LCPE study plan

Map the OSI and TCP/IP models layer by layer, stating at least two protocols and one PDU name per layer from memory

Convert between binary, decimal, and prefix-length notation for 20 random subnet masks without a calculator

Identify the role of a switch, router, and access point in a small office topology and describe which OSI layer each primarily operates at

Label every interface, cable type, and connector on a hand-drawn 3-switch, 2-router topology and justify each physical medium choice

Configure VLANs, access ports, and 802.1Q trunk ports on at least two emulated switches and verify segmentation with ping tests

Explain the full 802.3 Ethernet frame field sequence and state the purpose of the FCS and preamble

Compare CSMA/CD half-duplex behavior with full-duplex operation and describe why collisions disappear on a switched full-duplex link

Diagram the 802.11 association process from probe request through DHCP address assignment

Assign IPv4 addresses and verify connectivity across three directly connected subnets using a routing table you read line by line

Configure static routes, including a floating static route, and prove failover by shutting down the primary link

Derive the connected, static, and default route entries a router would install for a given addressing plan

Describe how a router chooses among candidate routes using longest-prefix match and administrative distance

Configure single-area OSPFv2 on three routers and verify two-way neighbor adjacency with the neighbor and database commands

Explain the OSPF neighbor state progression and name the packet types exchanged at each stage

Troubleshoot a deliberately mismatched area ID and hello timer, documenting the symptom and fix

Compare OSPF cost calculation with static routing and state when dynamic routing is the better choice

Design and implement an IPv4 addressing plan with VLSM for a four-segment network, including a /30 point-to-point link

Configure a DHCP server pool and confirm a client receives address, mask, gateway, and DNS via DHCP

Configure NAT overload on an edge router and verify inside-to-outside translation with the translation table

Summarize an IPv6 address to its compressed form and identify the global unicast, link-local, and multicast prefix ranges

Configure a device for SSH-only management access and verify that Telnet access is refused

Compare syslog, SNMP, and NTP by function and configure at least one logging destination and one time source

Apply an extended ACL that permits a specific host to a web server while denying other traffic, and confirm with test traffic

Explain port security, DHCP snooping, and dynamic ARP inspection as mitigations for specific Layer 2 attacks

Describe how a site-to-site VPN differs from remote-access VPN in trust boundary and encryption endpoint

Explain the AAA framework and where authentication, authorization, and accounting each apply in a device login flow

Read a JSON or YAML configuration snippet and extract the interface settings it describes

Compare controller-based and traditional device-by-device management and state one operational benefit of each

Re-run a timed 60-question mixed-domain practice set and record per-domain accuracy

Re-teach your two weakest domains by rebuilding the relevant lab from a blank configuration

Resolve every missed practice item by writing the correct concept in your own words and the reason the distractor was wrong

Build a one-page command and concept reference covering the top 15 items you most often forget