CNEn study plan
CNEn · Give each week a clear focus.
8 weeks · About 7 hours per week
Network Fundamentals and Architecture & Routing and Switching
Diagram the OSI and TCP/IP models from memory and map at least 15 protocols to their correct layer
Convert between binary, decimal, and CIDR prefix notation for 20 random subnet masks without error
Explain how a frame is rewritten hop by hop across a routed path, naming the source and destination MAC and IP at each hop
Configure two directly connected routers with IPv4 addresses and verify reachability with ping and traceroute
Your checkpoint
A one-page hand-drawn topology with a written packet-walk narrative showing L2/L3 header changes at every hop, plus a scored 20-item subnetting drill at 90% or better
Routing and Switching
Compare distance-vector and link-state behavior by tracing how each converges after a link failure
Configure single-area OSPF on three routers and verify adjacency states with show commands
Configure static routes including a floating static backup and prove failover works
Subnet a given address block to satisfy a stated host-count-per-segment requirement and document the plan
Your checkpoint
A working three-router OSPF lab plus a failover test log showing adjacency formation, route table before and after failure, and convergence observations
Routing and Switching & Network Fundamentals and Architecture
Configure VLANs, 802.1Q trunking, and inter-VLAN routing on a switch and router pair
Explain and verify Spanning Tree behavior after intentionally creating a loop
Configure EtherChannel and confirm the bundle is forwarding
Describe how ARP, DHCP relay, and first-hop redundancy interact on a multi-VLAN segment
Your checkpoint
A switch lab writeup with captured output for trunk status, STP topology, and EtherChannel summary, plus a written explanation of why the looped path was blocked
Network Security & Routing and Switching
Apply standard and extended ACLs to permit and deny specific traffic, then verify with test pings
Configure port security and demonstrate a violation response
Explain the difference between stateful and stateless filtering and where each is deployed
Describe how a VPN tunnel and NAT traversal interact at a packet level
Your checkpoint
An ACL and port-security lab with before/after test matrices showing which flows succeeded and which were blocked, plus a 20-question self-quiz scored at 80% or better
Network Security & Network Services and Applications
Compare symmetric and asymmetric encryption and identify where each appears in a TLS handshake
Configure DHCP and DNS on a lab server and resolve internal and external names from a client
Explain how NAT translates addresses and ports and verify translations on a router
Identify common attack categories such as spoofing, on-path interception, and denial of service, and name one mitigation for each
Your checkpoint
A services lab in which a client obtains an address via DHCP, resolves a name via DNS, and reaches a web server through NAT, documented with command output at each step
Network Services and Applications & Network Operations and Troubleshooting
Set up NTP synchronization and explain why time accuracy matters for logging and certificates
Build a systematic troubleshooting sequence for a reported connectivity failure and apply it to a broken lab
Use ping, traceroute, and packet capture to isolate whether a fault is L1, L2, L3, or application
Interpret interface counters and logs to distinguish congestion from errors
Your checkpoint
A troubleshooting case report on a deliberately broken lab: symptom statement, hypotheses ranked, tests run, root cause, fix, and verification
Network Operations and Troubleshooting & Emerging Network Technologies
Diagnose and resolve three injected faults in under 20 minutes each without hints
Explain how software-defined networking separates the control and data planes and what that changes operationally
Describe the role of overlay networks and tunneling in modern data center and cloud designs
Summarize the security and management implications of IoT and Wi-Fi 6 deployments
Your checkpoint
A timed fault-injection log recording three faults, time to resolution, and the diagnostic path used for each, plus a one-page comparison of traditional versus SDN operations
Network Fundamentals and Architecture & Routing and Switching & Network Security & Network Services and Applications & Network Operations and Troubleshooting & Emerging Network Technologies
Review weak areas flagged in weeks 1 through 7 and re-drill them to mastery
Complete two full-length timed practice sets and analyze every missed item by domain
Rebuild the core topology from memory and re-verify OSPF, VLANs, ACLs, and NAT
Write a one-page summary sheet of formulas, port numbers, and default behaviors
Your checkpoint
A domain-by-domain score report from two timed practice sets showing at least 80% overall and no domain below 70%, with a written remediation note for each remaining weak area
Milestones
Week 2: Can subnet any given prefix on paper in under two minutes and explain OSPF adjacency formation without notes
Week 4: ACL test matrix is complete and correct, and the self-quiz score is 80% or higher
Week 6: Can execute the full troubleshooting sequence on an unfamiliar broken lab and correctly identify root cause within 30 minutes
Week 8: Two timed practice sets completed with at least 80% overall and no domain below 70%