CompTIA Network+ Certification Training

Explore the basics of networking, from how networks form to connecting networks via the internet, and learn the OSI model, ports and protocols, and their security implications.

Explore how two nodes connected by a cable, each with a network interface card, share data using protocols and addressing.

Discover how devices and nodes are interchangeable terms for anything connected to a network, from printers to mobile devices, and when type matters for subnet sizing.

Media is the signal-carrying medium through cables and wireless. It determines network speed and reach, with the length and speed of media driving design decisions.

Explore network adapters, or network interface cards, as transceivers with wired ports or wireless antennas, and learn that MAC addresses are permanent, unlike IP addresses that change across networks.

Learn how mac addresses uniquely identify a device on a network and how internet protocol addresses mark the sender and recipient across multiple hops.

Explore how networks use protocols to start and end data, format data units, and verify integrity, with examples like dhcp and dns mapping ip addresses and ports.

Explore how TCP and UDP transmit data across networks. Compare client-server and peer-to-peer models, and learn basic hardware like hubs, routers, bridges, and switches, plus collision domains.

Compare TCP and UDP to understand connection-based delivery versus best-effort delivery, and learn how TCP guarantees delivery for reliable files, while UDP enables streaming and DNS uses UDP.

Identify client-server networks using a central device to coordinate data, such as routers; compare with peer-to-peer networks where devices act as both client and server, like IoT.

Learn how bridges separate networks into segments using mac addresses to forward data to all ports; switches forward only to the destination port, reducing collisions.

Discover the history of network hardware, from two nodes and hubs to NICs and NIC teaming, and learn about data collisions, broadcasting, and the shift to bridges and switches.

Routers use IP addressing to connect similar networks and distribute data across a network, enabling end to end communication; MAC addresses identify devices and guide data to its next node.

Explore how routers connect similar and dissimilar networks, using IP addressing, gateway concepts, and NAT to bridge private networks to the internet while maintaining anonymity and security.

Explore the OSI model’s seven-layer stack and how data moves from top to bottom using last-in, first-out flow, with Layer 2 using MAC addresses and bridges or switches.

Master the seven OSI layers by starting with the lower layers—physical and data link—and then study network, transport, session, presentation, and application layers.

Learn how encapsulation adds headers (and sometimes trailers) at each OSI layer, forming PDUs from data to segment, packet, frame, and finally bits.

Explain how receiving devices perform encapsulation from layer one to seven on the OSI model, with switches at layer two and routers at layer three, detailing headers and frames.

Explore how the TCP/IP model maps to the OSI model, with the application, transport, internet, and network access layers, and preview ports and protocols.

Explore logical ports and protocols, learn how default ports are used, and why closing unused ports reduces security risk, with sections on well-known, registered, and dynamic ports and NAT.

Explore how port 80 handles unsecured http traffic and port 443 uses ssl/tls to create encrypted, sometimes tunnelled connections, ensuring private web data.

Explore remote access protocols, including secure shell for encrypted command-line access, telnet for unencrypted connections, and remote desktop protocol for viewing and using a remote desktop.

Learn how file transfer protocol transmits files over networks using port 21. Identify secure variants like SFTP on port 22, FTPS on port 443, and TFTP on port 69.

Explore email protocols and ports: smtp port 25 for outgoing mail, pop3 port 110 that does not sync, and imap port 143 that syncs across devices.

Explore key server and device ports for directory services, time sync, file sharing, and network management, including ldap 389, ldaps 636, ntp 123, smb 445, and snmp 161.

Explore network types and topology to design wired and wireless networks, from LANs and WANs to IoT and VoIP, emphasizing modems, switches, routers, and business phones.

Explore network types from home to global networks, including Internet, intranet, and extranet. Learn troubleshooting basics and the wired versus wireless distinctions, plus introduction to the Internet of Things.

Explore area networks by examining a local area network, small office home office setups, and personal area networks, including wireless lan and wireless pan configurations in a fictional company diagram.

Trace how floors form local area networks and connect through routers and modems, and see how the internet enables wide area networks with vpn security considerations.

Explore lands, campus area networks, and metropolitan area networks, and learn how ownership, wired or wireless connections, air gaps, and undersea cables link multiple buildings.

Understand how intranets and extranets govern network access through credentials, not cabling, by giving internal employees and external partners distinct usernames and permissions.

Compare wired and wireless networks by speed and cost: cables are faster and more expensive to upgrade, while wireless enables easier upgrades and campus-area network connections.

Analyze network topologies by comparing physical layout with logical data flow, from ring and bus to star designs, and see how hubs, switches, and routers shape topology.

Explore wired network layouts by comparing bus, ring, star, and mesh topologies, their collision behavior, and the evolution from simple bus connections to centralized star networks.

