CNEpv study plan
CNEpv · Give each week a clear focus.
8 weeks · About 7 hours per week
Network Fundamentals, Architecture, and Topologies & Routing Protocols and Switching Technologies
Diagram the OSI and TCP/IP models from memory and map five common protocols to their layers
Compare switching concepts (VLANs, trunking, STP, EtherChannel) and state the failure mode each one prevents
Explain the difference between collision and broadcast domains using a topology you draw yourself
Configure a VLAN and 802.1Q trunk between two simulated switches and verify with show commands
Your checkpoint
A one-page topology diagram plus a command log showing a working VLAN/trunk configuration with verification output
Routing Protocols and Switching Technologies
Compare distance-vector and link-state behavior, including convergence and loop prevention mechanisms
Configure single-area OSPF between three routers and verify neighbor adjacency and route tables
Troubleshoot an OSPF adjacency failure by checking area ID, timers, MTU, and network type
Contrast static routing, default routes, and floating static routes with a failover scenario
Your checkpoint
A three-router OSPF lab write-up including neighbor output, route table before/after a link failure, and root-cause notes for one induced adjacency failure
Routing Protocols and Switching Technologies & Network Security, Access Control, and Threat Mitigation
Configure eBGP between two autonomous systems and verify path selection with show ip bgp output
Explain first-hop redundancy and select between HSRP, VRRP, and GLBP for a stated requirement
List the primary threats at Layers 2 and 3 (MAC flooding, ARP spoofing, DHCP starvation) and the countermeasure for each
Configure port security and DHCP snooping and confirm the violation behavior
Your checkpoint
A lab report showing a working eBGP peering plus port-security and DHCP-snooping verification with one triggered violation
Network Security, Access Control, and Threat Mitigation
Differentiate stateful and stateless filtering and place a firewall, IDS, and IPS correctly in a sample topology
Configure ACLs (standard and extended) and verify correct permit/deny ordering
Build an IPsec site-to-site VPN and confirm phase 1 and phase 2 negotiation
Describe 802.1X components and the role of the authenticator, supplicant, and authentication server
Your checkpoint
A security design sheet mapping each control to the threat it mitigates, backed by an IPsec tunnel and ACL verification capture
Network Operations, Monitoring, and Troubleshooting
Interpret syslog severity levels and route logs to a central collector
Use SNMP polling to collect interface counters and explain the difference between polling and traps
Apply a structured troubleshooting method (define, isolate, hypothesize, test, verify) to a simulated outage
Analyze packet captures to distinguish latency, loss, and application-layer faults
Your checkpoint
A troubleshooting case study documenting one simulated outage from symptom to root cause, with evidence from logs and a capture
Automation, Programmability, and Network Management
Compare configuration management models (CLI, NETCONF, RESTCONF, SNMP) and select one for a stated scenario
Query a device with RESTCONF or NETCONF and parse the structured response
Explain model-driven vs imperative automation and the role of YANG data models
Write a small script that backs up device configurations and flags drift
Your checkpoint
A working automation script with a README explaining the API used, the data model, and how drift is detected
Cloud, Virtualization, and Emerging Network Technologies
Distinguish IaaS, PaaS, and SaaS and place network functions (virtual firewall, load balancer) in each model
Explain overlay vs underlay networking and how VXLAN encapsulation extends Layer 2
Compare east-west and north-south traffic patterns and the security implications of each
Describe how SD-WAN policy differs from traditional WAN routing
Your checkpoint
A cloud reference architecture diagram labeling virtual networks, segmentation, and connectivity to on-premises
Network Fundamentals, Architecture, and Topologies & Routing Protocols and Switching Technologies & Network Security, Access Control, and Threat Mitigation & Network Operations, Monitoring, and Troubleshooting & Automation, Programmability, and Network Management & Cloud, Virtualization, and Emerging Network Technologies
Score at least 80% on a full-length timed practice exam and log every missed item by domain
Re-teach your three weakest domains using your own notes and diagrams
Redo two labs from earlier weeks without referring to the original walkthrough
Build a one-page quick-reference sheet of commands, port numbers, and protocol facts
Your checkpoint
A scored practice exam with a remediation log showing every missed item, its domain, and the corrected reasoning
Milestones
Week 2: You can build a three-router OSPF topology from a blank simulator and verify adjacency without notes
Week 4: You can explain, in writing, which control blocks which threat for five distinct attack scenarios
Week 6: Your automation script runs end to end and produces a diff report on a simulated configuration change
Week 8: You score at least 80% on a full timed practice exam with no domain below 70%