Certification Training
Pick a certification track below. Each one links to the free Guided Labs that teach the concepts, the Virtual Labs you can book for real hands-on time, and, for CCNA, a bank of practice Exam Questions.
CCNA200-301
The associate-level foundation for every Cisco track: switching, routing, IP services and network security basics.
Recommended starting point
Follow the structured CCNA path from foundations through guided troubleshooting, knowledge checks, and the final challenge lab.
Start the CCNA learning pathGuided Labs
- CCNA Configuration Foundations
- CCNA Final Challenge Lab
- Spanning Tree: Root Bridge Election
- VLANs, Trunking & Spanning Tree
- OSPF Neighbor Down: Area Mismatch
- Access Control Lists: Configuring & Verifying
- DHCP Snooping: Trust Boundary Misconfiguration
- Static Route: Wrong Next Hop
- EtherChannel: LACP Mode Mismatch
- DHCP Relay: Missing Helper Address
- NAT Overload: A Perfect Mapping That Never Translates
- DTP: The One Negotiation Combination That Silently Does Nothing
- OSPF: Hello and Dead Timer Mismatch
- NAT Overload: ACL Selection Error
- IPv6 SLAAC: Prefix Not Advertised for Autoconfiguration
- VLAN Access Port: Wrong VLAN
- STP Edge Port: Missing BPDU Guard
- Inter-VLAN Routing: SVI Down
- OSPF: Passive Interface Surprise
- IPv4 VLSM: Overlapping Subnets
- Extended ACL: Direction and Placement
- NTP: Wrong Source Interface
- IPv6 Static Route: Invalid Next Hop
- IPv6 Neighbor Discovery: Default Gateway Failure
- HSRP: Priority and Preempt
- HSRP: Missing Uplink Tracking
- Trunking: Native VLAN Mismatch
- DTP: The Trunk That Never Negotiated
- Trunk Allowed VLANs: A Silently Pruned VLAN
- VTP: VLANs That Never Reach the Other Switch
- Voice VLAN: Phone Has No Service
- STP Root Guard: One VLAN Blocked on a Healthy Trunk
- Port Security: Violation and Err-disabled Recovery
- Dynamic ARP Inspection: Untrusted Uplink
- Router on a Stick: Missing Encapsulation
- OSPF: Reference Bandwidth Mismatch
- OSPF: DR and BDR Election on a Shared Segment
- Summarization: Invalid Block Boundary
- Floating Static Route: Wrong Administrative Distance
- Static NAT: Port Forward Has No Inside Interface
- DHCP Pool: Excluded Range Exhaustion
- VTY Access Class: Locked Out of Management
- SNMP: Community ACL Blocks the NMS
- Syslog: Severity Threshold Hides Events
- SSH Remote Access: Enabling It Properly
- OSPF Stuck in EXSTART: IP MTU Mismatch
- SSH Refused: VTY Transport, RSA Keys and Local Login
- IOS DHCP Server: The Pool That Leased the Gateway
- Duplex Mismatch: The Link That Works Badly
- CDP and LLDP: The Neighbour That Is Not There
- No Gateway of Last Resort
- OSPF DR Election: The Wrong Router Won
- IPv6 EUI-64: The Address Nobody Configured
Exam Questions
Practice questions for CCNAVirtual Labs
CCNACCNP EnterpriseENCOR / ENARSI
Advanced routing, SD-WAN and SD-Access, plus the Catalyst Center automation platform that ties it together.
Guided Labs
- EIGRP Neighbor Down: AS Mismatch
- Cisco Catalyst Center
- OSPF Multi-Area & Redistribution
- BGP Peering & Path Selection
- BGP Route Reflector Scaling
- Cisco SD-WAN (Viptela)
- EIGRP Variance: The Second Path That Never Loads
- BGP Local Preference: Leaving by the Wrong ISP
- IP SLA Tracking: The Brownout a Floating Route Cannot See
CCNP SecuritySCOR
Secure VPNs, zero trust access policy and SOC-style detection work across the Cisco security portfolio.
CCNP Data CenterDCCOR
Nexus 9000 NX-OS switching and vPC consistency for the modern Cisco data center.
Guided Labs
Virtual Labs
DCCOR, DCID, DCIT, DCSAN, DCAUTO, DCINX9K, DCMDSCCNP CollaborationCLCOR
Call routing and dial-plan troubleshooting on Cisco Unified Communications Manager.
Guided Labs
Virtual Labs
CLCEI, CLCOR, CLFNDU, CLICA, CIPT1, CIPT2CCNP Service ProviderSPCOR
MPLS L3VPN route-target design and troubleshooting for service provider cores.
Guided Labs
Virtual Labs
SPCORCisco DevNetDEVCOR
RESTCONF/API automation, webhook integrations and network telemetry for the DevNet track.
Palo Alto NetworksPCNSE
NGFW policy, NAT and App-ID troubleshooting on real Palo Alto firewalls.
Guided Labs
FortinetNSE 4
Security policy and site-to-site IPsec VPN configuration on FortiGate.
Guided Labs
Virtual Labs
FORTI-FUND, FORTI-NSE4, FORTI-ADVCheck PointCCSE
Security policy and identity awareness configuration on Check Point gateways.
Guided Labs
Virtual Labs
CP-FUND, CP-CCSE, CP-ADVRedHat
Linux administration, firewalling and Ansible automation across the RedHat certification paths (RHCSA, RH294 and beyond).
Not sure which track fits you?
Start with a free Guided Lab, or book a demo and we'll help you pick the right one.