CNEn study guide
CNEn · Work through your exam, one topic at a time.
The Certified Network Engineer (CNEn) is a vendor-neutral credential aimed at practitioners who design, build, secure, and operate data networks rather than at candidates seeking a single vendor's specialist track. It suits network engineers, NOC and operations staff, systems administrators who own connectivity, and security generalists who need credible depth in routing, switching, and traffic control. The exam is delivered as multiple choice and is weighted across six domains: network fundamentals and architecture (20%), routing and switching (25%), network security (15%), network services and applications (15%), network operations and troubleshooting (15%), and emerging network technologies (10%). That weighting rewards breadth with real depth in switching and routing, so a candidate who only studies vendor command syntax will struggle; expect conceptual questions about why a design behaves as it does, plus scenario items where you choose a troubleshooting step or a control. The CNEn study guide has 6 sections and about 1,904 words.
01Network Fundamentals and Architecture
This domain tests how well you can explain packet movement from application to wire and justify design choices. Expect questions on layered models, encapsulation, addressing, subnetting, and topology selection.
314 words, about 2 min02Routing and Switching
This domain tests forwarding decisions, VLAN design, Spanning Tree behavior, and routing protocol operation. Questions often ask which path a frame or packet takes and why.
323 words, about 2 min03Network Security
This domain tests security design and control placement: segmentation, access control, encryption, and identity. Expect scenario questions about where to apply a control and what it actually inspects.
320 words, about 2 min04Network Services and Applications
This domain tests the services that make networks usable-DNS, DHCP, NAT, time, and application delivery-and how clients reach them across subnets. Core rules DNS resolves names to records: A/AAAA for addresses, CNAME for aliases, MX for mail, PTR for reverse lookup, TXT for policy and verification.
317 words, about 2 min05Network Operations and Troubleshooting
This domain tests monitoring, change control, and structured fault isolation. Questions reward evidence-based reasoning over guessing.
309 words, about 2 min06Emerging Network Technologies
This domain tests how controllers, virtualization, cloud, and automation change network operations. Expect definitional questions plus design trade-offs.
321 words, about 2 min