JNCIA-Cloud study plan

Define IaaS, PaaS, and SaaS and map at least three concrete Juniper-relevant examples or use cases to each service model

Compare public, private, hybrid, and multi-cloud deployment models and write a one-line decision rule for when each is chosen

Explain the shared responsibility model and state precisely which layers the provider versus the customer owns in each service model

Describe the core building blocks of a cloud data center (compute, storage, virtual networking, orchestration layer) and how they relate

Explain virtualization versus containerization and identify when each is preferred in a cloud environment

Describe overlay networking concepts (tunnels, encapsulation, VXLAN) and why they are used in cloud fabrics

Trace the path of a packet between two virtual machines on different hosts in a cloud data center, naming each forwarding and encapsulation step

Distinguish east-west from north-south traffic and state which security and routing controls apply to each

Explain how EVPN is used as the control plane for VXLAN overlay networks and what problems it solves versus flood-and-learn

Describe the role of route reflectors and MP-BGP in a cloud data center fabric

Compare centralized versus distributed routing models for connecting tenants to external networks

Identify how underlay and overlay addressing are separated and why that separation matters for scale

Map common cloud network security controls (security groups, network ACLs, firewalls, microsegmentation) to the OSI layers they act on

Explain how stateful versus stateless filtering changes the rules you must write in a cloud environment

Describe how tenant isolation is achieved in a multi-tenant cloud network and where it can fail

Practice writing least-privilege network policy for a two-tier application spanning two subnets

Explain identity and access management fundamentals: authentication, authorization, roles, policies, and least privilege

Distinguish encryption at rest from encryption in transit and describe key management responsibilities in each

Describe how certificates and mutual TLS are used to authenticate workloads in a cloud environment

Identify the top cloud security failure modes (misconfiguration, over-permissive roles, exposed storage, weak key handling) and the control that mitigates each

Describe infrastructure as code principles and why declarative configuration differs from imperative scripting

Explain idempotency and how it enables safe repeated deployment of network and security configuration

Trace how a change to a security policy flows from a source-of-truth repository through review and pipeline to the running cloud environment

Identify where secrets should and should not live in an automation pipeline

Explain the role of orchestration and configuration management systems in managing cloud infrastructure at scale

Describe how APIs and programmatic interfaces replace manual configuration in cloud operations

Compare telemetry and observability approaches (metrics, logs, flows, traces) and state what each detects in a cloud network

Describe how automation supports consistent configuration and drift detection across many devices or tenants

Synthesize all four domains into a single end-to-end design for a multi-tenant cloud network with security and automation built in

Identify your three weakest objectives from prior weeks and close each gap with targeted review

Practice explaining each major concept aloud in under two minutes without notes

Complete a timed mixed-domain self-assessment and review every missed item until you can state the correct reasoning