CNEn
Certified Network Engineer (CNEn)
More study resources
Cheat sheet
Keep the key ideas within reach.
ExploreKey terms
Get comfortable with the vocabulary.
ExploreStudy plan
Give each week a clear focus.
ExploreCommon mistakes
Understand the traps and how to avoid them.
ExploreCase studies
Put your knowledge to work in context.
ExploreExam-day guide
Prepare for the day ahead.
ExploreAbout this exam
The Certified Network Engineer (CNEn) is a vendor-neutral credential aimed at practitioners who design, build, secure, and operate data networks rather than at candidates seeking a single vendor's specialist track. It suits network engineers, NOC and operations staff, systems administrators who own connectivity, and security generalists who need credible depth in routing, switching, and traffic control. The exam is delivered as multiple choice and is weighted across six domains: network fundamentals and architecture (20%), routing and switching (25%), network security (15%), network services and applications (15%), network operations and troubleshooting (15%), and emerging network technologies (10%). That weighting rewards breadth with real depth in switching and routing, so a candidate who only studies vendor command syntax will struggle; expect conceptual questions about why a design behaves as it does, plus scenario items where you choose a troubleshooting step or a control. Preparation works best as a staged plan: rebuild fundamentals (OSI and TCP/IP behavior, subnetting, addressing, Ethernet and wireless operation), then practice routing and switching decisions until they are automatic, then layer security, services such as DNS and DHCP, monitoring, and current topics like automation, SD-WAN, and cloud interconnect. Hands-on labs, even a small virtual topology, teach failure modes faster than reading. Confirm current administrative details such as scheduling, fees, and scoring directly with the certifying body, which publishes the authoritative figures.
What you'll study
About CNEn preparation
What is the CNEn actually for?
It certifies that you can reason about network design and operation across vendors, not just configure one product line. Expect it to be useful for roles that own uptime and architecture: network engineer, operations or NOC escalation, infrastructure generalist. Check with employers whether they list it, since recognition varies by region and industry.
How is the exam delivered?
Questions are multiple choice. The published format lists only that item type, so plan to read carefully and eliminate options rather than rely on partial credit or lab simulation. Confirm the current delivery method, whether remote proctored or at a test center, with the certifying body before you book.
How long is the exam and how many questions?
Those figures are set by the certifying organization and change between revisions, so any number quoted secondhand may be stale. The official body publishes the current question count, time limit, and appointment length on its site; check there when you schedule so you can budget your pacing.
What score do I need to pass, and what does it cost?
Passing scores and fees are published by the certifying body, not fixed by this guide, and they can differ by country and currency. Look up the current values on the official site before booking. Do not budget from forum posts, which often describe an older exam version.
How hard is it, honestly?
The 25% routing and switching weight makes it unforgiving for candidates who memorize terms without understanding behavior. If you can explain what happens hop by hop when a packet crosses a VLAN boundary, or why a route is preferred, you are on track. Pure recall study tends to plateau around the fundamentals domain.
Can I retake it if I fail?
Retake rules, waiting periods, and any fees are set by the certifying organization and are not universal. Check the official policy page before your first attempt so you know your options. Practically, diagnose which domain dragged your score down and rebuild that area before rebooking rather than repeating the same preparation.
In what order should I study the domains?
Start with fundamentals, because subnetting, addressing, and encapsulation reasoning underpin everything else. Then go deep on routing and switching, the largest weight. Add security and services next, since both assume solid forwarding knowledge. Finish with operations and troubleshooting, then emerging technologies, which are easiest to absorb once the baseline is firm.
What are the most common failure modes?
Three recur: weak subnetting under time pressure, shallow routing knowledge limited to one protocol's commands, and skipping troubleshooting methodology in favor of trivia. A fourth is ignoring the smaller domains entirely; at 15% each, security and services can decide the outcome. Build a small lab and practice diagnosing injected faults.
Do I need hands-on lab experience?
It is not a formal prerequisite, but it is the fastest way to internalize behavior. A virtual topology with a couple of routers, a switch, and a client lets you break things deliberately: misconfigure a trunk, blackhole a route, watch ARP and DNS fail. That experience transfers directly to scenario questions about diagnosis.
How current is the emerging technologies content?
Expect conceptual coverage of automation and infrastructure-as-code, software-defined and overlay networking, SD-WAN, and cloud or data-center interconnect, rather than deep product specifics. At 10% weight it will not carry you, but ignoring it costs easy marks. Study the principles and typical use cases, and verify the current topic list with the certifying body.