Certification Guide

Networking
Table of Contents

How to Succeed in Networking 3

Cisco Certifications 12
Juniper Certifications 45
NetApp Certifications 65
F5 Certifications 77
CompTIA Certifications 87

Networking • 2
 How to Succeed
in Networking
Networking is the bedrock of the IT industry and spans every corner of IT — security,
system administration, and even programming. For that reason, fundamental networking
skills and knowledge are necessary for anyone who wants to succeed as an IT professional.

Networking is the most versatile set of skills for any IT professional, and worth pursuing
regardless of where your career leads you.

Networking • 3
The Three Factors in Career Progression

Career progression in IT stems from three major factors: education, experience,

and certification.

Education and experience are factors in the trajectory of most careers, but IT professionals
have a third option — certification. In this way, IT aligns closely with industries like
engineering, finance, and trades (such as welding, mechanics, electricians) where
individuals need to prove proficiency in a common skill or knowledge base as defined by
an industry-approved standard. And that’s exactly what certifications are for.

IT industry certifications are administered by hardware and software vendors, like

Cisco, Juniper, and F5, or vendor-neutral certifying authorities, like CompTIA. Though,
it’s important to note that unlike other industries where industry credentials are often
required, IT certifications are not mandatory to progress as an IT professional — though
they help.

A recent CBT Nuggets poll found that 40 percent of IT managers primarily look for years of
experience when evaluating a candidate. More than 50 percent said that specific skills or
certifications carried the most weight. Degrees ranked last place as a determining factor
for hiring. While some companies may require or strongly recommend advanced degrees
for promotion, it’s much more common in IT to advance through experience — and
experience validated through certification.

Earning certifications are beneficial to career progression for three reasons.

Certifications serve as proxy for skill. While it’s hotly debated whether certifications
adequately assess proficiency, they are at the very least shorthand for skill level to both
employers and candidates. By seeing a certification on a resume, employers can easily

Networking • 4
determine whether a candidate has the necessary skills for a job. Conversely, certifications
allows candidates to easily communicate they can operate a specific technology to a
predetermined level of proficiency. Certifications are valuable not only in signalling
proficiency to a new employer. They’re also often good fodder for promotion, raises, and a
personal sense of accomplishment.

Certifications serve as a proxy for experience. It’s tough to measure proficiency in years
alone because everyone’s work history is a little different. That’s why certifications are a
valuable stand-in for experience. Every certifying authority develops exam material with
an experience level in mind. For instance, entry-level certifications test the knowledge an
IT professional would learn in their first year on the job. Expert-level certs test the skills
acquired throughout at least a decade of experience.

While some security and project management certifications require documented work
experience to earn a certification, networking certifications vet candidates through a
combination of broad objectives and exam difficulty. Most IT exams encompass much
more material than most IT professionals will likely have encountered at that point their
career. Exam developers cast a wide enough net to include the most common skills and
knowledge for a wide range of job roles and company sizes. Also, networking certifications
are notoriously hands-on with answers obscured by technical minutiae best acquired
through experience rather than study.

With all that said, it’s unlikely to substitute work experience for a certification. Instead,
networking certifications validate that an IT professional’s proficiency matches
their experience.

Certifications are portable. Inherent in certifications serving as a proxy for skills and
experience is their portability. Through the common language of certifications, networking
professionals can easily carry their credentials across employers, industry sectors, and

Networking • 5
even vendor environments. In the past, vendor certifications primarily demonstrated that
a candidate knew how to use a specific product. That’s changing. Industry certifications
are moving toward a skills-based model that tests technical knowledge and skills rather
than simply product knowledge. That’s beneficial for everyone.

With this movement toward skills, networking professionals can spend less time studying
esoteric product features — and more time learning useful skills. In some cases, vendor
certifications can even substitute one another. In fact, VMware has gone as far as to
make certain Cisco certifications acceptable prerequisites for their professional-level
credentials. Finally, as we’ll see in the next section, industry certification paths help
inform and standardize IT career progression (for better or worse).

A Look at Networking Career Progression

Because networking certifications are well-structured, the vendor certification paths are a
good representation of career progression in IT.

In this section, let’s take a look at an expected career path as informed by the Cisco
certification program. Since Cisco is the most common hardware vendor we’re using
them to illustrate career progression. The timeframes and certification level here can be
generalized to each of the other vendors.

Each of the certification programs in this guide follow the general structure of Cisco’s
certification path — moving from foundational to specialized expert.

Networking • 6
Entry-level: The First Year

The Cisco certification program starts with the foundational Cisco Certified Network
Associate (CCNA), which validates that candidates know how a network fundamentally
operates. That knowledge aligns with what a networking professional would have learned
in their first year on the job — the basics. The “basics” in this case are relative to the
expert-level of networking, not someone with zero networking skills. Just taking a look
at the CCNA exam objectives gives a sense of the knowledge required to be even a junior-
level networking professional. At this stage, it’s important to not only learn routing and
switching components, but also how they interact with each other. There’s quite a bit to
learn in the first year.

Common job titles: Junior network administrator, junior network technician, support
technician, help desk analyst

Specialization: 3 to 5 Years

Next, Cisco certifications branch off into nine professional specializations, which is also
the typical progression for many IT professionals. After a few years as a generalist in a
support role or junior technician, many IT professionals find an area of IT that interests
them and they specialize. Here are the nine specializations offered by Cisco:

• Routing and Switching

• Wireless
• Security
• Network Design
• Service Provider
• Data Center
• Cloud
• Collaboration
• DevNet

Networking • 7
For networking professionals, routing and switching is the most popular track, but an
increasing number of networking professionals immediately advance into security
or wireless.

Regardless of the specialization, Cisco recommends 3 to 5 years of experience before

attempting one of these professional-level exams, which, again, align with the time it
typically takes a networking professional to acquire the basics and some specialized
knowledge. IT professionals can specialize fairly early in their career and easily change
tracks — with a good foundation in networking.

Common job titles: Network administrator, network engineer, network manager

Expert: A Decade Later

The Cisco certification program concludes with the expert-level CCIE. The time it takes
to acquire this level of knowledge and proficiency is highly variable, and only about 4
percent of networking professionals ever earn this level of Cisco certification. Though,
that doesn’t mean most IT professionals never become experts. It just means that most
IT professionals don’t need the CCIE to advance because they take a leadership role,
work at a small company, or they have adequate, demonstrable experirence for career
progression.

Raw experience is better than certifications. Referencing again the previous poll,
nearly half of hiring managers looked at years of experience as the primary hiring factor.
It follows that at a certain level of experience, certifications aren’t as valuable. In the
same way that a college degree isn’t as valuable while landing a second job as the first,
certifications help qualify the skills acquired through experience — and that’s particularly
true at the senior level.

Networking • 8
Experts turn into leaders. The small number of networking professionals who earn their
CCIE may reflect career moves into administrative rather than technical leadership roles.
For many people advancement into a managerial role means leaving the tech behind —
and also the certifications.

Expert-level certs are most valuable to large companies. To put this another way, the
CCIE (and most expert-level certifications) is simply overkill for even the most senior
engineer at a small company. IT vendors created their certification programs for large,
enterprise networks. An IT professional who works an entire career in smaller, less
complex networks may be an expert in those environments without ever encountering
the issues that may appear on the CCIE exam. There’s also the matter of job role. Expert-
level IT certifications are designed for network architects, which means operating at the
systems level and even outside the technical realm into business processes. Even if that
high-level, expert knowledge may be useful for smaller companies, there may be sticker
shock while trying to retain a recently minted CCIE.

Common job titles: Network architect, senior engineer, network engineer

Choosing Your Own Path

This is meant to be a generalized guide to career trajectory based on experience

requirements for certifications, job descriptions, and some common sense. Ultimately,
many factors play into the eventual career path of a networking professional — job
opportunities in the area, interest in technology, and career goals. There’s nothing wrong
with spending an entire career as a generalist. Similarly, many careers diverge into a
specialization not out of passion for the technology, but opportunity or necessity.

Despite the emphasis on credentials in this guide, they are useful for all the reasons above
— but not necessary — to have a successful, fulfilling career as a networking professional.
The only true necessity is a lifelong commitment to learning because IT changes.

Networking • 9
How to Deal with Changing Technology

Change is the only constant in IT. Technologies will change. Vendors will release new
products. Buzzwords will mature (or fizzle). Certifications will retire. Given the pace of
technology, quite a bit will be different in the 15th year of an IT career from day one.
However, the underlying networking principles will (probably) be the same. Under the
hood, virtualized servers are still just servers. AWS Route 53 is still just a Domain Name
System (DNS). That’s the benefit of having a solid foundational knowledge of networking
before specializing — you’ll never really get left behind.

With that said, it’s still useful to learn new technologies as they emerge and mature.
There’s plenty of insight to glean about industry trends from changes to certification
paths. The maturation of buzzword (think “cloud” or “DevOps”) to actual industry
standard are often codified in certification paths. For instance, Cisco recently included a
DevNet track, which codifies and standardizes the skills necessary to manage software-
defined and intent-based networking components.

From that change alone, there are three interconnected trends not addressed in this
certification guide that networking professionals should explore.

The Steady Advance of DevOps

Slowly but surely DevOps is sneaking into the day-to-day of IT roles. In some cases,
DevOps is subsuming traditional IT roles entirely. With the advent of the DevOps mindset,
the full stack is now open to both the development and IT operations side. Developers
have more access to and responsibility for infrastructure. Meanwhile, IT professionals are
expected to perform certain functions previously reserved for developers. The roles are
blending, which Cisco finally fully addressed with the DevNet certification track. It’s hard
to escape the steady advance of DevOps, but that only opens up the networking career
field even more. The underlying fundamentals of networking haven’t changed — merely

Networking • 10
those who need to learn them. For more information about DevOps see the Ultimate
DevOps Cert Guide.

Automation. Everything.

Automation and DevOps goes hand-in-hand. In fact, DevOps was initially described as a
mindset and a tool suite before it was considered its own subset of IT. That mindset and
those tools were (and still are) centered around automation. Given the tools available,
every networking professional should now have automation at the forefront of their mind.
Configuration changes across large quantities of devices can be scripted. Performance
monitoring across sites is crucial, and should be automated. In the end, it’s about
efficiency (and preserving sanity). If there’s a task that takes more than two minutes and
it needs to be done more than once a week, write code to automate the work. It doesn’t
matter if it’s Bash, PowerShell, Python, C++, BASIC, or Fortran. Learn to script and make
the computer do work for you.

Some Code Required

In the Ultimate IT Cert Guide series, we won’t be covering programming certifications

simply because there aren’t any industry-approved ones. Like learning a foreign language,
programming is a skill that truly needs to be used to learn well. Looking at the way
networks will be managed, it’s apparent that programming skills will no longer be optional
for networking professionals in the near future.

Using This Certification Guide

In this certification guide, we’ve listed every certification for the top networking vendors
— Cisco, Juniper, F5, Palo Alto, and NetApp. Each chapter is ordered from foundational to
specialized expert. Choose your path based on your career goals, experience level, and
stated prerequisites.

© 2019 CBT Nuggets. Version 1.0.

 Cisco
Certification Guide
Cisco networking gear is everywhere. Its routers, switches, and even phones are found in
most office environments. For IT professionals who specialize in network administration,
it’s more likely than not that you’ll work in a Cisco environment at some point. That’s
why Cisco certifications are so popular and highly valued. Cisco certifications validate the
knowledge and skills IT professionals need to be successful in managing and maintaining
Cisco technologies.