The bus topology uses a single cable with vampire taps to connect each node. End terminations absorb electricity to prevent reflections, explaining why signals collide on this shared medium.

Explore ring topology and token ring networks, where a single cable forms a ring and data travels in one direction to avoid collisions, using a token to grant transmission.

Explore mesh topology as a direct connection among devices, note the need for multiple ports, and see how routers in a mesh underpin the Internet and larger networks.

Explore star topology, including physical star with hub or bridge presenting a logical bus, and logical star with switches or routers; understand how data flows in each configuration.

Designing a wired network centers on hardware like switches and routers, with firewalls, modems, hubs, and cables; memorize standards such as cat five, cat seven, and 1000BASE-T.

Explore core network hardware, focusing on routers and switches and their collision domains. Understand that routers use IP addressing and switches use MAC addressing, with bridges and wireless bridges.

Connects the internet to a private network with a modem, router (gateway), and firewall. Firewalls block ports and allow data from existing connections, while switches expand networks in larger setups.

Explore how switches organize networks, connect floors and buildings via routers, and use MAC addresses to manage traffic, while clarifying that switches do not connect networks to the internet.

Explore switch types—from managed to regular—focusing on layer 3 switches that handle MAC and IP addressing, NAT, and subnetting, including content and application switches for load balancing.

Explore how bridges and switches use MAC addresses to segment networks; bridges form a single collision domain, while switches create a collision domain per node.

Bridge mode converts a router into the main router to extend the network, while wireless bridges extend wireless coverage by forwarding all traffic to that router.

Explore copper cables, including twisted pair and coaxial, and fiber media at the physical layer, with real-world notes on last-mile fiber and fiber to the door.

Explore physical media in wired networks, from copper twisted pair to fiber, and see how IEEE 802.3 and 802.11 classify cable length and speed, including typical 100-meter length.

Understand twisted pair cabling, including unshielded and shielded types, color pairs, and how tighter twisting reduces interference for data transmission; note grounding, drain wires, and pvc versus platinum flame safety.

Learn the differences between RJ-11 and RJ-45 twisted pair connectors, identify eight-pin T568A and T568B pinouts for ethernet cables, and master the most common straight-through wiring patterns.

Learn how crossover cables in twisted pair setups connect similar devices by swapping transmit and receive wires, using t568a on one end and t568b on the other, versus straight-through cables.

Learn the basics of coaxial cables, including RG-58, RG-59, and RG-6 types, their bandwidth differences, and common connectors such as RF, BNC, and RCA for video and audio.

Explore fiber optics with glass or plastic cores and cladding for faster signals than copper. Compare single mode and multimode, and step index versus graded index transmission for campus networks.

Explore the most common fiber connectors, including straight tip (ST), LC (Lucent) and MTRJ, and how single-mode, multimode, and APC vs UPC affect use in racks, panels, and campus networks.

Explore twisted pair limits with a 100-meter maximum for active-device connections, noting that 60+40 meets the limit while 60+60 exceeds it, and fix with shorter cables, repeaters, or another switch.

Explore Ethernet standards from cat 3 to cat 7 and their speeds from 10 mbps to 10 gbps, with cat 5 or better for gigabit and 100-meter limits.

Explore how Ethernet standards are named, including base vs baseband and bits per second, and match cables like cat5–cat7 and fiber types to fast, gigabit, and 10 gigabit Ethernet.

Explain Ethernet standards, including 10 gigabit base variants and fibre versus baseband, and show why gigabit Ethernet uses twisted pair with cat5e or cat6 cables for the exam.

Explore how wireless networks shape connectivity, covering Wi-Fi, satellites, infrared, and cellular, with 4G, LTE, and 5G; learn that wireless uses wave energy and frequency, 2.4 GHz and 5 GHz.

Explore how 802.11 networks use 2.4 GHz and 5 GHz bands, address interference affecting stations, and harness multiple spatial streams to boost speed and range.

Explore antenna concepts, comparing omni 360-degree beams to focused beams like satellite dishes, and examine sensitivity, gain, and range. Learn about directional antennas and the yagi antenna.

Explore how the internet of things enables small devices to communicate directly, from wearables such as glasses and watches to health-tracking clothes, linking to your phone.

Explore how the Internet of Things forms peer-to-peer mesh networks using devices like smart meters, where antennas radiate signals, create range, and bridge gaps with high-range or directional antennas.

Explore how phones became the first modern network, evolving from traditional lines to VoIP, private branch exchange, and endpoints, and why quality of service matters for business communications.

Learn how the analog PSTN evolved into VoIP and unified communications, with messaging and video conferencing, using private branch exchanges, endpoints, and providers to connect networks to the outside world.

