CompTIA Network+ study plan

CompTIA Network+ · Give each week a clear focus.

8 weeks · About 7 hours per week

Week 1

Networking concepts

Name all seven OSI layers in order and list at least two protocols or devices that operate at each layer
Match 25 common TCP/UDP ports to their services and state whether each is TCP, UDP, or both
Compare star, mesh, hub-and-spoke, and spine-leaf topologies by cost, redundancy, and fault isolation
Distinguish IaaS, PaaS, and SaaS plus public, private, and hybrid deployment models using one real-world example each
Differentiate north-south from east-west traffic and identify where each appears in a cloud design

A self-built 25-row port/protocol/layer reference table, self-quizzed to 90% or better without notes

Week 2

Convert between binary, dotted-decimal, and CIDR notation for IPv4 addresses without a calculator
Classify addresses as private, public, loopback, link-local, or APIPA and state when each is used
Calculate network ID, broadcast address, and usable host range for /24 through /30 subnets
Identify the purpose of A, AAAA, CNAME, MX, TXT, and PTR records and describe DHCP DORA steps in order
Summarize IPv6 addressing types (global unicast, link-local, multicast, anycast) and compare to IPv4 equivalents

A completed 20-problem subnetting and addressing worksheet scored at 85% or higher with work shown

Week 3

Apply the structured troubleshooting methodology (identify, establish theory, test, plan, implement, verify, document) in writing to three separate fault scenarios
Diagnose physical-layer faults by symptom, including duplex mismatch, cable length limits, crosstalk, attenuation, and incorrect connector type
Interpret the output of ping, traceroute, ipconfig/ifconfig, nslookup/dig, arp, netstat, and tcpdump-style captures
Distinguish attenuation, latency, jitter, and packet loss and select the metric that explains a given user complaint

A 10-entry triage log that maps each symptom to an OSI layer, the tools used, and the confirmed root cause

Week 4

Troubleshoot switching faults including VLAN misassignment, STP loops, port security violations, and MAC flapping
Troubleshoot wireless faults including channel overlap, interference, roaming failures, and authentication mismatch
Compare static and dynamic routing and identify the cause of asymmetric or looping routes from a routing table
Sequence the physical installation steps for a small office, including rack placement, power, cooling, and cable management

A timed 40-question Domain 1 and Domain 5 practice set completed at 80% or better, with every missed item rewritten as a corrected note card

Week 5

Design a VLAN and subnet plan for a three-department office including trunk and access port assignments
Compare 802.11 standards and select appropriate bands, channels, and channel widths for a given interference scenario
Distinguish router, switch, firewall, load balancer, and proxy functions and place each correctly in a sample topology
Configure a DHCP scope, reservation, and DNS server assignment conceptually and explain the effect of each setting
Compare SD-WAN, MPLS, broadband, and cellular WAN options by cost, redundancy, and latency

A labeled network diagram plus a one-page configuration sheet covering VLANs, IP ranges, DHCP scope, wireless SSID/band/channel, and WAN link choice

Week 6

Produce documentation artifacts: physical and logical diagrams, IP address management table, and change-management record
Select appropriate monitoring metrics and alert thresholds for bandwidth, interface errors, uptime, and device health
Compare high-availability approaches including load balancing, NIC teaming, VRRP/HSRP, and redundant power and links
Differentiate backup types (full, incremental, differential, snapshot) and state recovery point and recovery time implications
Explain how configuration management, patching cadence, and automated rollback reduce operational risk

A mock network operations package for one site: diagram, IPAM table, monitoring/threshold plan, backup schedule, and a completed change record

Week 7

Differentiate attack types including phishing, on-path, VLAN hopping, ARP spoofing, DoS, and insider threat by mechanism and indicator
Apply device hardening: disable unused ports and services, change defaults, enable SSH over Telnet, and enforce least privilege
Distinguish IDS from IPS, and stateful firewall from stateless ACL, by placement and traffic-handling behavior
Compare authentication and access controls including MFA, RADIUS, TACACS+, 802.1X, and role-based access
Describe the purpose of a site survey-free logical security zone (DMZ, guest, management) and which traffic each permits

A 15-item hardening checklist applied item-by-item to a lab router, switch, and wireless AP, with pass/fail noted and fixes recorded

Week 8

Re-score every previously missed practice item and confirm each is now answered correctly with reasoning
Complete two full-length timed practice exams under exam conditions
Build a one-page memory sheet covering ports, subnetting shortcuts, wireless standards, and troubleshooting order
Identify the weakest two objectives from practice results and re-drill them with focused recall sessions

Two full-length practice exams scored at 85% or better, plus a completed one-page memory sheet and a ranked weak-objective list

Week 2: Ports/protocols table recalled at 90% or better and subnetting worksheet at 85% or better - Domain 1 foundation is solid before moving on

Week 4: Timed 40-question Domain 1 plus Domain 5 set scored at 80% or better, with all misses converted into corrected note cards

Week 6: Network diagram and operations package complete, and a mixed 30-question Domain 2 plus Domain 3 set scored at 80% or better

Week 7: Hardening checklist fully applied with all failures remediated and re-verified

Week 8: Two full-length timed practice exams at 85% or better across all five domains, with no domain below 75%