The Cisco certification program will change significantly in February 2020. This guide
covers both the new and soon-to-be retired exams in the Cisco certification program:

• New Cisco Certification Program

• New CCNA Certifications
• New CCNP Certifications
• New CCIE Certifications
• Current Entry-Level Certifications
•  Current CCNA Certifications
•  Current CCNP Certifications
•  Current CCIE Certifications
New Cisco Certification
Program
Cisco announced major changes to their certification
program at Cisco Live! 2019. On February 23, 2020, nine
CCNAs will retire, Cisco certifications will no longer
have prerequisites, and will require passing fewer
exams to earn Cisco professional-level exams.
The Cisco career certification program will still have
five tiers of certifications — Associate, Specialist,
Professional, Expert, and Architect. Within each tier,
networking professionals can either follow the popular
enterprise track (equivalent to the previous R&S track)
or specialize into five other areas as they progress.
Cisco still offers specializations in the Associate,
Professional, and Expert tracks. However, there are
fundamental changes to the Cisco
certification program:
No more prerequisites. Among those changes, Cisco
rescinded all prerequisites for exams. You no longer
have to earn a CCNA in order to attempt the CCNP.
DevNet track. Until February 2020, CCENT or CCNA
still serve as the entry point into the Cisco certification
universe. On February 24, 2020, there will also be a new
DevNet track, which emphasizes programming as well
as networking skills. The DevNet track currently has
an associate and professional-level certification exam.
Cisco will add an expert-level exam soon equivalent
to a CCIE.
CCNA retirements. Cisco will retire nine associate-level
certifications in February 2020, replacing all nine with
a single CCNA. Rather than specializing as an associate,
networking professionals will specialize at the CCNP
level. Those concentrations include Enterprise,
Collaboration, Data Center, Security, and
Service Provider.
Fewer CCNP exams. Until February 2020, CCNP
certifications often require passing either three or four
exams. On February 24, 2020, IT professionals only
need to pass two exams — one core exam and one
concentration exam — to earn their professional-level
certification. Additionally, the CCNP core exam for each
also serves as the written exam for the CCIE
in that track.
Easier to switch specialties. With the previous
certification program, the process for networking
professionals who wanted to switch between
specialization tracks was fairly rigid. For instance, the
CCNA R&S served as a prerequisite for several other
CCNAs, but the CCNP requires that IT professionals
earn the preceding CCNA in the track. For instance,
someone who earns their CCNA Wireless and then
wants to earn the CCNP Collaboration has to go back to
earn the CCNA Collaboration.
Cisco • 13
New Cisco Associate-Level
Certifications
The CCNA and DevNet Associate certifications validate
the knowledge and skills a networking professional
should’ve acquired in their first year on the job.
IT professionals typically use their CCNA to make
themselves more valuable as a network administrator.
Cisco offers three associate-level exams:
• Cisco Certified Network Associate (CCNA)
• DevNet Associate - Developer
• Cisco Certified Network Associate - CyberOps
(CCNA CyberOps)
Certification updates: These certification exams will
be available February 24, 2020.
Despite all other CCNA certifications retiring, there
are no changes to the associate-level CCNA CyberOps
certification.
CISCO ASSOCIATE (NEW)
Cisco Certified Networking Associate
(CCNA)
The Cisco Certified Network Associate certification is
designed for IT professionals with at least one year of
hands-on experience with business networks.
The CCNA certification validates a candidate’s
understanding of networking topics, including:
•  Configuring and verifying IPv4 addressing
and subnetting
•  Interpreting the components of a routing table
•  Configuring L2 protocols, LACP, VLANS, and
interswitch connectivity
•  Using DCHP, NTP, NAT, SNMP, SSH, and TFTP/FTP
•  Understanding security program components
•  Implementing automation and
orchestration tools
Required exam: Earning the CCNA requires passing
one exam — Implementing and Administering Cisco
Solutions (200-301 CCNA).
Prerequisites: None.
Recommended experience: While Cisco certifications
no longer have formal prerequisites, Cisco recommends
that candidates attempting this associate-level exam
have at least one year of experience in an IT role.
Cisco • 14
CISCO ASSOCIATE (NEW)
DevNet Associate - Developer
The new DevNet Associate - Developer certification is
designed for IT professionals with both networking and
development skills — a valuable marriage of skill sets
in a modern IT environment. The DevNet Associate
- Developer certification validates a candidate’s
understanding of infrastructure and programming
topics, including:
•  Identifying and properly using common
data formats
•  Using Python to call a REST API
•  Constructing code to perform specific
network operations
•  Dockerizing applications
•  Automating tasks and processes with Ansible,
Puppet, Chef, and Cisco NSO
Required exam: Earning the DevNet Associate requires
passing one exam — Developing Applications and
Automating Workflows using Cisco Core Platforms (200-
901 DEVASC).
Prerequisites: None.
Recommended experience: While Cisco certifications
no longer have formal prerequisites, Cisco
recommends that candidates attempting the DevNet
certification have at least one year of experience in an
IT role and a good handle on the Python
programming language.
CISCO ASSOCIATE (NEW)
Cisco Certified Network Associate -
CyberOps (CCNA CyberOps)
The CCNA CyberOps certification is designed for entry-
level cybersecurity professionals. CCNA CyberOps is
an approved certification under the DoD 8570.01-M
framework in the CSSP Analyst and CCSP Incident
Responder categories. The CCNA CyberOps certification
validates a candidate’s understanding of security
topics, including:
• Understanding and implementing access
control modes
• Knowing the security impact of common
cryptography methods
• Identifying common attack vectors and
security vulnerabilities
• Mapping data types to compliance frameworks
• Analyzing data from security events
Required exams: CCNA - CyberOps has two required
exams — Understanding Cisco Cybersecurity
Fundamentals (210-250 SECFND) and Implementing
Cisco Cybersecurity Operations (210-255 SECOPS).
Prerequisites: None.
Recommended experience: While Cisco certifications
no longer have formal prerequisites, Cisco
recommends that candidates attempting the two CCNA
- CyberOps exams have at least one year of experience
in a security role.
Cisco • 15
New Professional-Level
Cisco Certifications
IT professionals earn their professional-level
certification by passing two exams — the core exam
and one concentration exam. Each core exam is
specialized to the track and serves as the written
portion of the CCIE in that track. Cisco recommends
three to five years of experience to attempt a CCNP or
DevNet Professional exam.
Cisco offers six professional-level exams:
•  CCNP Enterprise
•  CCNP Security
•  CCNP Service Provider
•  CCNP Collaboration
•  CCNP Data Center
•  Cisco Certified DevNet Professional
Note: These certification exams will be available
February 24, 2020.
CISCO PROFESSIONAL (NEW)
Cisco Certified Network Professional -
Enterprise (CCNP Enterprise)
The CCNP Enterprise certification is designed to test
a networking professional’s ability to implement and
maintain core enterprise network technologies. The
CCNP Enterprise core exam validates a candidate’s
understanding of infrastructure, virtualization, security,
and automation topics, including:
•  Designing enterprise wired and
wireless networks
•  Configuring VMs, virtual switching,
and hypervisors
•  Configuring and troubleshooting L2, L3, and
wireless infrastructure components
•  Configuring and verifying wireless and wired
infrastructure security features
•  Automating tasks with Python, REST APIs, and
orchestration tools
Required exams: The core exam for the CCNP
Enterprise certification is Implementing and Operating
Cisco Enterprise Network Core Technologies (300-
401 ENCOR). Candidates can then choose one of five
concentration exams:
•  Implementing Cisco Enterprise Advanced Routing
and Services (300-410 ENARSI)
•  Implementing Cisco SD-WAN Solutions
(300-415 ENSDWI)
•  Designing Cisco Enterprise Networks
(300-420 ENSLD)
Cisco • 16
 •  Designing Cisco Enterprise Wireless Networks
(300-425 ENWLSD)
•  Implementing Cisco Enterprise Wireless Networks
(300-430 ENWLSI)
Prerequisites: None.
Recommended experience: While Cisco certifications
no longer have formal prerequisites, Cisco recommends
that candidates who attempt this professional-level
exam have three to five years experience implementing
enterprise network technologies.
CISCO PROFESSIONAL (NEW)
Cisco Certified Network Professional -
Collaboration (CCNP Collaboration)
The CCNP Collaboration certification is designed to test
a networking professional’s ability to implement and
maintain core collaboration network technologies. The
CCNP Collaboration core exam validates a candidate’s
understanding of infrastructure, call control, QoS, and
Cisco-specific collaboration topics, including:
•  Troubleshooting network components
•  Identifying and using collaboration codecs
•  Using Cisco Unified CM to create translation,
route, and SIP route patterns
•  Configuring and troubleshooting ISDN PRI/BRI
•  Identifying issues that cause poor voice and
video quality
Required exams: The core exam for the CCNP
Collaboration certification is Implementing and
Operating Cisco Collaboration Core Technologies (300-
801 CLCOR). Candidates can then choose one of four
concentration exams:
•  Implementing Cisco Collaboration Applications
(300-810 CLICA)
•  Implementing Cisco Advanced Call Control and
Mobility Services (300-815 CLACCM)
•  Implementing Cisco Collaboration Cloud and Edge
Solutions (300-820 CLCEI)
•  Implementing Automation for Cisco Collaboration
Solutions (300-835 CLAUTO)
Prerequisites: None.
Recommended experience: While Cisco certifications
no longer have formal prerequisites, Cisco recommends
that candidates who attempt this professional-level
exam have three to five years experience implementing
enterprise collaboration technologies.
Cisco • 17
CISCO PROFESSIONAL (NEW)
Cisco Certified Network Professional
- Data Center (CCNP Data Center)
The CCNP Data Center certification is designed to test
an IT professional’s ability to implement and maintain
core data center technologies. The core exam validates
a candidate’s understanding of networking, computing,
storage, automation, and security topics, including:
•  Applying routing protocols, ACI concepts,
and analyzing packet flow
•  Managing Cisco Unified Compute
System infrastructure
•  Implementing Fibre Channel
•  Scripting and automating with EEM, shell,
and REST APIs
•  Enacting network, compute, and storage
security policies
Required exams: The core exam for the CCNP Data
Center certification is Implementing and Operating
Cisco Data Center Core Technologies (300-601 DCCOR).
Candidates can then choose one of five concentration
exams:
•  Designing Cisco Data Center Infrastructure
(300-610 DCID)
•  Troubleshooting Cisco Data Center Infrastructure
(300-615 DCIT)
•  Configuring Cisco Nexus 9000 Series Switches in
ACI Mode (300-620 DCACI)
•  Configuring Cisco MDS 9000 Series Switches
(300-625 DCSAN)
•  Implementing Automation for Cisco Data Center
Solutions (300-635 DCAUTO)
Prerequisites: None.
Recommended experience: While Cisco certifications
no longer have formal prerequisites, Cisco recommends
that candidates who attempt this professional-level
exam have three to five years experience implementing
data center technologies.
CISCO PROFESSIONAL (NEW)
Cisco Certified Network Professional -
Security (CCNP Security)
The CCNP Security certification is designed to
test a security professional’s ability to secure an
organization’s physical infrastructure, cloud services,
endpoints, and network access. The CCNP - Security
core exam validates a candidate’s understanding of
security topics, including:
•  Identifying common security vulnerabilities
against on-prem and cloud environments
•  Implementing appropriate access policies
•  Configuring cloud logging and
monitoring methods
•  Ensuring email, internet gateway, and web
security features are active
•  Understanding benefits of various Cisco
security products
Cisco • 18
Required exams: The core exam for the CCNP Security
certification is Implementing and Operating Cisco
Security Core Technologies (300-701 SCOR). Candidates
can then choose one of seven concentration exams:
•  Securing Networks with Cisco Firepower Next
Generation Firewall (300-710 SNCF)
•  Securing Networks with Cisco Firepower Next-
Generation IPS (300-710 SNCF)
•  Implementing and Configuring Cisco Identity
Services Engine (300-715 SISE)
•  Securing Email with Cisco Email Security
Appliance (300-720 SESA)
•  Securing the Web with Cisco Web Security
Appliance (300-725 SWSA)
•  Implementing Secure Solutions with Virtual
Private Networks (300-730 SVPN)
•  Implementing Automation for Cisco Security
Solutions (300-735 SAUTO)
Prerequisites: None.
Recommended experience: While Cisco certifications
no longer have formal prerequisites, Cisco recommends
that candidates who attempt this professional-level
exam have three to five years experience implementing
security solutions.
CISCO PROFESSIONAL (NEW)
Cisco Certified Network Professional
- Service Provider (CCNP Service
Provider)
The CCNP Service Provider certification is designed
to test an IT professional’s ability to maintain the
infrastructure of a service provider. The CCNP Service
Provider core exam strongly validates a candidate’s
understanding of topics, including:
•  Identifying the uses for core architectures,
transport technologies, and virtualization
•  Implementing OSPF, IS-IS, route maps, and HA
•  Configuring L2VPN, L3VPN, QoS services, Carrier
Ethernet, and multicast services
•  Implementing MPLS, traffic engineering, and
segment routing
•  Automating network components and
configuration management
Required exams: The core exam for the CCNP Service
Provider certification is Implementing and Operating
Cisco Service Provider Network Core Technologies
(300-501 SPCOR). Candidates can then choose one of
three concentration exams:
•  Implementing Cisco Service Provider Advanced
Routing Solutions (300-510 SPRI)
•  Implementing Cisco Service Provider VPN Services
(300-515 SPVI)
•  Implementing Automation for Cisco Service
Provider Solutions (300-535 SPAUTO)
Cisco • 19
Prerequisites: None.
Recommended experience: While Cisco certifications
no longer have formal prerequisites, Cisco recommends
that candidates who attempt this professional-level
exam have three to five years experience implementing
service provider solutions.
CISCO PROFESSIONAL (NEW)
DevNet Professional
The DevNet Professional certification is designed for
IT professionals who design and develop software.
The DevNet core exam validates a candidate’s
understanding of software development, API,
networking, application deployment and security, and
infrastructure topics, including:
•  Evaluating an application design for latency,
scalability, and high availability
•  Using and troubleshooting REST APIs
•  Constructing API requests for Cisco platforms
with Python
•  Deploying and securing an application
•  Configuring networks and network devices
Required exams: The core exam for the DevNet
Professional certification is Developing Applications
and Automating Workflows using Cisco Core Platforms
(300-901 DEVCOR). Candidates can then choose one of
eight concentration exams:
•  Implementing Automation for Cisco Enterprise
Solutions (300-435 ENAUTO)
•  Implementing Automation for Cisco Collaboration
Solutions (300-835 CLAUTO)
•  Implementing Automation for Cisco Data Center
Solutions (300-635 DCAUTO)
•  Implementing Automation for Cisco Service
Provider Solutions (300-535 SPAUTO)
•  Implementing Automation for Cisco Security
Solutions (300-735 SAUTO)
•  Implementing DevOps Solutions and Practices
using Cisco Platforms (300-910 DEVOPS)
•  Developing Solutions using Cisco IoT and Edge
Platforms (300-915 DEVIOT)
•  Developing Applications for Cisco Webex and
Webex Devices (300-920 DEVWBX)
Prerequisites: None.
Recommended experience: While Cisco certifications
no longer have formal prerequisites, Cisco recommends
that candidates who attempt this professional-level
exam have three to five years experience implementing
service provider solutions.
Cisco • 20
New Expert-Level
Cisco Certifications
CCIEs are experts in their fields and ready to fill senior-
level networking engineering roles, like senior network
engineer or network architect. While there aren’t
prerequisites for any Cisco exams, Cisco recommends
five to seven years experience before attempting a
CCIE. It’s possible to have encountered the esoteric,
complex problems that the CCIE validates in smaller
networks over a longer period of time.
Realistically, networking professionals who pursue
Cisco expert-level certifications have a decade or more
experience managing complex networks.
Cisco offers seven expert-level certifications, including
the Cisco Certified Design Expert:
•  CCDE
•  CCIE Enterprise Wireless
•  CCIE Enterprise Infrastructure
•  CCIE Security
•  CCIE Service Provider
•  CCIE Collaboration
•  CCIE Data Center
Note: With the exception of CCDE, these certifications
will not be available until February 24, 2020.
CISCO EXPERT (NEW)
Cisco Certified Design Expert
The Cisco Certified Design Expert certification
is designed for IT professionals who translate
business needs and operational constraints into
a customer’s network. The CCDE no longer has an
associated professional-level certification, and also
has no prerequisites. Candidates should expect to
demonstrate an expert level of competency in these
topics during their 8-hour hands-on lab:
•  Analyze Design Requirements
•  Develop Network Designs
•  Implement Network Design
•  Validate and Optimize Network Design
Required exams: The written exam for the CCDE
certification is 352-001 CCDE. CCDE candidates must
then travel to a Cisco facility to take the CCDE lab exam.
Prerequisites: None.
Recommended experience: While Cisco certifications
no longer have formal prerequisites, Cisco
recommends that candidates attempting an expert-
level exam have considerable experience as network
design engineers or similar senior technical roles.
Cisco • 21
CISCO EXPERT (NEW)
Cisco Certified Internetwork Expert
- Enterprise Infrastructure (CCIE
Enterprise Infrastructure)
The CCIE Enterprise Infrastructure certification is
designed for IT professionals who plan, design,
implement, operate, and optimize complex networks.
Candidates should expect to demonstrate an expert
level of competency in these topics during their 8-hour
hands-on lab:
•  Network Infrastructure
•  Software Defined Infrastructure
•  Transport Technologies and Solutions
•  Infrastructure Security and Services
•  Infrastructure Automation and Programmability
Required exams: The written exam for the CCIE
Enterprise Infrastructure certification is Implementing
and Operating Cisco Enterprise Network Core
Technologies (300-401 ENCOR). CCIE candidates must
then travel to a Cisco facility to take the CCIE Enterprise
Infrastructure v1.0 lab exam.
Prerequisites: None.
Recommended experience: While expert-level Cisco
certifications don’t have formal prerequisites, Cisco
recommends that candidates attempting CCIE exams
have five to seven years experience implementing
networking technologies.
CISCO EXPERT (NEW)
Cisco Certified Internetwork Expert -
Enterprise Wireless (CCIE Enterprise
Wireless)
The CCIE Enterprise Wireless certification is designed
for IT professionals who plan, design, implement,
operate, and optimize complex wireless networks.
Candidates should expect to demonstrate an expert
level of competency in these topics during their 8-hour
hands-on lab:
•  Radio Frequency and Standards
•  Enterprise Wired Campus
•  Enterprise Wireless Network
•  Wireless Security and Identity Management
•  Wireless Business Applications and Services
•  Automation, Analytics, and Assurance
Required exams: The written exam for the CCIE
Enterprise Wireless certification is Implementing and
Operating Cisco Enterprise Network Core Technologies
(300-401 ENCOR). CCIE candidates must then travel to
a Cisco facility to take the CCIE Enterprise Wireless v1.0
lab exam.
Prerequisites: None.
Recommended experience: While expert-level Cisco
certifications don’t have formal prerequisites, Cisco
recommends that candidates attempting CCIE exams
have five to seven years experience implementing
wireless networking technologies.
Cisco • 22
CISCO EXPERT (NEW)
Cisco Certified Internetwork Expert -
Collaboration (CCIE Collaboration)
The CCIE Collaboration certification is designed for IT
professionals who plan, design, implement, operate,
and optimize complex collaboration environments.
Candidates should expect to demonstrate an expert
level of competency in these topics during their 8-hour
hands-on lab:
•  Protocols and APIs
•  Infrastructure and Quality of Service
•  Call Control and Dial Plans
•  Endpoints and User Management
•  Edge Services
•  Media Resources and Meetings
•  Cisco Applications and Services
Required exams: The written exam for the Cisco
Certified Design Expert certification is Implementing
and Operating Cisco Collaboration Core Technologies
(300-801 CLCOR). CCIE candidates must then travel to a
Cisco facility to take the CCIE Collaboration v3.0
lab exam.
Prerequisites: None.
Recommended experience: While expert-level Cisco
certifications don’t have formal prerequisites, Cisco
recommends that candidates attempting CCIE exams
have five to seven years experience implementing
collaboration solutions.
CISCO EXPERT (NEW)
Cisco Certified Internetwork Expert -
Data Center (CCIE Data Center)
The CCIE Data Center certification is designed for IT
professionals who plan, design, implement, operate,
and optimize large, complex data centers. Candidates
should expect to demonstrate an expert level of
competency in these topics during their 8-hour
hands-on lab:
•  Data Center L2/L3 Connectivity
•  Data Center Fabric Infrastructure
•  Data Center Fabric Connectivity
•  Data Center Compute
•  Data Center Storage Protocols and Features
•  Data Center Security and Network Services
•  Data Center Automation and Orchestration
Required exams: The written exam for the CCIE Data
Center certification is Implementing and Operating
Cisco Data Center Core Technologies (DCCOR 300-601).
CCIE candidates must then travel to a Cisco facility to
take the CCIE Data Center v3.0 lab exam.
Prerequisites: None.
Recommended experience: While expert-level Cisco
certifications don’t have formal prerequisites, Cisco
recommends that candidates attempting CCIE exams
have five to seven years experience working with large
data centers.
Cisco • 23
CISCO EXPERT (NEW)
Cisco Certified Internetwork Expert -
Security (CCIE Security)
The CCIE Security certification is designed for
IT professionals who secure all aspects of an
organization’s wired and wireless networks and cloud
services. Candidates should expect to demonstrate an
expert level of competency in these topics during their
8-hour hands-on lab:
•  Perimeter Security and Intrusion Prevention
•  Secure Connectivity and Segmentation
•  Infrastructure Security
•  Identity Management, Information Exchange,
and Access Control
•  Advanced Threat Protection and
Content Security
Required exams: The written exam for the CCIE
Security certification is Implementing and Operating
Cisco Security Core Technologies (SCOR 300-701). CCIE
candidates must then travel to a Cisco facility to take
the CCIE Security v6.0 lab exam.
Prerequisites: None.
Recommended experience: While expert-level Cisco
certifications don’t have formal prerequisites, Cisco
recommends that candidates attempting CCIE exams
have five to seven years experience securing enterprise
networks and systems.
CISCO EXPERT (NEW)
Cisco Certified Internetwork Expert
- Service Provider (CCIE Service
Provider)
The CCIE Service Provider certification is designed
for IT professionals who design, deploy, operate, and
optimize service provider technologies and solutions.
Candidates should expect to demonstrate an expert
level of competency in these topics during their 8-hour
hands-on lab:
•  Core Routing
•  Architectures and Services
•  Access Connectivity
•  High Availability and Fast Convergence
•  Security
•  Assurance and Automation
Required exams: The written exam for the CCIE Service
Provider certification is Implementing and Operating
Cisco Service Provider Network Core Technologies
(SPCOR 300-501). CCIE candidates must then travel to a
Cisco facility to take the CCIE Service Provider v5.0
lab exam.
Prerequisites: None.
Recommended experience: While expert-level Cisco
certifications don’t have formal prerequisites, Cisco
recommends that candidates attempting CCIE exams
have five to seven years experience designing and
operating service provider technologies.
Cisco • 24
Current Entry-Level
Cisco Certifications
The Cisco Certified Entry Networking Technician
(CCENT) certification is the most common starting
point for IT professionals pursuing Cisco certifications.
Cisco offers three entry-level certifications:
• Cisco Certified Entry Networking
Technician (CCENT)
• Cisco Certified Technician Routing and
Switching (CCT R&S)
• Cisco Certified Technician Data
Center (CCT Data Center)
CISCO ENTRY-LEVEL (CURRENT)
Cisco Certified Entry Networking
Technician (CCENT)
The CCENT certification is designed for IT professionals
with at least one year of hands-on experience with
business networks. The CCENT certification validates a
candidate’s understanding of networking
topics, including:
•  Network Fundamentals
•  LAN Switching Fundamentals
•  Routing Fundamentals
•  Infrastructure Services
•  Infrastructure Maintenance
Required exam: Earning the CCENT requires passing
one exam — Interconnecting Cisco Networking Devices
Part 1 (100-105 ICND1).
Prerequisites: None.
Recommended experience: Cisco recommends that
candidates attempting this entry-level exam have at
least one year of experience in an IT role.
Note: The CCENT will retire February 24, 2020.
Cisco • 25
CISCO ENTRY-LEVEL (CURRENT)
Cisco Certified Technician Routing
and Switching (CCT R&S)
The CCT R&S certification is designed for IT technicians
who provide onsite support and maintenance of Cisco
routers, switches, and operating environments.
The CCT R&S certification validates a candidate’s
understanding of support-related topics, including:
•  Identify Cisco Equipment and Related Hardwares
•  Describe Cisco IOS Software Operation
•  General Networking Knowledge
•  Service-related Knowledge
Required exam: Earning the CCT R&S requires passing
one exam — Supporting Cisco Routing and Switching
Network Devices (640-692 RSTECH).
Prerequisites: None.
Recommended experience: Cisco recommends that
candidates attempting this entry-level exam have at
least one year of experience in an IT role.
CISCO ENTRY-LEVEL (CURRENT)
Cisco Certified Technician Data Center
(CCT Data Center)
The CCT Data Center certification is designed for
IT technicians who provide onsite support and
maintenance of Cisco Unified Computing Systems and
servers. The CCT Data Center certification validates a
candidate’s understanding of support-related
topics, including:
•  General Networking Knowledge
•  Identify Cisco Equipment and Related Hardware
•  Describe Cisco NX-OS Software Operation
•  Service-Related Knowledge
Required exam: Earning the CCT Data Center requires
passing one exam — Supporting Cisco Data Center
System Devices (010-151 DCTECH) v2.0.
Prerequisites: None.
Recommended experience: Cisco recommends that
candidates attempting this entry-level exam have at
least one year of experience in an IT role.
Cisco • 26
Current Cisco Associate CISCO ASSOCIATE (CURRENT)