Learn to configure and build wired and wireless networks, starting with binary basics and IP addressing, including DHCP, DNS, and IPv6.

Master how binary represents information as on and off signals, and see how ones and zeros turn into numbers like 192.168.1.254, while preparing for the upcoming IP addressing topic.

Explore how computers use binary for data with on and off states, where one equals true and zero equals false, and how bits form bytes.

Learn how to apply repeating bit-column patterns to place ones and zeros in binary, using the eight-bit 128-64-32-16-8-4-2-1 sequence to reach 255, aiding exam prep.

Eight bits in binary equal two to the eighth power, yielding 256 possibilities from zero to 255, with counting starting at zero and doubling with each additional bit.

Learn how hexadecimal encodes data more compactly than binary or decimal by using two-character hex digits from 0 to f, enabling memory savings and faster systems.

Learn to convert binary to hexadecimal by grouping eight bits, building a chart with 8-4-2-1 weights, and translating binary groups to hex digits for Mac addressing.

Convert binary to decimal using an eight-bit chart, place each bit in a power-of-two column from 128 to 1, and sum the ones to obtain the decimal value.

Learn to convert decimal to binary with a step-by-step chart, using IP examples like 192, 168, and 254, and connect binary, decimal, and hex for addresses.

Learn subsetting, or IP addressing, by creating network addresses like city zones and using subnet masks to determine the network address. Explore classful and classless addressing, practice and revisit often.

Learn to recognize a Mac address and distinguish it from IP v4 and IP v6 addresses, noting that Mac addressing uses hexadecimal and is a physical address.

Mac addresses burn into network adapters, forming the physical layer two addresses used by switches in Ethernet and token ring networks.

Mac addresses are six bytes of hexadecimal, separated by colons or dashes, never dots. The first half is organizationally unique identifier and second half identifies the host at layer 2.

Explore public vs private networks, learn usable IP addresses in IPv4 and the move toward IPv6, and memorize common private ranges: 10.0.0.0/8, 172.16.0.0–172.31.255.255, and 192.168.0.0/16.

Explore IP addressing fundamentals by determining the network portion from the first octet, understanding class-based networks, default gateways for inter-network data, and subnetting along with common interview and exam questions.

Explore IP addressing, the TCP/IP model, and how public and private addresses enable device connectivity, with gateways performing NAT to link private networks to the internet.

Master IP addressing basics: a 32-bit IP address uses four octets in dot-decimal notation, with network and host portions that identify a device, including classful and classless subnet concepts.

Determine the network portion by classifying the first IP octet as A, B, or C, keeping the relevant octets and zeroing the rest, to guide routing and gateway decisions.

Learn how nodes use the destination IP to determine the destination network and gateway path, why switches can't connect networks to the internet, and basics of classful addressing.

Determine network portions by classifying the first octet as class a, b, or c. Routers route packets by comparing destination IPs against the local network and using the default gateway.

Explain how IP packets determine the destination network and when devices share a network or must use a router, and illustrate classful addressing with examples like 176.9.0.0 and 127.0.0.1.

Explore class a, b, and c networks by size, from vast addresses to 256-host class c and 65,000-host class b, with subnet masks shaping private and public networks.

Learn about private ip address ranges in IPv4, including 10.0.0.0 to 10.255.255.255, 172.16.0.0 to 172.31.255.255, and 192.168.0.0 to 192.168.255.255, and how they support private networks and gateway addressing.

Learn how reserved and APIPA addresses affect networks, including why 0, 255, 127, and 169.254 are unusable, and how loopback and APIPA aid troubleshooting.

Explore unicast, multicast, and broadcast addressing and how routers handle them. Learn about network and broadcast addresses, broadcast storms, and calculating usable IP addresses in classful networks.

Learn the shift from classful to classless subnetting, including CIDR and VLSM, and how to use subnet masks—such as 255.255.255.0—to define the network portion like 172.16.36.0.

Explore classful and classless subnetting concepts by examining 32-bit IP addresses, subnet masks, and how 255 and 0 indicate network versus host portions across class A, B, and C.

Explore classless addressing with subnet masks, contrast with classful addressing, turning zeros into ones to create more subnets with fewer hosts per network, eight to sixty five thousand IP addresses.

see how to apply variable length subnet masking by converting binary to decimal subnet masks, creating smaller subnets or larger supernets to efficiently allocate IP addresses.

Learn how CIDR uses variable length subnet masks and slash notation by counting ones in the mask, converting binary to decimal, and applying to 10.0.0.0 networks.

Explore subnetting as a network architect, converting a class b network into multiple class c subnets (172.20.0.0/24) to create a network of networks across Frogmore Soup locations.

Learn subnetting with a /27, determine if two addresses share a network, identify eight subnets of 32 addresses, and verify if 192.168.1.33 is assignable within 192.168.1.0/27.

