz on Domains 1–4 with a score of 75% or higher, and correctly solve five subnetting problems in under ten minutes.

Week 6: Explain the DHCP and DNS processes from memory in under five minutes each, and score at least 80% on a 15-question quiz covering Domains 5 and 6.

Week 8: Pass a full-length 60-question practice exam with a score of 80% or higher, and submit the completed troubleshooting journal and quick-reference sheet.