Certifications Cisco Certified Network Associate -

IT professionals typically use their CCNA to make
themselves more valuable as a network administrator.
The CCNA does not automatically guarantee a
promotion or raise, but shows commitment to the
networking profession.
Cisco offers 10 associate-level — or CCNA — exams:
Routing & Switching (CCNA R&S)
The CCNA R&S certification is designed for IT
professionals who install, operate, configure, and verify
basic networks, configure switches and routers, and
identify basic security threats. The CCNA certification
validates a candidate’s understanding of networking
topics, including:

•  CCNA Cloud •  Configuring and verifying IPv4 addressing

•  CCNA Collaboration and subnetting
•  CCNA Cyber Ops •  Interpreting the components of a routing table
•  CCNA Data Center •  Configuring L2 protocols, LACP, VLANS, and
•  CCNA Industrial interswitch connectivity
•  CCNA Routing and Switching •  Using DCHP, NTP, NAT, SNMP, SSH, and TFTP/FTP
•  CCNA Security •  Understanding security program components
•  CCNA Service Provider •  Implementing automation and
•  CCNA Wireless orchestration tools
•  CCDA
Required exams: Earning the CCNA requires passing
Note: All listed CCNAs (except for the CCNA - CyberOps) two exams — Interconnecting Cisco Networking
will retire February 24, 2020. Devices Part 1 (100-105 ICND1) and Interconnecting
Cisco Networking Devices Part 2 (200-105 ICND2).
Alternately, candidates must pass one composite
exam — Interconnecting Cisco Networking Devices:
Accelerated (200-125 CCNA)
Prerequisites: None.
Recommended experience: Cisco recommends that
candidates attempting this associate-level exam have
at least one year of experience in an IT role.