Identify if two IPs share the same subnet using /25 CIDR notation, calculate subnets from a class C network, and determine subnet addresses with a 128-address block for each subnet.

Master practical subnetting by dividing a class B 172.16.1.0/24 into five subnets of varying sizes, using a chart to assign 25–28 bit masks and accounting for network and broadcast addresses.

Figure out subnet addresses using CIDR notation, allocate subnets with /26, /27, /28, and identify the largest subnet that fits the remaining addresses.

Explore IPv6 as the future of networking, featuring 128-bit addresses and an enormous address space, built-in IP security for encryption and tunneling, and a smaller, simplified header.

Explore IPv6, a 128-bit address system with eight blocks and hexadecimal notation, expanding address space, while enforcing ipsat security to encrypt and tunnel every transmission.

Learn how to shorten an IPv6 address using concatenation by removing one contiguous block of zeros and leading zeros, and restore the full form with the double colon.

Explore how the dynamic host configuration protocol automates IP address assignment, contrasts dynamic with static addresses, and uses APIPA as a fallback when DHCP fails.

Learn how DHCP automatically assigns ip addresses from a scope, using discovery, offer, request, and acceptance, as clients broadcast to 255.255.255.255 and servers respond, with manual and apipa options.

Explore how DHCP assigns and renews IP addresses, handles server failure with APIPA 169 dot 254 addresses for local networking, and uses leases to reclaim unused addresses.

Configure a static ip by creating a dhcp reservation tied to a mac address on Windows Server, ensuring only that node uses the ip within the scope.

Configure a static IPv4 address on a Windows network adapter, using the 172 network with a 255.255.0.0 subnet, a gateway, and DNS to ensure reliable server access.

Assign a static IP by creating a DHCP reservation that binds the address to a MAC, ensuring only that node can use it and completing the reservation.

Explore the domain name system, how it translates names to IP addresses, and why DNS is essential for network access and a common failure point.

Explore DNS manager in Windows Server 2016 to create forward lookup zones, choose primary or secondary, add A, AAAA, and CNAME records, and configure reverse lookup zones with PTR records.

Discover how DNS acts as a phone book for networks by mapping names to IP addresses, using fully qualified domain names, top-level domains, and subdomains, with www host resources.

Explore how dns records like a, ptr, and cname, plus forward and reverse zones and mx, enable name resolution and authentication with kerberos servers.

Explore how DHCP assigns IPs to DNS, how DNS resolution uses recursive and iterative queries, root servers and TTL to locate an A record and a PTR for FQDNs.

Explore how to build a wired network and what happens when a node connects to it. Learn about the hardware and the concepts of dhcp and dns with real-world examples.

Configure an IPv4 network from a 172.16.0.0/16 private address, subdividing into /24 subnets such as 172.16.0.0/24 and 172.16.2.0/24, with each router on its own network.

See how a laptop on a network obtains an ip via dhcp and uses dns to resolve a machine name to an ip for file sharing on the same network.

Configure IPv4 network by placing three routers in bridge mode and offloading DHCP and DNS to a server, with the gateway linking the modem to resources through an access server.

Configure a wireless network by minimizing interference on the 2.4 and 5 GHz bands, choosing channel 1, 6, or 11, and selecting omni or directional antennas with proper placement.

Set up a wireless network with a router and access points, configure subnets (employees 0–127, guests 128–255), and optimize placement for 2.4/5 GHz coverage while avoiding shelving interference.

Place multiple access points with directional antennas to beam toward the ceiling omni, expanding coverage and reducing interference on two-point-four and five gigahertz channels.

Connect to a wifi network by selecting the ssid (service set identifier) and entering a passcode at the access point, then obtain an ip address via dhcp and use dns.

Explore the differences that arise when using an IPv6 device, and how IPv6 works on both wired and wireless networks.

Explore ipv6 address assignment, from devices first creating link-local addresses and soliciting, to receiving a full address via a dhc server or router providing the 64 bit for networks.

Discover how IPv6 uses a 64-bit host and 48-bit global prefix, with a 16-bit subnet ID, while devices self-assign link-local addresses and use stateful or stateless DHCPv6 for network configuration.

Master security basics, including the CIA triad, baseline hardening, authentication and access control, and wireless network hardening to defend the entire system from attackers.

Explore security basics through the CIA triad, triple A concepts, and risk analysis to identify vulnerabilities, threats, and controls, then learn attack classifications and network hardening.

Explore the CIA triad—confidentiality, integrity, and availability—along with the security goals of prevention, detection, and recovery, and examine authorization, access control, and auditing.

