Course Outline

The Cisco Certified Network Associate CCNA (200-301) certification exam covers the following domains –

Domain 1: Network Fundamentals (20%)

• Firstly, explain the role and function of network components

• Describe characteristics of network topology architectures

• Compare physical interface and cabling types

• Identify interface and cable issues (collisions, errors, mismatch duplex, and/or speed)

• Compare TCP to UDP

• Configure and verify IPv4 addressing and subnetting

• Describe the need for private IPv4 addressing

• Configure and verify IPv6 addressing and prefix

• Also, compare IPv6 address types

• Verify IP parameters for Client OS (Windows, Mac OS, Linux)

• Describe wireless principles

• Explain virtualization fundamentals (virtual machines)

• Finally, describe switching concepts

Domain 2: Network Access (20%)

• Firstly, configure and verify VLANs (normal range) spanning multiple switches

• Configure and verify Interswitch connectivity

• Configure and verify Layer 2 discovery protocols (Cisco Discovery Protocol and LLDP)

• Then, configure and verify (Layer 2/Layer 3) EtherChannel (LACP)

• Describe the need for and basic operations of Rapid PVST+ Spanning Tree Protocol and identify basic operations

• Compare Cisco Wireless Architectures and AP modes

• Also, describe physical infrastructure connections of WLAN components (AP, WLC, access/trunk ports, and LAG)

• Describe AP and WLC management access connections (Telnet, SSH, HTTP, HTTPS, console, and TACACS+/RADIUS)

• Configure the components of a wireless LAN access for client connectivity using GUI only such as WLAN creation, security settings, QoS profiles, and advanced WLAN settings

Domain 3: IP Connectivity (25%)

• Firstly, interpret the components of the routing table

• Determine how a router makes a forwarding decision by default

• Configure and verify IPv4 and IPv6 static routing

• Then, configure and verify single area OSPFv2

• Finally, describe the purpose of first-hop redundancy protocol

Domain 4: IP Services (10%)

• Firstly, configure and verify inside source NAT using static and pools 2019 Cisco Systems, Inc.

• Configure and verify NTP operating in a client and server mode

• Explain the role of DHCP and DNS within the network

• Then, explain the function of SNMP in network operations

• Describe the use of Syslog features including facilities and levels

• Also, configure and verify DHCP client and relay

• Explain the forwarding per-hop behavior (PHB) for QoS such as classification, marking, queuing, congestion, policing, shaping

• Configure network devices for remote access using SSH

• Finally, describe the capabilities and function of TFTP/FTP in the network

Domain 5: Security Fundamentals (15%)

• Firstly, define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques)

• Describe security program elements (user awareness, training, and physical access control)

• Configure device access control using local passwords

• Describe security password policies elements, such as management, complexity, and password alternatives (multifactor authentication, certificates, and biometrics)

• Then, describe remote access and site-to-site VPNs

• Configure and verify access control lists

• Configure Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security)

• Also, differentiate authentication, authorization, and accounting concepts

• Describe wireless security protocols (WPA, WPA2, and WPA3)

• Finally, configure WLAN using WPA2 PSK using the GUI

Domain 6: Automation and Programmability (10%)

• Firstly, explain how automation impacts network management

• Compare traditional networks with controller-based networking

• Describe controller-based and software-defined architectures (overlay, underlay, and fabric)

• Then, compare traditional campus device management with Cisco DNA Center enabled device management

• Also, describe characteristics of REST-based APIs (CRUD, HTTP verbs, and data encoding)

• Recognize the capabilities of configuration management mechanisms Puppet, Chef, and Ansible

• Finally, interpret JSON encoded data