Cisco • 27
CISCO ASSOCIATE (CURRENT)
Cisco Certified Network Associate -
Wireless (CCNA Wireless)
The CCNA Wireless certification is designed for IT
professionals who install, configure, and troubleshoot
Cisco wireless networks. The CCNA Wireless
certification validates a candidate’s understanding of
wireless topics, including:
•  RF Fundamentals
•  802.11 Technology Fundamentals
•  Implementing a Wireless Network
•  Operating a Wireless Network
•  Configuration of Client Connectivity
•  Performing Client Connectivity Troubleshooting
•  Site Survey Process
Required exam: Earning the CCNA Wireless requires
passing one exam — Implementing Cisco Wireless
Network Fundamentals (200-355 WIFUND).
Prerequisites: Prior to attempting this certification,
candidates must earn the CCENT, CCNA R&S, or any
CCIE certification.
Recommended experience: Cisco recommends that
candidates attempting this associate-level exam have
at least one year of experience in an IT role.
CISCO ASSOCIATE (CURRENT)
Cisco Certified Network Associate -
Data Center (CCNA Data Center)
The CCNA Data Center certification is designed for IT
professionals who install, configure, and maintain
data center infrastructure. The CCNA Data Center
certification validates a candidate’s understanding of
data center topics, including:
•  Data Center Physical Infrastructure
•  Basic Data Center Networking Concepts
•  Advanced Data Center Networking Concepts
•  Basic Data Center Storage
•  Advanced Data Center Storage
Required exams: Earning the CCNA Data Center
requires passing two exams — Introducing Cisco Data
Center Networking (200-150 DCICN) and Introducing
Cisco Data Center Networking Technologies
(200-155 DCICT).
Prerequisites: None.
Recommended experience: Cisco recommends that
candidates attempting this associate-level exam have
at least one year of experience in an IT role.
Cisco • 28
CISCO ASSOCIATE (CURRENT)
Cisco Certified Network Associate -
Security (CCNA Security)
The CCNA Security certification is designed for IT
professionals who develop security infrastructure,
recognize vulnerabilities, and mitigate security threats.
The CCNA Security certification validates a candidate’s
understanding of security topics, including:
•  SIEM Technology
•  Cloud & Virtual Network Topologies
•  BYOD (Bring Your Own Device)
•  Identity Services Engine (ISE)
•  802.1x Authentication
•  Cisco FirePOWER Next Generation IPS
• Cisco Advanced Malware Protection
Required exam: Earning the CCNA Security requires
passing one exam — Implementing Cisco Network
Security (210-260 IINS).
Prerequisites: Prior to attempting this certification,
candidates must earn the CCENT, CCNA R&S, or any
CCIE certification.
Recommended experience: Cisco recommends that
candidates attempting this associate-level exam have
at least one year of experience in an IT role.
CISCO ASSOCIATE (CURRENT)
Cisco Certified Network Associate -
Collaboration (CCNA Collaboration)
The CCNA Collaboration certification is designed
for collaboration engineers who implement and
troubleshoot Cisco Unified Communication (UC)
in various network environments. The CCNA
Collaboration certification validates a candidate’s
understanding of collaboration
topics, including:
•  Describe the Characteristics of a Cisco Unified
Communications Solution
•  Provision End Users and Associated Devices
•  Configure Voice Messaging and Presence
•  Maintain Cisco Unified Communications System
•  Provide End User Support
Required exams: Earning the CCNA Collaboration
requires passing two exams — Implementing
Cisco Collaboration Devices (210-060 CICD) and
Implementing Cisco Video Network Devices
(210-065 CIVND).
Prerequisites: None.
Recommended experience: Cisco recommends that
candidates attempting this associate-level exam have
at least one year of experience in an IT role.
Cisco • 29
CISCO ASSOCIATE (CURRENT)
Cisco Certified Network Associate -
Industrial (CCNA Industrial)
The CCNA Industrial certification is designed for
IT professionals who implement and troubleshoot
industry protocols commonly found in an automated
manufacturing environment. The CCNA Industrial
certification validates a candidate’s understanding of
wired and wireless networking and industry-specific
topics, including:
•  IP Networking
•  Common Industrial
•  ProfiNET Knowledge
•  Security
•  Wireless
•  Troubleshooting
Required exam: Earning the CCNA Industrial requires
passing one exam — Managing Industrial Networking
for Manufacturing with Cisco Technologies
(200-601 IMINS2).
Prerequisites: Prior to attempting this certification,
candidates must earn the Industrial Networking
Specialist certification, CCENT, CCNA R&S, or any CCIE.
Recommended experience: Cisco recommends that
candidates attempting this associate-level exam have
at least one year of experience in an IT role.
CISCO ASSOCIATE (CURRENT)
Cisco Certified Network Associate -
Service Provider
(CCNA Service Provider)
The CCNA Service Provider certification is designed
for IT professionals who support and maintain
service provider networks. The CCNA Service Provider
certification validates a candidate’s understanding of
networking and service provider-specific
topics, including:
•  IP Networks
•  IPv4 and IPv6 Addressing
•  Switched Network Technologies
•  Routed Network Technologies
•  IP Services
•  Cisco Operating Systems and
Transport Technologies
•  Security in the Network
•  Network Management
Required exams: Earning the CCNA Service Provider
requires passing two exams — Building Cisco Service
Provider Next-Generation Networks, Part 1 (640-875
SPNGN1) and Building Cisco Service Provider Next-
Generation Networks, Part 2 (640-878 SPNGN2).
Prerequisites: None.
Recommended experience: Cisco recommends that
candidates attempting this associate-level exam have
at least one year of experience in an IT role.
Cisco • 30
CISCO ASSOCIATE (CURRENT)
Cisco Certified Network Associate -
Cloud (CCNA Cloud)
The CCNA Cloud certification is designed for IT
professionals who build, configure, and administer
Cisco cloud solutions. The CCNA Cloud certification
validates a candidate’s understanding of cloud
topics, including:
•  Cloud Characteristics and Models
•  Cloud Deployment
•  Basic Knowledge of Cloud Compute
•  Basic Knowledge of Cloud Networking
•  Basic Knowledge of Cloud Storage
Required exams: Earning the CCNA Cloud requires
passing two exams — Understanding Cisco Cloud
Fundamentals (210-451 CLDFND) and Introducing Cisco
Cloud Administration (210-455 CLDADM).
Prerequisites: None.
Recommended experience: Cisco recommends that
candidates attempting this associate-level exam have
at least one year of experience in an IT role.
CISCO ASSOCIATE (CURRENT)
Cisco Certified Design Associate
(CCDA)
The CCDA certification is designed for IT professionals
who design Cisco enterprise network architectures,
plan network expansion, and scale networks.
The CCDA certification validates a candidate’s
understanding of collaboration topics, including:
•  Design Methodologies
•  Design Objectives
•  Addressing and Routing Protocols in
an Existing Network
•  Enterprise Network Design
•  Considerations for Expanding an
Existing Network
Required exam: Earning the CCDA requires passing one
exam — Designing for Cisco Internetwork Solutions
(200-310 DESGN).
Prerequisites: Prior to attempting this certification,
candidates must earn the CCENT, CCNA R&S, or any
CCIE certification.
Recommended experience: Cisco recommends that
candidates attempting this associate-level exam have
at least one year of experience in an IT role.
Cisco • 31
CISCO ASSOCIATE (CURRENT)

Cisco Certified Network Associate -

CyberOps (CCNA CyberOps)

The CCNA CyberOps certification is designed for entry-

level cybersecurity professionals. CCNA CyberOps is
an approved certification under the DoD 8570.01-M
framework in the CSSP Analyst and CCSP Incident
Responder categories. The CCNA CyberOps certification
validates a candidate’s understanding of security
topics, including:

•  Understanding and implementing access

control modes
•  Knowing the security impact of common
cryptography methods
•  Identifying common attack vectors and
security vulnerabilities
•  Mapping data types to compliance frameworks
•  Analyzing data from security events

Required exams: CCNA - CyberOps has two required

exams — Understanding Cisco Cybersecurity
Fundamentals (210-250 SECFND) and Implementing
Cisco Cybersecurity Operations (210-255 SECOPS).
Prerequisites: None.
Recommended experience: While Cisco certifications
no longer have formal prerequisites, Cisco
recommends that candidates attempting the two CCNA
- CyberOps exams have at least one year of experience
in a security role.

Cisco • 32
Current Professional-Level CISCO PROFESSIONAL (CURRENT)

Cisco Certifications Cisco Certified Network Professional -

Routing and Switching (CCNP Routing
IT professionals earn their professional-level and Switching)
certification by passing up to four exams. Cisco
recommends three to five years of experience to The CCNP Routing and Switching certification is
attempt a CCNP. designed for network engineers who plan, implement,
verify, and troubleshoot local and wide-area
Cisco offers eight professional-level exams: enterprise networks. The CCNP Routing and Switching
certification validates a candidate’s understanding of
•  CCDP networking topics, including:
•  CCNP Data Center
•  CCNP Cloud •  Network Principles
•  CCNP Collaboration •  Layer 2 Technologies
•  CCNP Routing and Switching •  Layer 3 Technologies
•  CCNP Security •  Infrastructure Security
•  CCNP Service Provider •  Infrastructure Services
•  CCNP Wireless •  VPN Technologies

CCNP certifications have their corresponding CCNA
as a prerequisite. For instance, CCNA Cloud is the
prerequisite for earning the CCNP Cloud. Alternately,
any CCIE certification can act as a prerequisite
for any CCNP.
Note: All listed CCNPs will retire February 24, 2020.
Required exams: Earning the CCNP Routing and
Switching requires passing three exams:
•  Implementing Cisco IP Routing (300-101 ROUTE)
•  Implementing Cisco IP Switched Networks
(300-115 SWITCH)
•  Troubleshooting and Maintaining Cisco IP
Networks (300-135 TSHOOT)
Prerequisites: Prior to attempting this certification,
candidates must earn the CCNA Routing and Switching,
or any CCIE.
Recommended experience: Cisco recommends that
candidates attempting this professional-level exam
have at least three years of experience in an IT role.