Explore security basics like the principle of least privilege, identification and accounting, non-repudiation, separation of duties, privileged accounts, and access controls with groups, ACLs, and group policy, file integrity monitoring.

Practice risk analysis to identify vulnerabilities and threats to data and server room systems, and decide on controls such as backups and firewalls to prevent or mitigate harm.

Perform risk analysis by distinguishing vulnerabilities from attacks, noting many incidents blend categories. Explore physical, software-based, web app, network, and social engineering attacks.

Explore how mitigation uses preventive and detective controls to reduce vulnerabilities and threats, with examples like passwords, door locks, cameras, encryption, air gaps, and fences.

Learn how the security baseline and device hardening arm your network, secure devices with proper access controls, and prevent unauthorized access.

Implement baseline hardening by changing default credentials and renaming accounts, enforce password length of 12+ with three of four complexity types, no reuse of last 12, and a 30-day age.

Implement patch management by testing each update, flagging hotfixes for immediate action, and managing patches and upgrades. Maintain a rollback policy with backups and virtualization considerations for compatibility and security.

Disable unused services, ports, and hardware to reduce attack surface; close TCP 23 and 53, block 80 and 443 on servers, and disable unused accounts, USB ports, and NICs.

Secure power sources to harden devices against surges, brownouts, and outages. Use ups for short-term power and dual feeds or two grids in data centers for continuous operation.

Maintain three copies of your data across two or more sites, with at least one off-site or cloud backup. The archive attribute marks files and folders for backup.

Learn how full, differential, and incremental backups manage file attributes, the trade-offs in time, space, and restoration speed, and why different strategies affect recovery.

Learn the basics of networking, design and connect devices into a network, create Wi-Fi, then secure and troubleshoot to prepare for the net plus exam and global networks.

Apply firewalls to block unused ports and protect the network, recognizing that open ports invite attackers, with hardware usually outperforming software, and options including cloud-based solutions.

Explore firewall types from packet filtering and circuit-level to stateful inspection, then consider application-level proxies with deep packet inspection and NAT concepts for advanced protection.

Learn how network segmentation uses private, public, and semiprivate nodes to protect guests and remote users, with a demilitarised zone between firewalls connecting semiprivate and public resources.

Configure split DNS with internal and DMZ DNS servers, safeguarding access through a firewall. Use Vlad's VLAN approach to group HR, accounting, and engineers on separate networks across locations.

Master authentication and access control, emphasizing auditing and multifactor concepts. Learn single sign-on with Kerberos, ticket granting tickets, and the key distribution center for resource access.

Demonstrate 802.1x port-based authentication using the supplicant, authenticator, and authentication server to grant secure network access, then illustrate single sign-on tokens and access control lists for resource access.

Explore how multifactor authentication combines knowledge, possession, biometrics, behavior, and location to secure logins, with OTP-based two-factor authentication strengthening access to local area networks.

Learn how radius and tac x enable centralized authentication in 802.1x networks, detailing the roles of supplicant, authenticator, and authentication server, with notes on udp versus tcp and enterprise requirements.

Learn how Kerberos enables single sign-on by using ticket granting tickets and a key distribution center to access services like email, file servers, and web servers.

Learn how hashes protect credentials by converting passwords into fixed-size, non-decryptable values using algorithms like sha-256, enabling digital signatures for non-repudiation.

Discover how prime numbers underpin encryption and how public and private keys enable secure communication. Learn how certificate authorities issue certificates to validate websites and enable https transactions.

Master Wi‑Fi hardening by securing access to wireless networks and encrypting data between devices and access points. Apply the latest encryption standards, WPA, WPA2, and WPA3, to minimize interception risk.

Understand wireless networking basics: access points and stations, passphrase or psk, wpa/wpa2 enterprise with a radius server, and ssid names across single or multiple access points and locations.

Set up a wireless network with an SSID and RADIUS, disable extended SSID and broadcast, require the SSID and a strong passphrase, and avoid open networks.

Explore wifi encryption evolution from WSP to WPA3, highlighting insecure WSP and the move to WPA2 and WPA3 with AES, TKIP, SAE, and forward secrecy.

Develop troubleshooting skills using hardware cables and time-domain reflectors, and software tools like and map and Wireshark; distinguish wired and wireless testing and apply a troubleshooting methodology via site survey.

Identify the problem, create a plan, and implement the plan to troubleshoot network access, and prepare for exam questions that test your problem-solving capabilities.

Identify the problem and establish a theory using information gathering, symptom identification, and testing; divide and conquer to test multiple approaches, implement solutions, verify with ping, and document outcomes.

Learn about hardware and software troubleshooting tools, from physical tool kits to apps and command line utilities like ping, IP config, and trace, to diagnose networks.

Master troubleshooting hardware by building and repairing cables, testing cable integrity with signal timing, and applying tools like lookback and Wi‑Fi analyzers for site surveys.

