Certification Training
Pick a certification track below. Each one links to the free Guided Guided Labs that teach the concepts, plus Hosted Network Labs you can book hands-on time, and, for CCNA, a bank of practice Exam Questions.
CCNA200-301
The associate-level foundation for every Cisco track: switching, routing, IP services and network security basics.
Recommended starting point
Follow the structured CCNA path from foundations through guided troubleshooting, knowledge checks, and the final challenge lab.
Start the CCNA learning pathGuided Labs
- CCNA Configuration Foundations
- CCNA Final Challenge Lab
- Spanning Tree: Root Bridge Election
- VLANs, Trunking & Spanning Tree
- OSPF Neighbor Down: Area Mismatch
- Access Control Lists: Configuring & Verifying
- DHCP Snooping: Trust Boundary Misconfiguration
- Static Route: Wrong Next Hop
- EtherChannel: Two Passive Ends and a Bundle That Never Forms
- DHCP Relay: Missing Helper Address
- NAT Overload: A Perfect Mapping That Never Translates
- DTP: The One Negotiation Combination That Silently Does Nothing
- OSPF: An Empty Neighbor Table and a Link That Pings Fine
- NAT Overload: ACL Selection Error
- IPv6 SLAAC: Prefix Not Advertised for Autoconfiguration
- VLAN Access Port: Wrong VLAN
- STP Edge Port: Missing BPDU Guard
- Inter-VLAN Routing: SVI Down
- OSPF: Passive Interface Surprise
- IPv4 VLSM: Overlapping Subnets
- Extended ACL: Direction and Placement
- NTP: Wrong Source Interface
- IPv6 Static Route: Invalid Next Hop
- IPv6 Neighbor Discovery: Default Gateway Failure
- HSRP: Priority and Preempt
- HSRP: Missing Uplink Tracking
- Trunking: Native VLAN Mismatch
- DTP: The Trunk That Never Negotiated
- Trunk Allowed VLANs: A Silently Pruned VLAN
- VTP: VLANs That Never Reach the Other Switch
- Voice VLAN: Phone Has No Service
- STP Root Guard: One VLAN Blocked on a Healthy Trunk
- Port Security: Violation and Err-disabled Recovery
- Dynamic ARP Inspection: Untrusted Uplink
- Router on a Stick: Missing Encapsulation
- OSPF: Reference Bandwidth Mismatch
- OSPF: DR and BDR Election on a Shared Segment
- Summarization: Invalid Block Boundary
- Floating Static Route: Wrong Administrative Distance
- Static NAT: Port Forward Has No Inside Interface
- DHCP Pool: Excluded Range Exhaustion
- VTY Access Class: Locked Out of Management
- SNMP: Community ACL Blocks the NMS
- Syslog: Severity Threshold Hides Events
- SSH Remote Access: Enabling It Properly
- OSPF Stuck in EXSTART: IP MTU Mismatch
- SSH Refused: VTY Transport, RSA Keys and Local Login
- IOS DHCP Server: The Pool That Leased the Gateway
- Duplex Mismatch: The Link That Works Badly
- CDP and LLDP: The Neighbour That Is Not There
- No Gateway of Last Resort
- OSPF DR Election: The Wrong Router Won
- IPv6 EUI-64: The Address Nobody Configured
- Extended Ping: The Missing Return Route
- OSPFv3: The Interface That Was Never Enabled
- Routing Table: The Host Route That Wins
- VRRP: The Wrong Router Is Master
- AAA: Locked Out When TACACS+ Goes Down
- SCP: The Backup Server Cannot Pull the Config
- Storm Control: One Port Floods the VLAN
- RA Guard: The Policy Nobody Attached
- Edge Port: The Access Point Is Up, Its Clients Are Not
- DNS Records: Mail Cannot Find Its Server
- macOS: Stuck on a Self-Assigned Address
Exam Questions
Practice questions for CCNAHosted Network Labs
CCNACCNP EnterpriseENCOR / ENARSI
Advanced routing, SD-WAN and SD-Access, plus the Catalyst Center automation platform that ties it together.
Guided Labs
- EIGRP Neighbor Down: AS Mismatch
- Cisco Catalyst Center
- OSPF Multi-Area & Redistribution
- BGP Peering & Path Selection
- BGP Route Reflector Scaling
- Cisco SD-WAN (Viptela)
- EIGRP Variance: The Second Path That Never Loads
- BGP Local Preference: Leaving by the Wrong ISP
- IP SLA Tracking: The Brownout a Floating Route Cannot See
Hosted Network Labs
ENCOR, ENARSI, ENAUTO, ENSLD, SD-WAN, SD-ACCESS-BASE, SD-ACCESS-ADVCCNP SecuritySCOR
Secure VPNs, zero trust access policy and SOC-style detection work across the Cisco security portfolio.
CCNP Data CenterDCCOR
Nexus 9000 NX-OS switching and vPC consistency for the modern Cisco data center.
Guided Labs
Hosted Network Labs
DCCOR, DCID, DCIT, DCSAN, DCAUTO, DCINX9K, DCMDSCCNP CollaborationCLCOR
Call routing and dial-plan troubleshooting on Cisco Unified Communications Manager.
Guided Labs
Hosted Network Labs
CLCEI, CLCOR, CLFNDU, CLICA, CIPT1, CIPT2CCNP Service ProviderSPCOR
MPLS L3VPN route-target design and troubleshooting for service provider cores.
Guided Labs
Hosted Network Labs
SPCORCisco DevNetDEVCOR
RESTCONF/API automation, webhook integrations and network telemetry for the DevNet track.
Guided Labs
Hosted Network Labs
DEVASC, DEVCOR, AIOPSPalo Alto NetworksPCNSE
NGFW policy, NAT and App-ID troubleshooting on real Palo Alto firewalls.
Guided Labs
FortinetNSE 4
Security policy and site-to-site IPsec VPN configuration on FortiGate.
Guided Labs
Hosted Network Labs
FORTI-FUND, FORTI-NSE4, FORTI-ADVCheck PointCCSE
Security policy and identity awareness configuration on Check Point gateways.
Guided Labs
Hosted Network Labs
CP-FUND, CP-CCSE, CP-ADVRedHat
Linux administration, firewalling and Ansible automation across the RedHat certification paths (RHCSA, RH294 and beyond).
Not sure which track fits you?
Start with a free Guided Lab, or book a demo and we'll help you pick the right one.