Cisco • 33
CISCO PROFESSIONAL (CURRENT)
Cisco Certified Network Professional -
Cloud (CCNP Cloud)
The CCNP Cloud certification is designed for cloud
engineers who work with private, public, and hybrid
cloud models. The CCNP Cloud certification validates a
candidate’s understanding of cloud topics, including:
• Cloud infrastructure including physical and
virtual data centers
•  Implement storage infrastructure
 Implement network infrastructure
•  Implement compute
•  Troubleshoot cloud workflows or applications
•  Identify infrastructure operational domains
Required exams: Earning the CCNP Cloud requires
passing four exams:
•  Implementing and Troubleshooting the Cisco
Cloud Infrastructure (300-460 CLDINF)
•  Designing the Cisco Cloud (300-465 CLDDES)
•  Automating the Cisco Enterprise Cloud
(300-470 CLDAUT)
•  Building the Cisco Cloud with Application Centric
Infrastructure (300-475 CLDACI)
Prerequisites: Prior to attempting this certification,
candidates must earn the CCNA Cloud, or any CCIE.
Recommended experience: Cisco recommends that
candidates attempting this professional-level exam
have at least three years of experience in an IT role.
CISCO PROFESSIONAL (CURRENT)
Cisco Certified Network Professional -
Cloud (CCNP Collaboration)
The CCNP Collaboration certification is designed for
collaboration engineers who design, deploy, configure,
and troubleshoot Cisco Unified Communications
(UC) applications, devices, and networks. The CCNP
Collaboration certification validates a candidate’s
understanding of collaboration topics, including:
•  Dial Plan
•  Describe the Basic Operation and Components
Involved in a Call
•  Configure an IOS Gateway
•  Configure Conferencing Device
•  QoS Model
•  Describe and Configure Cisco Unified
Communications Manager to Support
On-Cluster Calling
•  Configure Media Resources
Required exams: Earning the CCNP Collaboration
requires passing four exams:
•  Implementing Cisco Telephony and Video, Part 1
(300-070 CIPTV1)
•  Implementing Cisco Telephony and Video, Part 2
(300-075 CIPTV2)
•  Troubleshooting Cisco IP Telephony and Video
(300-080 CTCOLLAB)
•  Implementing Cisco Collaboration Applications
(300-085 CAPPS)
Cisco • 34
Prerequisites: Prior to attempting this certification,
candidates must earn the CCNA Collaboration,
or any CCIE.
Recommended experience: Cisco recommends that
candidates attempting this professional-level exam
have at least three years of experience in an IT role.
CISCO PROFESSIONAL (CURRENT)
Cisco Certified Network Professional -
Data Center (CCNP Data Center)
The CCNP Data Center certification is designed for
cloud engineers who design, implement, maintain,
and troubleshoot complex, modern data centers. The
CCNP Data Center certification validates a candidate’s
understanding of data center topics, including:
•  Configure identity abstraction
•  Configure service profile templates
•  Implement SSCI over IP (iSCSI)
•  Implement Fibre Channel port channels
•  Implement Fibre Channel over Ethernet (FCoE)
•  Implement Role-Based Access Control (RBAC)
Required exams: Earning the CCNP Data Center
requires passing five exams:
•  Implementing Cisco Data Center Unified
Computing (300-175 DCUCI)
•  Implementing Cisco Data Center Infrastructure
(300-165 DCII)
•  Implementing Cisco Data Center Virtualization and
Automation (300-170 DCVAI)
•  Designing Cisco Data Center Infrastructure (300-
160 DCID)
•  Troubleshooting Cisco Data Center Infrastructure
(300-180 DCIT)
Prerequisites: Prior to attempting this certification,
candidates must earn the CCNA Data Center,
or any CCIE.
Recommended experience: Cisco recommends that
candidates attempting this professional-level exam
have at least three years of experience in an IT role.
CISCO PROFESSIONAL (CURRENT)
Cisco Certified Network Professional -
Security (CCNP Security)
The CCNP Security certification is designed for
networking engineers who deploy, support and
troubleshoot firewalls, VPNS, and IDS/IPS solutions.
The CCNP Security certification validates a candidate’s
understanding of security topics, including:
•  Content Security
•  Network Threat Defense
•  Cisco FirePOWER Next-Generation IPS (NGIPS)
•  Security Architectures
•  Troubleshooting, Monitoring, and Reporting
Cisco • 35
Required exams: Earning the CCNP Security requires
passing four exams:
•  Implementing Cisco Secure Access Solutions (300-
208 SISAS)
•  Implementing Cisco Edge Network Security
Solutions (300-206 SENSS)
•  Implementing Cisco Secure Mobility Solutions
(300-209 SIMOS)
•  Implementing Cisco Threat Control Solutions (300-
210 SITCS)
Prerequisites: Prior to attempting this certification,
candidates must earn the CCNA Security, or any CCIE.
Recommended experience: Cisco recommends that
candidates attempting this professional-level exam
have at least three years of experience in an IT role.
CISCO PROFESSIONAL (CURRENT)
Cisco Certified Network Professional -
Service Provider
(CCNP Service Provider)
The CCNP Service Provider certification is designed
for network engineers who deliver carrier-grade
infrastructure. The CCNP Service Provider certification
validates a candidate’s understanding of managed
service topics, including:
•  OSPFv2 and OSPFv3 Routing in Service
Provider Environments
•  IS-IS, IPv4, and IPv6 in Service
Provider Environments
•  BGP Routing in Service Provider Environments
•  Route Manipulations in Service
Provider Environments
•  High Availability Routing Features
Required exams: Earning the CCNP Service Provider
requires passing four exams:
•  Deploying Cisco Service Provider Network Routing
(642-883 SPROUTE)
•  Deploying Cisco Service Provider Advanced
Routing (642-885 SPADVROUTE)
•  Implementing Cisco Service Provider Next-
Generation Core Network Services
(642-887 SPCORE)
•  Implementing Cisco Service Provider Next-
Generation Edge Network Services
(642-889 SPEDGE)
Prerequisites: Prior to attempting this certification,
candidates must earn the CCNA Service Provider,
or any CCIE.
Recommended experience: Cisco recommends that
candidates attempting this professional-level exam
have at least three years of experience in an IT role.
Cisco • 36
CISCO PROFESSIONAL (CURRENT)
Cisco Certified Network Professional -
Service Provider (CCNP Wireless)
The CCNP Wireless certification is designed for network
engineers who design, implement, and secure Cisco
wireless networks. The CCNP Wireless certification
validates a candidate’s understanding of wireless
topics, including:
•  Implement QoS for Wireless Applications
•  Implement Multicast over Wireless
•  Implement High Density
• Deploy WLAN Infrastructure for Mobility
•  Implement Cisco MSE Architecture
• Implement FlexConnect Architecture
•  Implement Controller and AP High Availability
•  Wireless Bridging (MESH)
Required exams: Earning the CCNP Wireless requires
passing four exams:
•  Designing Cisco Wireless (300-360 WIDESIGN)
•  Deploying Cisco Wireless (300-365 WIDEPLOY)
•  Troubleshooting Cisco Wireless (300-370
WITSHOOT)
•  Securing Cisco Wireless (300-375 WISECURE)
Prerequisites: Prior to attempting this certification,
candidates must earn the CCNA Wireless, or any CCIE.
Recommended experience: Cisco recommends that
candidates attempting this professional-level exam
have at least three years of experience in an IT role.
CISCO PROFESSIONAL (CURRENT)
Cisco Certified Design
Professional (CCDP)
The CCDP certification is designed for network
engineers who develop multi-layer enterprise
architectures and network components. The CCDP
certification validates a candidate’s understanding of
wireless topics, including:
•  Advanced Addressing and Routing Solutions for
Enterprise Networks
•  Advanced Enterprise Campus Networks
•  WANs for Enterprise Networks
•  Enterprise Data Center Integration
•  Security and Network Services
Required exams: Earning the CCDP requires passing
three exams:
•  Implementing Cisco IP Routing (300-101 ROUTE)
•  Implementing Cisco IP Switched Networks
(300-115 SWITCH)
•  Designing Cisco Network Service Architectures
(300-320 ARCH)
Prerequisites: Prior to attempting this certification,
candidates must earn the CCDA and CCNA R&S, CCDA
and CCNP R&S, or any CCIE.
Recommended experience: Cisco recommends that
candidates attempting this professional-level exam
have at least three years of experience in an IT role.
Cisco • 37
Current Expert-Level Cisco
Certifications
CCIEs are experts in their field and ready to fill senior-
level networking engineering roles, like senior network
engineer or network architect. While there aren’t
prerequisites for any expert-level Cisco exams, Cisco
recommends five to seven years experience before
attempting a CCIE. It’s possible to have encountered
the esoteric, complex problems that the CCIE validates
in smaller networks over a longer period of time.
Realistically, networking professionals who pursue
Cisco expert-level certifications have a decade or more
experience managing complex networks.
Cisco offers seven expert-level certifications, including
the Cisco Certified Design Expert:
•  CCDE
• CCIE Routing and Switching
•  CCIE Collaboration
•  CCIE Data Center
•  CCIE Security
•  CCIE Service Provider
•  CCIE Wireless
Note: With the exception of CCDE, these certifications
will retired on February 24, 2020.
CISCO EXPERT (CURRENT)
Cisco Certified Design Expert
The Cisco Certified Design Expert certification is
designed for IT professionals who translate business
needs and operational constraints into a customer’s
network. Candidates should expect to demonstrate an
expert level of competency in these topics during their
8-hour hands-on lab:
•  Analyze Design Requirements
•  Develop Network Designs
•  Implement Network Design
•  Validate and Optimize Network Design
Required exams: The written exam for the CCDE
certification is 352-001 CCDE. CCDE candidates must
then travel to a Cisco facility to take the CCDE lab exam.
Prerequisites: None.
Recommended experience: While expert-level Cisco
certifications don’t have formal prerequisites, Cisco
recommends that candidates attempting CCIE exams
have considerable experience as network design
engineers or similar senior technical roles.
Cisco • 38
CISCO EXPERT (CURRENT)
Cisco Certified Internetwork Expert -
Routing and Switching (CCIE R&S)
The CCIE Routing and Switching certification is
designed for IT professionals who plan, design,
implement, operate, and optimize complex networks.
Candidates should expect to demonstrate an expert
level of competency in these topics during their 8-hour
hands-on lab:
•  Network Infrastructure
•  Software Defined Infrastructure
•  Transport Technologies and Solutions
•  Infrastructure Security and Services
•  Infrastructure Automation and Programmability
Required exams: The written exam for the CCIE Routing
and Switching certification is 400-101 CCIE R&S. CCIE
candidates must then travel to a Cisco facility to take
the CCIE Routing and Switching lab exam.
Prerequisites: None.
Recommended experience: While expert-level Cisco
certifications don’t have formal prerequisites, Cisco
recommends that candidates attempting CCIE exams
have five to seven years experience implementing
networking technologies.
CISCO EXPERT (CURRENT)
Cisco Certified Internetwork Expert -
Wireless (CCIE Wireless)
The CCIE Wireless certification is designed for IT
professionals who plan, design, implement, operate,
and optimize complex wireless networks. Candidates
should expect to demonstrate an expert level of
competency in these topics during their 8-hour hands-
on lab:
•  Radio Frequency and Standards
•  Enterprise Wired Campus
•  Enterprise Wireless Network
•  Wireless Security and Identity Management
•  Wireless Business Applications and Services
•  Automation, Analytics, and Assurance
Required exams: The written exam for the CCIE
Wireless certification is 400-351 CCIE Wireless. CCIE
candidates must then travel to a Cisco facility to take
the CCIE Wireless lab exam.
Prerequisites: None.
Recommended experience: While expert-level Cisco
certifications don’t have formal prerequisites, Cisco
recommends that candidates attempting CCIE exams
have five to seven years experience implementing
wireless networking technologies.
Cisco • 39
CISCO EXPERT (CURRENT)
Cisco Certified Internetwork Expert -
Collaboration (CCIE Collaboration)
The CCIE Collaboration certification is designed for IT
professionals who plan, design, implement, operate,
and optimize complex collaboration environments.
Candidates should expect to demonstrate an expert
level of competency in these topics during their 8-hour
hands-on lab:
•  Protocols and APIs
•  Infrastructure and Quality of Service
•  Call Control and Dial Plans
•  Endpoints and User Management
•  Edge Services
•  Media Resources and Meetings
•  Cisco Applications and Services
Required exams: The written exam for the
CCIE Collaboration certification is 400-051 CCIE
Collaboration. CCIE candidates must then travel to a
Cisco facility to take the CCIE Collaboration lab exam.
Prerequisites: None.
Recommended experience: While expert-level Cisco
certifications don’t have formal prerequisites, Cisco
recommends that candidates attempting CCIE exams
have five to seven years experience implementing
collaboration solutions.
CISCO EXPERT (CURRENT)
Cisco Certified Internetwork Expert -
Data Center (CCIE Data Center)
The CCIE Data Center certification is designed for IT
professionals who plan, design, implement, operate,
and optimize large, complex data centers. Candidates
should expect to demonstrate an expert level of
competency in these topics during their 8-hour hands-
on lab:
•  Data Center L2/L3 Connectivity
•  Data Center Fabric Infrastructure
•  Data Center Fabric Connectivity
•  Data Center Compute
•  Data Center Storage Protocols and Features
•  Data Center Security and Network Services
•  Data Center Automation and Orchestration
Required exams: The written exam for the CCIE Data
Center certification is 400-151 CCIE Data Center. CCIE
candidates must then travel to a Cisco facility to take
the CCIE Data Center lab exam.
Prerequisites: None.
Recommended experience: While expert-level Cisco
certifications don’t have formal prerequisites, Cisco
recommends that candidates attempting CCIE exams
have five to seven years experience working with large
data centers.
Cisco • 40
CISCO EXPERT (CURRENT)
Cisco Certified Internetwork Expert -
Security (CCIE Security)
The CCIE Security certification is designed for
IT professionals who secure all aspects of an
organization’s wired and wireless networks and cloud
services. Candidates should expect to demonstrate an
expert level of competency in these topics during their
8-hour hands-on lab:
•  Perimeter Security and Intrusion Prevention
•  Secure Connectivity and Segmentation
•  Infrastructure Security
•  Identity Management, Information Exchange,
and Access Control
•  Advanced Threat Protection and Content
Security
Required exams: The written exam for the CCIE
Security certification is 400-251 CCIE Security. CCIE
candidates must then travel to a Cisco facility to take
the CCIE Security lab exam.
Prerequisites: None.
Recommended experience: While expert-level Cisco
certifications don’t have formal prerequisites, Cisco
recommends that candidates attempting CCIE exams
have five to seven years experience securing enterprise
networks and systems.
CISCO EXPERT (CURRENT)
Cisco Certified Internetwork Expert -
Service Provider
(CCIE Service Provider)
The CCIE Service Provider certification is designed
for IT professionals who design, deploy, operate and
optimize service provider technologies and solutions.
Candidates should expect to demonstrate an expert
level of competency in these topics during their 8-hour
hands-on lab:
•  Core Routing
•  Architectures and Services
•  Access Connectivity
•  High Availability and Fast Convergence
•  Security
•  Assurance and Automation
Required exams: The written exam for the CCIE Service
Provider certification is 400-201 CCIE Service Provider.
CCIE candidates must then travel to a Cisco facility to
take the CCIE Service Provider lab exam.
Prerequisites: None.
Recommended experience: While expert-level Cisco
certifications don’t have formal prerequisites, Cisco
recommends that candidates attempting CCIE exams
have five to seven years experience designing and
operating service provider technologies.
Cisco • 41
Cisco Certified Architect
Certification (CCAr)
The Cisco Certified Architect (CCAr) certification is the
most difficult and expensive Cisco exam. Networking
professionals who attempt this exam must be a Cisco
Certified Design Expert (CCDE) with vast experience
designing large and complex networks. The CCAr
is so difficult and specialized that only a handful of
networking professionals have this certification.
The initial CCAr board qualification review costs $3,750.
The board review then costs an additional $11,250. The
total cost of exams for the CCAr is $15,000.
Note: There are no reported changes to the CCAr with
the February 2020 retirements.
Do Cisco Certifications
Expire?
Currently, Cisco certifications expire in two, three, or
five years. CCNA and CCNP expire after three years.
CCIE expire after two years. Network architects must
recertify their CCAr every five years. Cisco outlines
different recertification requirements for each
certification level.
In February 2020, all Cisco certifications (except for
CCAr) expire after three years. While this has long been
the case for CCNA and CCNP holders, this marks a
change to CCIEs — who used to recertify every
two years.
How to Recertify a Cisco
Certification (Current)
CCNA or CCNP certifications must be recertified
every three years. Cisco requires that networking
professionals with CCNA or CCNP pass one exam from
any CCNA, CCNP, CCIE, or specialist tracks, except the
CCENT 1NCD1 exam.
CCIE certifications must be recertified every two
years. There are two options to recertify — continuing
education or passing another CCIE exam. The Cisco
Continuing Education Program has assigned point
values for a number of recertification activities. Most
Cisco • 42
continuing education options are training courses, but
there are also Cisco Live sessions and even content
authoring opportunities. CCIEs must earn 100 credits
every 24 months to maintain active status.
The CCAr certification must be recertified every five
years. Unlike the CCNA, CCNP, and CCIE certifications,
the CCAr is a service-based recertification program.
Certified Cisco Architects must create or refine exam
content, or judge either one or two CCAr candidates.
Architects can judge one successful CCAr candidate or
two unsuccessful candidates.
Cisco Certification Career
& Salary Information
An IT professional who holds a CCNA can earn
anywhere between $40,643 and $124,889, according
to Payscale.com. There are a number of factors that
play into salaries, including professional experience,
geography, and the company. It’s also important to
consider the cost of living when looking at national
salary averages and ranges. Company industry and size
are other determinants of salary. Larger companies
typically pay more but have complicated, long
hiring practices.
Roles common for those holding a CCNA R&S
certification include network engineer, network
technician, network administrator, IT manager,
and systems administrator. It’s common for even IT
professionals with specialized roles and certifications,
like CCNA Wireless or Collaboration, to have a generic
network engineer title. However, they may also have a
specialized job title, like wireless networking engineer,
collaboration engineer, or a moniker specific
to their role.
Cisco Certification Training
CBT Nuggets offers a wide variety of Cisco training:
• CCDA Design 200-310 DESGN
• CCDA Design 640-864 DESGN
• CCDP Design 300-320 ARCH
• CCENT/CCNA 100-105 ICND1
• CCNA R&S 200-105 ICND2
• CCNA 640-875 SPNGN1
• CCNA 640-878 SPNGN2
• CCNA Cloud 210-451 CLDFND
• CCNA Collaboration 210-060 CICD
• CCNA Collaboration 210-065 CIVND1
• CCNA Collaboration 210-065 CIVND2
• CCNA Cyber Ops 210-250 SECFND
• CCNA Cyber Ops 210-255 SECOPS
• CCNA Data Center 200-150 DCICN
• CCNA Data Center 200-155 DCICT
• CCNA Hands-on Labs Using Wireshark & GNS3
• CCNA Security 210-260 IINS
• CCNA Wireless 200-355 WIFUND
Cisco • 43
 • CCNP Collaboration CIPTV1 300-070
• CCNP ROUTE 300-101 Hands-on Labs Exam Prep
• CCNP R&S 300-101 ROUTE
• CCNP R&S 300-115 SWITCH
• CCNP R&S 300-135 TSHOOT
• CCNP SWITCH 300-115 Hands-on Labs Exam Prep
• CCNP Security 300-206 SENSS
• CCNP Security 300-207 SITCS
• CCNP Security 300-208 SISAS
• CCNP Security 300-209 SIMOS
• CCNP TSHOOT 300-135 Hands-on Labs Exam Prep
• Cisco Data Center Networking Fundamentals
• Cisco Data Center Networking Technologies
• CCNA R&S Troubleshooting Mastery
• Virtual Internet Routing Lab (VIRL) 1.x
• VoIP CCNA Voice ICOMM 640-461
• VoIP CCNP Voice CIPT1 v8.0 642-447
• VoIP CCNP Voice CIPT2 v8.0 642-457
• VoIP CCNP Voice CVOICE v8.0 642-437
NuggetLab supplemental files include practice IOS
commands, configuration files, and network diagrams
— everything a learner needs to study for a Cisco
certification exam.
CBT Nuggets learners should also take advantage
of the Kaplan® IT Training Practice Exams included
with a subscription to CBT Nuggets. Practice exams
can either be taken timed or untimed, and provide
a good baseline for learners to test their knowledge.
Additionally, Kaplan® IT Training Practice Exams
evaluate a learner’s strengths and weaknesses, so they
know where to focus their attention while studying.
Being successful with Cisco certifications requires
quality instruction, hands-on experience, and practice
with the exam itself. CBT Nuggets provides every
element a learner needs to pass a Cisco
certification exam.