Master cable assembly and troubleshooting with crimpers, punch down tools, and tone generators, locate and identify wall cables, and connect ends to patch panels, switches, routers, and modems.

Learn to test network cables using a multimeter or time domain reflectometer (tdr) to identify open or short circuits, locate terminations, and map twisted pairs, including fiber.

Learn hardware-focused wireless troubleshooting through site surveys, spectrum analyzers, and heat maps to diagnose 2.4 GHz interference, then apply loopback tests on fiber or ethernet to verify the physical layer.

Learn how software tools analyze network data—from packet sniffers to network mapping tools—and compare their overlap to pick the best tool for each job in this CompTIA Network+ certification training.

Explore port scanners that test TCP and UDP ports, verify firewall rules, and use packet sniffers like Wireshark to capture and analyze network traffic.

Learn how network mappers, protocol analyzers, and packet sniffers map, capture, and analyze traffic to identify rogue devices, analyze application-layer traffic, and verify firewall rules.

Analyze wireless networks with Wi-Fi analyzers to survey spectrum and detect interference across 2.4 and 5 GHz. Understand bandwidth testers that measure download and upload speeds, verify QoS and SLAs.

Explore essential command line tools for network troubleshooting, including IP config, ping, traceroute, ARP, and Root, and learn why CLI skills persist beyond GUI changes for the CompTIA Network+ exam.

Learn to use ipconfig to view the IP version four address, subnet mask, and default gateway, determine network alignment, and refresh addresses with ipconfig /release and /renew.

Learn how ipconfig helps troubleshoot connectivity by flushing the DNS resolver cache with ipconfig /flushdns, checking DNS issues, and using help and command prompts to discover available tools.

Ping uses ICMP to test reachability by sending 32-byte packets to a gateway, revealing latency and reachability. Compare name versus IP pings to diagnose DNS problems.

Diagnose DNS issues by inspecting the local DNS resolver cache with ipconfig /displaydns, flushing it with ipconfig /flushdns, and using nslookup to perform full DNS queries for hosts like Apple.com.

Explore traceroute usage across Windows and Unix-like systems to map hop-by-hop routes to destinations such as amazon.com, observe latency in ms, and inspect DNS resolution with nslookup and DNS cache.

Learn advanced command-line network troubleshooting by inspecting routing tables with route print, configuring routes with route add and delete, and resolving ARP entries, plus running commands in administrator mode.

Strengthen your troubleshoot skills across wired, wireless, and miscellaneous network issues by starting with familiar concepts like attenuation and cable length, then expanding to transmission errors and faulty transceivers.

Identify wired network issues such as attenuation and interference, detect faults with a time-domain reflectometer and packet analysis, and optimize performance by managing latency, jitter, and QoS for VoIP.

Address crosstalk by inspecting twisted-pair cables, patch panels, and insulation, and replacing faulty wiring. Keep data cables perpendicular to power lines and use shielded cabling to reduce electromagnetic interference.

Identify short circuits and opens, gaps, and unintended copper contact, and use patch panels and cable testers to verify pinouts, cable types, and transceiver compatibility.

Address wired issues by mastering duplex modes, load balancing with round-robin routing, VLANs, and network analyzers to verify switch configurations and troubleshoot with blinking lights.

Identify wireless issues from reflection, refraction, and absorption that reduce range and create dead spots, and perform a simple site survey with a mobile device to reposition access points.

Understand wireless interference and channel overlap on 2.4 and 5 GHz, with channels 1/6/11 and 3/8, and address common connection issues and WPA/WPA2/WPA3 security, including enterprise radius server requirement.

Evaluate signal to noise ratio by comparing the signal to ambient noise from sources, perform a site survey, and address overcapacity with more access points and multiuser MIMO.

Identify addressing issues such as duplicate ip addresses, mac address conflicts, and rogue dhcp servers. Resolve them by using dhcp scope configuration, reservations or exclusions, arp checks, and ipconfig renew.

Identify untrusted ssl certificates, especially expired or revoked ones, and do not continue. Sync time with network time protocol, manage dhcp scopes, and review firewall rules and access control lists.

Explore dial-up to fiber and the shift from circuit to packet switching. See how gateways, DMZs, fiber transceivers, and 5G connect networks to the internet.

Explore how wide area networks unite separate local area networks via routers and public networks, using vpn encryption to connect remote users and cloud data centers.

Trace the evolution from dial-up to ISDN, noting dial-up limits, why broadband is always on, and how DSL and ISDN use different line types and upload–download symmetry.

Isdn is a standard that uses two 64 kbps bearer channels plus a d signaling channel, multiplexed into primary rate interfaces by t and e carrier systems.

