Cisco CCNA course Expert level by STEPS

New Syllabus CCNA 200-301.

The following topics are general guidelines for the content likely to be included on the exam. However, other related topics may also appear on any specific delivery of the exam. To better reflect the contents of the exam and for clarity purposes, the guidelines below may change at any time without notice.20%1.0 Network Fundamentals1.1Explain the role and function of network components

1.1.aRouters1.1.bL2 and L3 switches1.1.cNext-generation firewalls and IPS1.1.dAccess points1.1.eControllers (Cisco DNA Center and WLC)1.1.fEndpoints1.1.gServers1.2Describe characteristics of network topology architectures1.2.a2 tier1.2.b3 tier1.2.cSpine-leaf1.2.dWAN1.2.eSmall office/home office (SOHO)1.2.fOn-premises and cloud1.3Compare physical interface and cabling types1.3.aSingle-mode fiber, multimode fiber, copper1.3.bConnections (Ethernet shared media and point-to-point)1.3.cConcepts of PoE1.4Identify interface and cable issues (collisions, errors, mismatch duplex, and/or speed)1.5Compare TCP to UDP 1.6Configure and verify IPv4 addressing and subnetting 1.7Describe the need for private IPv4 addressing
Configure and verify IPv6 addressing and prefix1.9Compare IPv6 address types 1.9.aGlobal unicast1.9.bUnique local 1.9.cLink local 1.9.dAnycast1.9.eMulticast1.9.fModified EUI 641.10Verify IP parameters for Client OS (Windows, Mac OS, Linux)1.11Describe wireless principles1.11.a Nonoverlapping Wi- Fi channels1.11.b SSID1.11.c RF1.11.d Encryption1.12Explain virtualization fundamentals (virtual machines)1.13Describe switching concepts1.13.aMAC learning and aging1.13.bFrame switching1.13.cFrame flooding1.13.dMAC address table20%2.0 Network Access2.1Configure and verify VLANs (normal range) spanning multiple switches2.1.aAccess ports (data and voice)2.1.bDefault VLAN2.1.cConnectivity2.2Configure and verify interswitch connectivity2.2.aTrunk ports2.2.b802.1Q2.2.cNative VLAN2.3Configure and verify Layer 2 discovery protocols (Cisco Discovery Protocol and LLDP)2.4Configure and verify (Layer 2/Layer 3) EtherChannel (LACP)2.5Describe the need for and basic operations of Rapid PVST+ Spanning Tree Protocol and identify basic operations2.5.aRoot port, root bridge (primary/secondary), and other port names2.5.bPort states (forwarding/blocking)
2019 Cisco Systems, Inc. This document is Cisco Public. Page 32.5.cPortFast benefits2.6Compare Cisco Wireless Architectures and AP modes2.7Describe physical infrastructure connections of WLAN components (AP, WLC, access/trunk ports, and LAG)2.8Describe AP and WLC management access connections (Telnet, SSH, HTTP, HTTPS, console, and TACACS+/RADIUS) 2.9Configure the components of a wireless LAN access for client connectivity using GUI onlysuch as WLAN creation, security settings, QoS profiles, and advanced WLAN settings25% 3.0 IP Connectivity3.1Interpret the components of routing table3.1.aRouting protocol code3.1.bPrefix3.1.cNetwork mask3.1.dNext hop3.1.eAdministrative distance3.1.fMetric3.1.gGateway of last resort3.2Determine how a router makes a forwarding decision by default3.2.aLongest match3.2.bAdministrative distance3.2.cRouting protocol metric3.3Configure and verify IPv4 and IPv6 static routing3.3.aDefault route3.3.bNetwork route3.3.cHost route3.3.dFloating static3.4Configure and verify single area OSPFv23.4.aNeighbor adjacencies3.4.bPoint-to-point3.4.cBroadcast (DR/BDR selection)3.4.dRouter ID3.5Describe the purpose of first hop redundancy protocol10%4.0 IP Services4.1Configure and verify inside source NAT using static and pools
2019 Cisco Systems, Inc. This document is Cisco Public. Page 44.2Configure and verify NTP operating in a client and server mode4.3Explain the role of DHCP and DNS within the network4.4Explain the function of SNMP in network operations4.5Describe the use of syslog features including facilities and levels4.6Configure and verify DHCP client and relay4.7Explain the forwarding per-hop behavior (PHB) for QoS such as classification, marking, queuing, congestion, policing, shaping 4.8Configure network devices for remote access using SSH 4.9Describe the capabilities and function of TFTP/FTP in the network15%5.0 Security Fundamentals5.1Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques)5.2Describe security program elements (user awareness, training, and physical access control) 5.3Configure device access control using local passwords 5.4Describe security password policies elements, such as management, complexity, and password alternatives (multifactor authentication, certificates, and biometrics)5.5Describe remote access and site-to-site VPNs5.6Configure and verify access control lists5.7Configure Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security)5.8Differentiate authentication, authorization, and accounting concepts5.9Describe wireless security protocols (WPA, WPA2, and WPA3)5.10Configure WLAN using WPA2 PSK using the GUI10%6.0 Automation and Programmability6.1Explain how automation impacts network management6.2Compare traditional networks with controller-based networking6.3Describe controller-based and software defined architectures (overlay, underlay, and fabric)6.3.aSeparation of control plane and data plane 6.3.bNorth-bound and south-bound APIs6.4Compare traditional campus device management with Cisco DNA Center enabled device management6.5Describe characteristics of REST-based APIs (CRUD, HTTP verbs, and data encoding)6.6Recognize the capabilities of configuration management mechanisms Puppet, Chef, and Ansible6.7Interpret JSON encoded.