In addition to quality, entertaining Cisco video training

products created by expert-level trainers, CBT Nuggets
provides everything a learner needs to study for a Cisco
certification exam including virtual labs, supplemental
files, practice exams, and access to a robust
Learner Community.

All CBT Nuggets Cisco training either provides learners

with custom virtual labs or supplemental files to
learn technical concepts alongside the video training.
Virtual labs were designed by experts to help learners
gain hands-on experience in a sandbox environment.

© 2019 CBT Nuggets. Version 1.0.

 Juniper
Certifications
Juniper Networks does not have the notoriety and recognition that their rival, Cisco
Systems, enjoys. That does not mean Juniper is a lesser choice, or that it does not enjoy
the trust of a great many large customers worldwide. Juniper has been around since
1996, and had a revenue of $5.02 billion in 2017. Juniper certification is a valuable asset
for network engineers looking to expand their skill set beyond those required to support
market leader Cisco.

The Juniper Networks Certification Program (JNCP) framework includes 24 certifications

across seven certification tracks:

•  Automation and DevOps

•  Cloud
•  Data Center
•  Design
•  Enterprise Routing and Switching
•  Junos Security
•  Service Provider Routing and Switching
Juniper Automation and
DevOps Certifications
IT professionals who pursue the certications in this
track demonstrates understanding of automation tools
and frameworks, as well as concepts and practices
related to DevOps. The streamlining of routine and
repetitive tasks through automation increases value to
the company in terms of both cost and efficiency.
Network engineers don’t have to be full-fledged
programmers, but they should know enough to get the
most out of the network platforms that they manage.
In this track, candidates should be comfortable with
Remote Procedure Calls (RPCs) and the syntax of
scripting and programming using Python.
Juniper offers two certifications in the Automation and
DevOps track:
•  Juniper Networks Certified Associate:
Automation and DevOps (JNCIA-DevOps)
•  Juniper Networks Certified Specialist:
Automation and DevOps (JNCIS-DevOps)
JUNIPER AUTOMATION AND DEVOPS
Juniper Networks Certified Associate:
Automation and DevOps
(JNCIA-DevOps)
The JNCIA: Automation and DevOps certification
is designed for IT professionals who have some
knowledge of automation and DevOps on Juniper
platforms. The JNCIA-DevOps validates a candidate’s
understanding of these topics and skills:
•  Junos Automation Stack and DevOps Concepts
•  XML/NETCONF
•  Data Serialization
•  Ansible
•  Python or PyEZ
•  REST APIs
Required exam: Earning the JNCIA: Automation and
DevOps certification requires passing one exam —
JNCIA: Automation and DevOps (JN0-220).
Prerequisites: None.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCIA:
Automation and DevOps was designed for networking
professionals with introductory-level knowledge of
automation tools and best practices.
Juniper • 46
JUNIPER AUTOMATION AND DEVOPS

Juniper Networks Certified Specialist:

Automation and DevOps
(JNCIS-DevOps)

The JNCIS: Automation and DevOps certification is

designed for IT professionals with intermediate-level
knowledge of automation and DevOps on Juniper
platforms. The JNCIS-DevOps validates a candidate’s
understanding of these topics and skills:

•  Platform Automation Overview

•  NETCONF/XML API
•  Data Serialization
•  Python/Ruby
•  Ansible
•  Junos Automation Scripts
•  YANG
•  Juniper Extension Toolkits

Required exam: Earning the JNCIS: DevOps

certification requires passing one exam — JNCIS-
Automation and DevOps (JN0-420).
Prerequisites: Prior to attempting this certification,
candidates must earn the JNCIA: Automation and
DevOps certification.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCIA:
DevOps was designed for networking professionals
with intermediate knowledge of automation tools and
best practices.

Juniper • 47
Juniper Cloud Certifications JUNIPER CLOUD

Juniper Networks Certified Associate:

Understanding what the cloud is, what is does, and the Cloud (JNCIA-Cloud)
various technologies that support it are the focus of the
Juniper Cloud Certification track. Of particular interest The JNCIA: Cloud certification is designed for entry-
are three network frameworks that help power the level IT professionals working with Juniper Networks
cloud: network functions virtualization (NFV), software- architecture. The JNCIA-Cloud validates a candidate’s
defined networking (SDN), and software-defined wide understanding of these topics and skills:
area networking (SD-WAN).
•  Cloud Architectures
Juniper offers two certifications in the Cloud track: •  NFV
•  SDN
•  Juniper Networks Certified Associate: Cloud •  SDN WAN
(JNCIA-Cloud) •  Cloud Monitoring
•  Juniper Networks Certified Specialist: Cloud •  Cloud Managed Services
(JNCIS-Cloud) •  Cloud Security

Required exam: Earning the JNCIA: Cloud certification

requires passing one exam — JNCIA: Cloud (JN0-210).
Prerequisites: None.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCIA:
Cloud was designed for networking professionals with
introductory-level knowledge of Juniper Networks
cloud-based networking architectures, theory, and
best practices.