Explore optical carrier fiber networks for WAN, including SONET/SDH, ring backbones, and OC-1 at about 52 Mbps. Recognize wireless LAN considerations with satellites, line-of-sight, and directional antennas.

Explore circuit switching as a direct connection, from old exchanges to modern networks, and how point-to-point protocol and encapsulating frames in layer three packets enable encryption and packet switching.

Learn how packet switching routes data from frame relay to autonomous systems and ATM cells. See how MPLS and metropolitan Ethernet use labels, IP addressing, and quality of service.

Define the demarcation point and the boundary between our network and the ISP. Trace how CSU/DSU, data sensing unit, channel sensing unit, DMZ, and the internal network connect.

Configure vpn concentrators to securely connect remote sites, leverage dynamic multipoint vpn to bypass middlemen, and deploy wireless controllers to manage multi-site ssids across dmz networks.

Explain how distribution frames house patch panels and racks of switches, with horizontal wiring from ceiling runs to RJ-45 wall drops that connect the end user.

Explore fiber transceiver types for patch panels and distribution frames, including SFP and SFP+, duplex and simplex cables, and multi-fiber options, and learn how to match transceivers to cables.

Discover how multiplexing combines multiple signals over one transmission medium using time-division and frequency-division methods, with OFDM error handling, and how spread spectrum reduces interference and keeps transmissions private.

Explore how proxy firewalls use encryption and deep packet inspection to filter content and block threats. See how unified threat management and IDS/IPS strengthen protection for WAN and distribution frames.

Learn how vpn concentrators enable many vpn connections with ipsec encryption for secure remote access. Discover dynamic multipoint vpn that allows remote sites to connect directly, increasing vpn speeds.

Explore the evolution of cellular wide area networks from 1G analog to 5G, detailing GSM and CDMA, 3G convergence, IP packet switching, VoIP, and WiMAX.

Explore the logical infrastructure behind network data flow, including routing and switching protocols, distance vector and link-state concepts, spanning tree, traffic shaping, quality of service, and software defined networking.

Explore distance vector routing, cost-based path selection, router convergence, and how static, dynamic, and default routes in routing tables optimize paths across fiber and copper links with a hybrid approach.

Explore routing protocols including RIP, EIGRP, OSPF, and BGP, detailing hop counts, updates, convergence, and AS-based routing to prepare for the exam.

Explore how VLANs group accountants, project managers, engineers, and marketing across multiple switches using VLAN tagging and trunking, balancing layer two and layer three switch concepts and global scalability.

Explore traffic shaping from early squelch and buffers to modern quality of service and cost of service, including SLA considerations and per-hop IP classification.

Explore software defined networking (SDN) and how virtualizing routing shifts control from forwarding devices to logical data flows across on-premises and cloud environments, simplifying paths from a to z.

Explore virtualization and the cloud, where hardware becomes flexible resources, running NICs, firewalls, gateways, Windows Server or other OSes, accessible from any device.

Learn how virtualization converts hardware into software, enabling one physical machine to run multiple virtual machines with distinct operating systems and a shared virtual network.

Define host and guest machines, hypervisor, and emulator, and learn how virtual machines access host hardware while using licensed software and maintaining isolation.

Explore how virtualization evolved into the cloud, where the internet delivers pay-as-you-go, scalable services, software as a service, platform as a service, and infrastructure as a service.

Explore infrastructure as a service, platform as a service, and software as a service, and learn how cloud providers lease hardware, run virtual desktops, and host web-based apps.

Learn how public, private, and hybrid clouds deliver services and how domain controllers, DNS, DMZ, and radius servers connect securely across on-premises and cloud resources.

Explore how data centers store vast data with racks of servers connected by fast fiber cabling and storage area networks, using fiber channel, infiniband, and iSCSI to enable cloud-scale networking.

Explore data center storage types from direct attached storage to network attached storage and storage area networks, and review RAID 0 mirroring, RAID 1 striping, and cloud storage basics.

Discover how high availability keeps data accessible and uncorrupted, measured in nines and guided by SLAs and QoS, while illustrating fault tolerance, redundancy, failover, fail safe, and fail secure.

This lecture explains load balancing concepts for high availability and throughput, covering active-active and active-passive configurations, failover behavior, clustering, NIC teaming and aggregation, and port aggregation to boost bandwidth.

Explore fault tolerance and disaster recovery within service level agreements, focusing on quality of service, traffic prioritization, baseline requirements, and planning MTBF and MTTR for outages.

Defend your network against attacks by understanding malware, social engineering, eavesdropping, and denial of service; then implement VPN, certificates, active security, and disaster recovery.

Explore social engineering as a primary attack method and examine denial of service, dns poisoning, eavesdropping, and botnets, plus malware such as viruses and ransomware.

