JNCDS-DC study plan
JNCDS-DC · Give each week a clear focus.
8 weeks · About 7 hours per week
Data Center Architecture and Design Principles & Data Center Switching and Fabric Technologies
Diagram a three-tier and a spine-leaf data center topology from memory, labeling every layer and its failure domains
Explain underlay versus overlay separation and where each lives in a VXLAN EVPN fabric
Compare oversubscription ratios for compute, storage, and management traffic and justify a chosen ratio for a given workload
List the physical cabling and optics standards you would specify for 10G/25G/100G server and fabric links
Identify single points of failure in a sample design and propose redundancy fixes
Your checkpoint
A one-page annotated reference diagram of a spine-leaf fabric with underlay/overlay boundaries, oversubscription math, and a list of at least six failure-domain risks with mitigations
Data Center Switching and Fabric Technologies
Configure and verify VLANs, trunks, and 802.1Q tagging on a simulated pair of switches
Build a working LACP port-channel and demonstrate behavior when one member link fails
Configure RSTP/MST and explain how it interacts with vPC or MC-LAG topologies
Contrast vPC, MC-LAG, and stack-based designs on control-plane independence and upgrade impact
Trace a frame end-to-end through a leaf-spine fabric and describe every encapsulation and lookup stage
Your checkpoint
A lab log with captured show-command output proving VLAN trunking, LACP failover, and loop prevention, plus a written comparison table of vPC versus MC-LAG versus stacking
Data Center Switching and Fabric Technologies
Deploy a VXLAN EVPN fabric with an IGP underlay and BGP EVPN control plane in a virtual lab
Explain the roles of VTEP, VNI, route type 2, route type 3, and route type 5 in forwarding and MAC/IP learning
Configure anycast gateway and symmetric IRB, then verify inter-VNI routing
Describe multi-homing options such as EVPN multihoming and when each is appropriate
Troubleshoot a simulated failure where a VNI fails to come up and document the isolation steps
Your checkpoint
A working virtual VXLAN EVPN fabric with at least three VTEPs, two tenants, anycast gateway, and a troubleshooting write-up of one induced failure
Data Center Routing and IP Fabric Design
Design an IP fabric underlay using eBGP with unique ASNs and verify ECMP hashing across all spine links
Compare OSPF, IS-IS, and eBGP as underlay protocols on convergence, scale, and operational simplicity
Explain BGP best-path selection order and apply it to a multi-homed data center edge scenario
Configure BFD and tune failure detection for fabric links
Document an addressing plan with loopbacks, point-to-point /31s, and summarization boundaries
Your checkpoint
An IP fabric design document containing the addressing plan, routing protocol choice with justification, ECMP verification output, and a BFD convergence test result
Data Center Routing and IP Fabric Design
Design a data center edge that connects to multiple ISPs and explain route filtering, local preference, and AS-path prepending choices
Compare stretched Layer 2 versus Layer 3 to the edge and state the tradeoffs for workload mobility
Plan a migration from a legacy three-tier network to a spine-leaf fabric with minimal downtime
Describe overlay-to-external routing using EVPN route type 5 and verify it in the lab
Evaluate VRF-lite and MPLS-free segmentation options for tenant isolation
Your checkpoint
A migration runbook covering pre-checks, cutover sequence, rollback triggers, and post-cutover validation commands for moving one pod from three-tier to spine-leaf
Data Center Security and Network Services
Design a segmentation model using VRFs and security zones mapped to application tiers
Configure ACLs and a stateful firewall insertion point, then verify permitted and denied flows
Explain micro-segmentation approaches in a virtualized data center and how policy follows the workload
Plan network services including DHCP relay, NTP, DNS, and first-hop redundancy for a fabric
Describe how to secure the control plane with authentication, role-based access, and management-plane filtering
Your checkpoint
A security and services design package with a zone-to-VRF matrix, sample ACL and firewall rules, and a services placement diagram showing DHCP, DNS, NTP, and gateway redundancy
Data Center Automation, Orchestration, and Management
Use a Python script with a network library to pull interface state from multiple devices and export structured data
Write an idempotent configuration template and apply it to at least three devices in the lab
Compare agent-based, agentless, and API-driven automation models and pick one for a given environment
Set up a source-of-truth data model for device inventory, VLANs, and underlay links
Describe CI-style validation such as config diffing and pre-change compliance checks
Your checkpoint
A small automation repository that reads inventory from a data file, renders configuration, pushes it to three lab devices, and produces a diff report before and after the change
Data Center Architecture and Design Principles & Data Center Switching and Fabric Technologies & Data Center Routing and IP Fabric Design & Data Center Security and Network Services & Data Center Automation, Orchestration, and Management
Complete a timed full-length practice set and score each domain separately to find weak areas
Re-derive the top failure modes and design tradeoffs for each domain without notes
Re-run the two weakest labs from earlier weeks until they pass cleanly
Build a one-page cheat sheet of numbers, protocol roles, and design rules you keep missing
Review every missed practice question and write the underlying concept in your own words
Your checkpoint
A scored practice exam report by domain plus a personal cheat sheet and a list of remaining weak topics with a remediation date for each
Milestones
Week 2: Can explain and demonstrate Layer 2 forwarding, link aggregation failover, and loop prevention without notes, with lab output as evidence
Week 4: Has a functioning VXLAN EVPN fabric and an IP fabric underlay with verified ECMP, and can describe route type roles and BGP path selection from memory
Week 6: Can produce a complete migration runbook and a security/services design package that another engineer could execute from
Week 8: Practice exam score by domain shows no domain below 70 percent, and every missed question has a written explanation and remediation date