Juniper • 48
JUNIPER CLOUD

Juniper Networks Certified Specialist:

Cloud (JNCIS-Cloud)

The JNCIS: Cloud certification is designed for IT

professionals working with OpenStack and Contrail,
which are cloud networking stack architectures. The
JNCIS-Cloud validates a candidate’s understanding of
these topics and skills:

•  Understand SDN Theory and Applications

•  OpenStack
•  Contrail/Open Contrail
•  Contrail Service Chaining
•  Contrail Analytics
•  Troubleshooting Juniper Networks
cloud products

Required exam: Earning the JNCIS: Cloud certification

requires passing one exam — JNCIS: Cloud (JN0-411).
Prerequisites: Prior to attempting this certification,
candidates must earn the JNCIA: Cloud certification.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCIS:
Cloud was designed for networking professionals
with intermediate knowledge of software-defined
networking, theory, and best practices.

Juniper • 49
Juniper Data Center
Certifications
Junos is the software that runs Juniper Networks
equipment. It is essentially the operating system (OS)
for the routing, switching, security, and other devices
made by the company. The definition is in the name:
Junos (or Juniper OS).
When people refer to Juniper Junos certification, they
may be referring to the Associate-level exam that is the
entry point for the Data Center, Enterprise Routing and
Switching, and Service Provider Routing and Switching
certification tracks. For someone starting out with
Juniper, or an engineer who is only interested in taking
one basic exam, the Juniper Junos certification
(JNCIA-Junos) is probably the best choice.
Juniper offers four certifications in the Data
Center track:
•  Juniper Certified Associate: Junos (JNCIA-Junos)
•  Juniper Certified Specialist: Enterprise Routing
(JNCIS-ENT)
•  Juniper Networks Certified Professional: Data
Center (JNCIP-DC)
•  Juniper Networks Certified Expert - Data Center
(JNCIE-DC)
JUNIPER DATA CENTER
Juniper Certified Associate: Junos
(JNCIA-Junos)
The JNCIA: Junos certification is designed for entry-
level networking professionals. The JNCIA focuses on
networking basics and routing fundamentals — similar
to what you might find with Cisco’s CCNA. It also covers
product-specific information, including the Junos
device portfolio and maneuvering the Junos CLI. The
JNCIA-Junos validates a candidate’s understanding of
these topics and skills:
•  Networking Fundamentals
•  Junos OS Fundamentals
•  User Interfaces
•  Junos Configuration Basics
•  Operational Monitoring and Maintenance
•  Routing Fundamentals
•  Routing Policy and Firewall Filters
Required exam: Earning the JNCIA: Cloud certification
requires passing one exam — JNCIA: Cloud (JN0-102).
Prerequisite: None.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCIA:
Cloud was designed for networking professionals with
beginner-to-intermediate knowledge of networking.
Juniper • 50
JUNIPER DATA CENTER
Juniper Certified Specialist:
Enterprise Routing (JNCIS-ENT)
The JNCIS: Enterprise Routing certification is designed
for networking professionals pursuing a specialization
in either the Data Center or Enterprise tracks at
the Professional and Expert levels. The JNCIS-ENT
validates a candidate’s understanding of these topics
and skills:
•  Layer 2 Switching and VLANs
•  Spanning Tree
•  Layer 2 Security
•  Protocol Independent Routing
•  OSPF
•  IS-IS
•  BGP
•  Tunnels
•  High Availability
Required exam: Earning the JNCIS: Enterprise Routing
certification requires passing one exam — JNCIS:
Enterprise Routing (JN0-347).
Prerequisites: Prior to attempting this certification,
candidates must earn the JNCIA: Cloud certification.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCIS:
Enterprise Routing was designed for experienced
networking professionals with beginner to
intermediate knowledge of routing and switching
implementations in Junos.
JUNIPER DATA CENTER
Juniper Networks Certified
Professional: Data Center (JNCIP-DC)
The JNCIP: Data Center certification is designed for
networking professionals configuring, managing, and
troubleshooting data centers. The JNCIP-DC validates a
candidate’s understanding of these topics and skills:
•  Data Center Deployment or Management
•  Multichassis LAG
•  Layer 2 Fabrics
•  Layer 3 Fabrics
•  VXLAN
•  EVPN VXLAN Signaling
•  Data Center Interconnect
•  Data Center Architecture and Security
Required exam: Earning the JNCIP: Data Center
certification requires passing one exam — JNCIP: Data
Center (JN0-681).
Prerequisites: Prior to attempting this certification,
candidates must earn the JNCIS: ENT.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCIP:
Data Center was designed for experienced data center
networking professionals with advanced knowledge of
the Juniper Networks Junos software and data
center devices.
Juniper • 51
JUNIPER DATA CENTER

Juniper Networks Certified Expert -

Data Center (JNCIE-DC)

The JNCIE: Data Center certification is designed for

networking professionals working with advanced
data center configuration, management, and
troubleshooting. The JNCIE-DC validates a candidate’s
understanding of these topics and skills:

•  Management
•  Layer 2 Underlay
•  Layer 3 Underlay
•  Controllerless Overlay
•  Data Center Interconnect (DCI)
•  Security
•  Class of Service (CoS)

Required exam: Earning the JNCIE: Data Center

certification requires passing one exam — JNCIE: Data
Center (JPR-980).
Prerequisites: Prior to attempting this certification,
candidates must earn the JNCIP: Data
Center certification.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCIA: Cloud
was designed to validate networking professionals’
ability to deploy, configure, manage, and troubleshoot
Junos-based platforms. Because this is a largely
hands-on exam, candidates are expected to have
advanced skills in Juniper data center configuration
and management.

Juniper • 52
Juniper Design Certifications
While many network engineers work solely on the
operational side of networking, design engineers are
interested in creating and building networks from
scratch. It requires a different mindset, one that looks
into a future of possibilities, rather than the past
history of an existing network architecture.
It takes a lot of ingenuity to make things work, so
designers need to know a lot about the technologies
and practices of network design before they start.
Juniper offers four certifications in the Design track:
•  Juniper Networks Certified Design
Associate (JNCDA)
•  Juniper Networks Certified Design Specialist:
Data Center (JNCDS-DC)
•  Juniper Networks Certified Design Specialist:
Service Provider (JNCDS-SP)
•  Juniper Networks Certified Design Specialist:
Security (JNCDS-SEC)
JUNIPER DESIGN
Juniper Networks Certified Design
Associate (JNCDA)
The Juniper Networks Certified Design Associate
certification is designed for IT professionals who create
network architectures with Juniper platforms. The
JNCDA validates a candidate’s understanding of these
topics and skills:
•  Customer Network Design Requirements
•  Securing the Network
•  Business Continuity
•  Network Automation and Management
•  Network Design Architectures
Required exam: Earning the JNCDA certification
requires passing one exam — Juniper Networks
Certified Design Associate (JN0-1101).
Prerequisite: None.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCDA was
designed for networking professionals and designers
with beginner knowledge of network design, theory,
and best practices.
Juniper • 53
JUNIPER DESIGN
Juniper Networks Certified Design
Specialist: Data Center (JNCDS-DC)
The JNCDS: Data Center certification is designed for
IT professionals with intermediate-level knowledge of
network design related to data center implementations
with Juniper platforms. The JNCDS-DC validates a
candidate’s understanding of these topics and skills:
•  Data Center Design Considerations
•  Ethernet Fabric Architectures
•  IP Fabric Architecture
•  Data Center Interconnect
•  Data Center Security
•  Virtualization in the Data Center
•  Traffic Prioritization in the Data Center
•  High Availability in the Data Center
Required exam: Earning the JNCDS: Data Center
certification requires passing one exam — JNCDS: Data
Center (JN0-1301).
Prerequisites: Prior to attempting this certification,
candidates must earn the Juniper Networks Certified
Design Associate certification.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCDS: Data
Center was designed for networking professionals and
designers with intermediate knowledge of data center
network design, theory, and best practices.
JUNIPER DESIGN
Juniper Networks Certified Design
Specialist: Service Provider
(JNCDS-SP)
The JNCDS: Service Provider certification is
designed for IT professionals with intermediate-
level knowledge of network design related to service
provider implementations. The JNCDS-SP validates a
candidate’s understanding of these topics and skills:
•  WAN Connectivity
•  Network Availability and Traffic Prioritization
•  Service Provider Core WAN Design
•  Service Provider Edge WAN Design
•  Enterprise WAN
•  Data Center WAN
•  WAN Security
•  WAN Management
•  SDN in the WAN
Required exam: Earning the JNCDS: Service Provider
certification requires passing one exam — JNCDS:
Service Provider (JN0-1331).
Prerequisites: Prior to attempting this certification,
candidates must earn the Juniper Networks Certified
Design Associate certification.
Recommended experience: While Juniper does not
specify qualifications, JNCDS: Service Provider was
designed for networking professionals and designers
with intermediate knowledge of service provider
design, theory, and best practices.
Juniper • 54
JUNIPER DESIGN

Juniper Networks Certified Design

Specialist: Security (JNCDS-SEC)

The JNCDS: Security certification is designed for IT

professionals with intermediate-level knowledge of
network design related to security implementations
with Juniper platforms. The JNCDS-SEC validates a
candidate’s understanding of these topics and skills:

•  Fundamental Security Concepts

•  Advanced Security Concepts
•  Securing the Campus and Branch
•  Securing the Enterprise WAN
•  Securing the Service Provider WAN
•  Securing the Data Center
•  Securing Automation and Management
•  Securing Virtualization
•  High Availability

Required exam: Earning the JNCDS: Security

certification requires passing one exam — JNCDS:
Security (JN0-1361).
Prerequisites: Prior to attempting this certification,
candidates must earn the Juniper Networks Certified
Design Associate (JNCDA) certification.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCDS:
Security was designed for networking professionals
and designers with intermediate knowledge of network
security, theory, and best practices.

Juniper • 55
Juniper Enterprise Routing JUNIPER ROUTING AND SWITCHING

and Switching Certifications Juniper Certified Specialist:

Enterprise Routing and Switching
At the Specialist Level, the Juniper Enterprise Routing (JNCIS-ENT)
and Switching certification gets into advanced concepts
like IP multicast, spanning tree, and class of service The JNCIS: Enterprise Routing certification is designed
(CoS). Juniper Expert-level R&S exams are notoriously for networking professionals pursuing a specialization
hands-on and validate the ability of candidates to in either the Data Center or Enterprise tracks at
handle a wide variety of network issues. the Professional and Expert levels. The JNCIS-ENT
validates a candidate’s understanding of these topics
Juniper offers three certifications in the Enterprise and skills:
Routing and Switching track:
•  Layer 2 Switching and VLANs
•  Juniper Certified Specialist: Enterprise Routing •  Spanning Tree
and Switching (JNCIS-ENT) •  Layer 2 Security
•  Juniper Certified Professional: Enterprise •  Protocol Independent Routing
Routing and Switching (JNCIP-ENT) •  OSPF
•  Juniper Certified Expert: Enterprise Routing and •  IS-IS
Switching (JNCIE-ENT) •  BGP
•  Tunnels
•  High Availability