Learn how distributed denial of service attacks disrupt servers and websites by amplifying small requests through DNS reflection and spoofed IPs, often via botnets.

Explains arp poisoning and dns poisoning, showing how corrupting dns or arp tables redirects traffic to attackers, enabling credential theft and man-in-the-middle surveillance through botnet command-and-control.

Explore eavesdropping attacks, including man-in-the-middle, DNS poisoning, replay attacks, and session hijacking. See why the man-in-the-middle is the strongest form, with data intercepted by Eve.

Learn how social engineering uses impersonation and hoaxes to trick people, from spoofed emails to phishing and spear phishing, and how IP or MAC spoofing enables attacks.

Explore spear phishing, whaling, and other social engineering tactics. Analyze shoulder surfing, tailgating, dumpster diving, and the evil twin profile to show how attackers exploit personal data.

Examine how botnets coordinate compromised computers through a command and control center to perform tasks like password cracking, breaking encryption, and denial-of-service attacks, using zombies, drones, and bots.

Explore why passwords are the main entry point and summarize key attacks—guessing, dumpster diving, dictionary, rainbow, birthday, and brute force—along with hashing and defense through long, complex passwords.

Explore wifi attack vectors like rogue access points, evil twins, and war chalking, and understand switch defenses against mac floods, flood guard, and spanning tree to prevent spoofing.

Analyze malware by focusing on delivery methods and payloads, from viruses, worms, and trojan horses to ransomware that encrypts drives, rootkits, and logic bombs, often in combined attacks.

Break down malware delivery methods and payloads, highlighting three delivery types and the shift to attack vectors; viruses attach to email or documents and replicate when opened.

Explore how trojan horse delivery embeds malware in downloads, why worms spread as standalone programs through networks, and how social engineering and phishing enable initial infection and broader propagation.

Explain how malware payloads complement delivery methods, with rootkits granting administrator access. Describe logic bombs that wait, botnets and spambot, spyware, key loggers, and sandboxing and quarantine.

The lecture explains ransomware, a rootkit that encrypts drives, data encryption and decryption keys, ransom payments in Bitcoin and Tor, and evolving payloads like spam, phishing, and adware.

Develop policies for onboarding, offboarding, and password management to defend networks. Explain remote connections, VPN basics, encryption, and certificates that secure data and https traffic.

Develop and implement practical security policies, including password policies, incident response, safety procedures, and educate users to prevent unauthorized access and strengthen network security.

Explore the system lifecycle, end of life and end of support considerations, and MTBF planning, then learn environmentally beneficial asset disposal and international export controls and standards shaping network design.

Policies govern employees, visitors, and devices on your network, covering onboarding and offboarding, equipment distribution and recovery, authorization, access, control, auditing and accounting.

Explore how certificates and digital signatures verify identities, prevent man-in-the-middle attacks, and establish secure VPN connections, illustrated by the Target breach and certificate authority verification.

define VPN as tunneling and encryption used whenever data crosses the internet, enabling remoting and site-to-site connections; note SSH and SSL/TLS offer non-VPN options.

Explore ipsec for vpn and encryption, emphasizing ipv6 requirements, vpn modes (tunnel and transport), and non-repudiation via certificates, while contrasting ssl/tls (ftps) with vpn over tcp and udp.

Compare remote access protocols by highlighting SSH as secure on port 22, contrast Telnet, RDP, and VNC, and note VPN use and FTPS/SFTP with LDAP/LDAPS.

Explore defense in depth with active security, use network mappers, analyzers, and sniffers to detect threats and locate attack sources, review honeynets and disaster recovery for net plus exam readiness.

Establish a network baseline to distinguish normal from attack activity. Use metrics such as error rate, utilization, packet drops, and bandwidth and throughput to trace attackers and targets.

centralize notifications and alerts with security information and event management, filter security-related events from logs, and automate hourly reports using SNMP and MIB for network devices.

Compare port mirroring and port forwarding to capture and analyze traffic with packet sniffers, configure switches or hubs, and explore security implications and honeypots.

Understand data loss prevention strategies alongside intrusion detection and prevention systems, exploring how network-based ids/ips and next-gen firewalls defend against data breaches and leaks.

Assess breach status, disconnect the affected device, and use out-of-band and in-band management, including serial ports and remote access, to monitor breached systems with power over Ethernet cameras.

Develop physical and logical network diagrams to locate devices and cables, visualize data flows, and identify IP addressing and gateways for security and troubleshooting.

Ipam centralizes ip addressing, mac reservations, and scope management across an organization, while inventory and change management guard against unauthorized access during updates.

Assess risk analysis and compare cold, warm, and hot recovery sites to ensure a ready backup plan for worst-case downtime.