CCNA, CCNP & CCIE prep

Free, blueprint-based practice, mock exams and labs.

Three tracks, laid out by the domains of Cisco's public exam topics. Every topic has a short original explanation, the simulator labs that practise it, and questions — hand-written ones plus generators that never run out. Sign in with a free account to start.

CCNA 200-301

The foundation: how networks are built, switched, routed, secured and automated.

Network Fundamentals — OSI and TCP/IP models, TCP vs UDP, Cabling, interfaces and interface errors, IPv4 addressing and subnetting, IPv6 addressing and types, Switching: MAC learning, frames, collisions, Wireless principles, Virtualization and cloud basics
Network Access — VLANs, trunks and inter-VLAN routing, Spanning Tree (RSTP/PVST+), EtherChannel (LACP/PAgP), CDP and LLDP, Wireless architectures and WLC
IP Connectivity — The routing table, AD and longest match, Static and default routes (IPv4/IPv6), Single-area OSPFv2, First-hop redundancy (HSRP)
IP Services — NAT and PAT, DHCP, DNS, NTP, SNMP, Syslog, QoS concepts, SSH, TFTP/FTP and device management
Security Fundamentals — Access control lists, Port security, DHCP snooping, DAI, AAA, passwords, VPN and wireless security
Automation and Programmability — Controller-based networking and SDN, REST APIs, JSON, Ansible/Terraform concepts

CCNP Enterprise ENCOR 350-401 · ENARSI 300-410

The core exam and the advanced routing concentration — the CCIE written is ENCOR.

ENCOR · Architecture — Two- and three-tier design, fabric, cloud, SD-WAN and SD-Access architecture, QoS: marking, queuing, policing, shaping, Hardware and software switching (CEF, TCAM)
ENCOR · Virtualization — VRF-lite, GRE and IPsec tunnels, LISP, VXLAN concepts
ENCOR · Infrastructure — Trunking, EtherChannel, RSTP and MST, EIGRP vs OSPF, multi-area OSPF, filtering, eBGP and best-path selection, Wireless: RF, roaming, AP modes, NTP/PTP, NAT, HSRP/VRRP, multicast
ENCOR · Network Assurance — Debugs, ping/traceroute, SNMP, syslog, NetFlow, SPAN, IP SLA
ENCOR · Security — Device access control, AAA, CoPP, ACLs, ZBFW, 802.1X, MACsec, wireless security
ENCOR · Automation — Python, JSON, YANG, NETCONF/RESTCONF, Ansible, Chef, Puppet, EEM, webhooks
ENARSI · Layer 3 — Redistribution, AD, loops and tagging, PBR, route maps, prefix lists, distribute lists, iBGP, route reflectors, BGP attributes and troubleshooting, EIGRP stub, summarization, variance, named mode, OSPF areas, LSA types, stub/NSSA, virtual links
ENARSI · VPN — MPLS operations and L3VPN, DMVPN phases, NHRP, IPsec
ENARSI · Infrastructure Security — AAA, uRPF, CoPP, IPv6 first-hop security
ENARSI · Infrastructure Services — Troubleshooting DHCP, NAT, SNMP, syslog, IP SLA, NetFlow

CCIE Enterprise Infrastructure Written: ENCOR · Lab: 8 hours

Design, deploy, operate and optimise — then troubleshoot under the clock.

Network Infrastructure — Switched campus: VTPv3, MST, EtherChannel, UDLD, loop guard, EIGRP and OSPF at scale: filtering, summarization, convergence, BFD, BGP: policy, communities, RR, confederations, multipath, AS-path, Multi-protocol redistribution and loop prevention, Multicast: PIM-SM, RP, IGMP, SSM, RPF
Software-Defined Infrastructure — SD-Access: fabric, LISP, VXLAN, SGT, SD-WAN: OMP, TLOC, policies, templates
Transport Technologies and Solutions — MPLS L3VPN: VRF, MP-BGP, RD/RT, PE-CE, DMVPN phase 2/3, IPsec profiles
Infrastructure Security and Services — CoPP, uRPF, IPv6 FHS, 802.1X, ZBFW, QoS, NAT, FHRP, IP SLA, NetFlow, multicast services
Automation and Programmability — Python, YANG, NETCONF/RESTCONF, model-driven telemetry, EEM

Cisco, CCNA, CCNP and CCIE are trademarks of Cisco Systems, Inc. zNetLaB is not affiliated with or endorsed by Cisco.