CNPE study guide
CNPE · Work through your exam, one topic at a time.
The Certified Network Professional Engineer (CNPE) is a vendor-neutral credential aimed at engineers who design, build, secure, and operate production networks rather than simply administer individual devices. It suits mid-career network engineers, senior administrators moving into design roles, and consultants who need to demonstrate breadth across routing and switching, security, operations, WAN and cloud connectivity, automation, and wireless. The CNPE study guide has 8 sections and about 3,390 words.
01Network Architecture and Design
The Network Architecture and Design domain tests whether you can pick a topology, an addressing plan and a physical build that meet stated availability, capacity and cost targets - not simply draw boxes on a diagram. Expect constraints (traffic pattern, budget, uptime target, cable distance) and a question asking which design satisfies them.
461 words, about 2 min02Routing and Switching
The Routing and Switching domain tests the actual forwarding decision - why a frame or packet leaves a particular interface - plus the control-plane protocols that build the tables behind that decision. MAC learning: unknown unicast is flooded inside the VLAN; broadcast reaches every port in the VLAN, including trunk ports carrying it.
424 words, about 2 min03Network Security
The Network Security domain tests whether you can place controls where they actually reduce risk - segmentation, filtering, identity and encryption - on the right device and in the right order. Segment by function and trust level (guest, user, server, management, DMZ) with a routed or firewalled boundary rather than one flat VLAN.
420 words, about 2 min04Network Operations and Troubleshooting
The Network Operations and Troubleshooting domain tests disciplined fault isolation and the operational tooling that lets you see a problem before a user reports it. Pick bottom-up (physical upward), top-down (application downward) or divide-and-conquer (start at a layer you can verify, then bisect).
405 words, about 2 min05WAN and Cloud Connectivity
The WAN and Cloud Connectivity domain tests how you extend the enterprise to remote sites and public cloud without misstating latency, security or cost. Dedicated private circuits give committed rates and SLAs but long lead times; broadband and 4G/5G turn up fast with no SLA and variable loss.
406 words, about 2 min06Network Automation and Programmability
The Network Automation and Programmability domain tests whether you can treat the network as data: model it, push it idempotently, and prove it in version control. NETCONF runs over SSH on TCP 830 and uses YANG models; key operations are get-config, edit-config, and candidate with confirmed-commit for automatic rollback.
374 words, about 2 min07Wireless and Mobility
The Wireless and Mobility domain tests RF reasoning as much as configuration: coverage is easy, capacity and interference are not. 2.4 GHz (2400–2483.5 MHz) offers only three non-overlapping 20 MHz channels - 1, 6 and 11 - so reuse planning is forced.
430 words, about 2 min08Network Governance and Professional Practice
The Network Governance and Professional Practice domain tests the controls around the network: change, risk, documentation, continuity and conduct. These questions are marked on precision of terms, not opinion.
470 words, about 2 min