Required exam: Earning the JNCIS: Enterprise Routing

and Switching certification requires passing one exam
— JNCIS: Enterprise Routing and Switching (JN0-348).
Prerequisites: Prior to attempting this certification,
candidates must earn the JNCIA: Junos certification.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCIS:
Enterprise Routing and Switching was designed for
experienced networking professionals with beginner
to intermediate knowledge of routing and switching
implementations in Junos.
Juniper • 56
JUNIPER ROUTING AND SWITCHING
Juniper Certified Professional:
Enterprise Routing and Switching
(JNCIP-ENT)
The JNCIP: Enterprise Routing and Switching
certification is designed for IT professionals who
configure, manage, and troubleshoot enterprise
networks. The JNCIP-ENT validates a candidate’s
understanding of these topics and skills:
•  Layer 2 Switching and VLANs
•  Interior Gateway Protocols (IGPs)
•  BGP
•  IP Multicast
•  Ethernet Switching and Spanning Tree
•  Layer 2 Authentication and Access Control
•  IP Telephony Features
•  Class of Service (CoS)
Required exam: Earning the JNCIP: Enterprise Routing
and Switching certification requires passing one exam
— JNCIP: Enterprise Routing and Switching (JN0-647).
Prerequisites: Prior to attempting this certification,
candidates must earn the JNCIS: Enterprise Routing
and Switching certification.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCIP:
Enterprise Routing and Switching was designed for
experienced networking professionals with beginner
to intermediate knowledge of routing and switching
implementations in Junos.
JUNIPER ROUTING AND SWITCHING
Juniper Certified Expert: Enterprise
Routing and Switching (JNCIE-ENT)
The JNCIE: Enterprise Routing and Switching
certification is designed for IT experts who configure,
manage, and troubleshoot enterprise networks. The
JNCIE-ENT validates a candidate’s understanding of
these topics and skills:
•  System Services and Security
•  Interfaces
•  Ethernet Switching
•  IGPs
•  BGP
•  Protocol-Independent Routing
•  Multicast
•  Class of Service (CoS)
Required exam: Earning the JNCIE: Enterprise Routing
and Switching certification requires passing one exam
— JNCIE: Enterprise Routing and Switching (JPR-943).
Prerequisites: Prior to attempting this certification,
candidates must earn the JNCIP: Enterprise Routing
and Switching certification.
Recommended experience: While Juniper does not
specify qualifications, Juniper recommends candidates
taking this hands-on exam to have advanced skills in
Juniper routing and switching configuration.
Juniper • 57
Juniper Junos Security
Certifications
No one should underestimate the value of a robust
network security implementation. Candidates in the
Juniper Junos Security Certification track understand a
host of concepts and practices related to security.
A glance at the exam objectives below will show that
there is a lot to cover here. An integral part of the
material is Juniper SRX Series, a product family of high-
performance network security solutions.
Juniper offers four certifications in the Security track:
•  Juniper Networks Certified Associate:
Security (JNCIA-SEC)
•  Juniper Networks Certified Specialist:
Security (JNCIS-SEC)
•  Juniper Networks Certified Professional:
Security (JNCIP-SEC)
•  Juniper Networks Certified Expert:
Security (JNCIE-SEC)
JUNIPER SECURITY
Juniper Networks Certified Associate:
Security (JNCIA-SEC)
The JNCIA: Security certification is designed for entry-
level IT professionals interested in a security career
with Juniper platforms. The JNCIA-SEC validates a
candidate’s understanding of these topics and skills:
•  SRX Series Devices
•  Junos Security Objects
•  Security Policies
•  Sky Advanced Threat Prevention
•  Network Address Translation
•  IPSec
•  United Threat Management
•  Monitoring/Reporting
Required exam: Earning the JNCIA: Security
certification requires passing one exam — JNCIA:
Security (JN0-230).
Prerequisites: None.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCIA:
Security was designed for networking professionals
with beginner to intermediate knowledge of the
Juniper Networks Junos OS for SRX Series devices.
Juniper • 58
JUNIPER SECURITY
Juniper Networks Certified Specialist:
Security (JNCIS-SEC)
The JNCIS: Security certification is designed for IT
professionals with some knowledge and experience in
security related to Juniper platforms. The JNCIS-SEC
validates a candidate’s understanding of these topics
and skills:
•  Junos Security Overview
•  Zones
•  Security Policies
•  NAT
•  IPsec VPNs
•  High Availability (HA) Clustering
•  Virtual SRX
Required exam: Earning the JNCIS: Security
certification requires passing one exam — JNCIS:
Security (JN0-333).
Prerequisites: Prior to attempting this certification,
candidates must earn the JNCIA: Security certification.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCIS:
Security was designed for experienced networking
professionals with intermediate knowledge of the
Juniper Networks Junos OS for SRX Series devices.
JUNIPER SECURITY
Juniper Networks Certified
Professional: Security (JNCIP-SEC)
The JNCIP: Security certification is designed for
IT professionals with advanced knowledge and
experience in security related to Juniper platforms. The
JNCIP-SEC validates a candidate’s understanding of
these topics and skills:
•  Application-Aware Security Services
•  Security Director Logging and Reporting
•  Sky ATP
•  United Threat Management (UTM)
•  Intrusion Prevention System (IPS)
•  Software Defined Secure Networks (SDSN)
•  User Firewall
•  Layer 2 Security
Required exam: Earning the JNCIP: Security
certification requires passing one exam — JNCIP:
Security (JN0-634).
Prerequisites: Prior to attempting this certification,
candidates must earn the JNCIS: Security certification.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCIP:
Security was designed for experienced networking
professionals with advanced knowledge of the Juniper
Networks Junos OS for SRX Series device.
Juniper • 59
JUNIPER SECURITY

Juniper Networks Certified Expert:

Security (JNCIE-SEC)

The JNCIE: Security certification is designed for IT

professionals with practical skills and advanced
knowledge in security related to Juniper platforms. The
JNCIE-SEC validates a candidate’s understanding of
these topics and skills:

•  Security Infrastructure
•  Security Management
•  Advanced Security

Required exam: Earning the JNCIE: Security

certification requires passing one exam — JNCIE:
Security (JPR-933).
Prerequisites: Prior to attempting this certification,
candidates must earn the JNCIP: Security certification.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCIE:
Security was designed to validate the networking
professional’s ability to deploy, configure, manage,
and troubleshoot Junos-based security platforms.
Those taking this hands-on exam are expected to have
advanced skills in Juniper security.

Juniper • 60
Juniper Service Provider
Routing and Switching
Certifications
Refer to the Juniper Data Center Certification section
for more information on the JNCIA-Junos exam.
The same knowledge that helps engineers in the
administration of data centers is helpful to those who
support Enterprise or Service Provider Routing and
Switching technologies. The first two exams are the
same for both Enterprise and Service Provider Routing
and Switching.
Juniper offers three certifications in the Service
Provider Routing and Switching track:
•  Juniper Networks Certified Specialist:
Service Provider (JNCIS-SP)
•  Juniper Networks Certified Professional:
Service Provider (JNCIP-SP)
•  Juniper Networks Certified Expert:
Service Provider (JNCIE-SP)
The difference between the Enterprise and Service
Provider tracks is one of emphasis. Many of the same
technologies and platforms come into play, but
enterprise network engineers will work with more big
connections requiring BGP, MPLS, and other skills.
Enterprise engineers deal with smaller connections,
users, and campus-based implementations.
JUNIPER SERVICE PROVIDER ROUTING AND SWITCHING
Juniper Networks Certified Specialist:
Service Provider (JNCIS-SP)
The JNCIS: Service Provider certification is designed
for IT professionals with some knowledge of service
provider configuration and management. The JNCIS-SP
validates a candidate’s understanding of these topics
and skills:
•  Protocol-Independent Routing
•  Open Shortest Path First (OSPF)
•  Intermediate System to Intermediate System
•  Border Gateway Protocol (BGP)
•  Layer 2 Bridging and VLANs
•  Spanning-Tree Protocols
•  Multiprotocol Label Switching (MPLS)
•  IPv6
•  Tunnels
•  High Availability
Required exam: Earning the JNCIS: Service Provider
certification requires passing one exam — JNCIS:
Service Provider (JN0-361).
Prerequisites: Prior to attempting this certification,
candidates must earn the JNCIA: Junos certification.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCIS:
Service Provider was designed for experienced
networking professionals with beginner to
intermediate knowledge of routing and switching
implementations in Junos.
Juniper • 61
JUNIPER SERVICE PROVIDER ROUTING AND SWITCHING
Juniper Networks Certified
Professional: Service Provider
(JNCIP-SP)
The JNCIP: Service Provider certification is designed for
IT professionals with advanced knowledge of service
provider configuration and management. The JNCIP-SP
validates a candidate’s understanding of these topics
and skills:
•  OSPF
•  IS-IS
•  BGP
•  Class of Service (CoS)
•  IP Multicast
•  Layer 3 VPNs
•  Layer 2 VPNs
Required exam: Earning the JNCIP: Service Provider
certification requires passing one exam — JNCIP:
Service Provider (JN0-662).
Prerequisites: Prior to attempting this certification,
candidates must earn the JNCIS: Service
Provider certification.
Recommended experience: While Juniper does not
specify qualifications for this certification, JNCIP:
Service Provider was designed for experienced
networking professionals with advanced knowledge of
the Juniper Networks Junos OS.
JUNIPER SERVICE PROVIDER ROUTING AND SWITCHING
Juniper Networks Certified Expert:
Service Provider (JNCIE-SP)
The JNCIE: Service Provider certification is designed
for IT professionals with practical skills and advanced
knowledge of service provider configuration and
management. The JNCIE-SP validates a candidate’s
understanding of these topics and skills:
•  Device Infrastructure
•  IGP
•  MPLS
•  BGP
•  VPNs
•  Multicast
•  CoS
Required exam: Earning the JNCIE: Service Provider
certification requires passing one exam — JNCIE:
Service Provider (JPR-960).
Prerequisites: Prior to attempting this certification,
candidates must earn the JNCIP: Service
Provider certification.
Recommended experience: While Juniper does
not specify qualifications for this certification,
JNCIE: Service Provider was designed to validate
the networking professional’s ability to implement,
troubleshoot and maintain Juniper Networks service
provider networks. Those taking this hands-on exam
are expected to have advanced skills in
Juniper security.
Juniper • 62
Juniper Certification
Recertification and Renewal
Juniper certifications are valid for three years and
will expire unless recertification action is taken.
Recertification can be accomplished through
examination or class attendance.
Certification holders can complete either an exam on
the same level or an exam on a higher level within the
same track to renew their certification. Those who elect
to recertify through course attendance should take an
appropriate course in the same track as prescribed by
Juniper in the Certificate Recertification page on
their website.
Taking an advanced exam or passing a higher-level
course will automatically renew all lower-level
certifications in the same track for three more years.
Juniper Certification Salary and
Career Information
According to Payscale.com, the average salary for a
JNCIA Network Engineer is $79,095, while a Senior
Network Engineer with this certification can make
$102,794. The average JNCIA salary is $83,000. A JNCIS
can make a bit more: $80,668 as a Network Engineer
and $111,758 for a Senior Network Engineer. The
average JNCIS salary
is $98,000. An entry-level Juniper-certified engineer
might make about 10% more than a Cisco-trained
colleague. But that advantage shrinks to about 5%
at the senior level. What is noteworthy is that both
Juniper and Cisco engineers take in a pretty good
salary at the Associate level. And the real kicker
is experience, which can result in more than 70%
additional income over time.
A “JNCIA” search on Monster.com yielded only 151 jobs,
while a search on the keyword “CCNA” yielded 4,290
results. While it’s true that there are a lot more Cisco
opportunities, job seekers are also competing with
a much larger pool of qualified candidates. A Juniper
certification will set you apart in the marketplace.
It may be apples and oranges trying to compare the
two IT certifications in terms of financial possibilities.
Good engineers tend to gravitate to good contracts
with whatever credentials they have managed to
muster. What’s clear is that getting certified can not
only increase your knowledge and skills, it may very
well tip the scales in your favor when your resume is on
the table.
Juniper once offered a Juniper Certification Fast Track,
but that now appears to be discontinued. There are
some remnants of discussion about it on the internet,
but references to it on the company’s website seem to
have disappeared.
Juniper • 63
Juniper Certification Training
CBT Nuggets offers a variety of Juniper training:
• Juniper JNCIA-Junos (JN0-102)
• Juniper JNCIS-ENT (JN0-343) - Layer 2
• Juniper JNCIS-ENT (JN0-343) - Layer 2 Security
• Juniper JNCIS-ENT (JN0-343) - OSPF
• Juniper JNCIS-ENT (JN0-343) - BGP
• Juniper JNCIS-ENT (JN0-343) - High Availability
• Juniper JNCIS-ENT (JN0-343) - IS-IS
• Juniper JNCIS-ENT (JN0-343) - Protocol
Independent Routing Tunnels
In addition to quality, entertaining video training
created by expert-level trainers, CBT Nuggets provides
everything a learner needs to study for Juniper
certification exams — virtual labs, supplemental files,
practice exams, and access to a robust
Learner Community.
CBT Nuggets learners should also take advantage of
the Kaplan® IT Training Practice Exams included with
a subscription to CBT Nuggets. Practice exams, taken
timed or untimed, provide a good baseline for learners
to test their knowledge. Additionally, Kaplan® IT
Training Practice Exams evaluate a learner’s strengths
and weaknesses, so they know where to focus their
attention while studying.
Being successful taking Juniper certification exams
requires quality instruction, hands-on experience, and
practice with the exam itself. CBT Nuggets provides
every element a learner needs to pass a Juniper
certification exam.

All CBT Nuggets Juniper training either provides

learners with custom virtual labs or supplemental
files to learn technical concepts alongside the video
training. Virtual labs were designed by experts to
help learners gain hands-on experience in a sandbox
environment. NuggetLab supplemental files include
practice commands, configuration files, and network
diagrams — everything a learner needs to study for a
Juniper certification exam.

© 2019 CBT Nuggets. Version 1.0.

 NetApp
Certifications

NetApp data storage technologies fit hand-in-glove with some of the most advanced
cloud service platforms on the market, including Kubernetes, Oracle, SAP, and OpenStack.
NetApp software includes its ONTAP data management software and its OnCommand
network monitoring and management system.

The NetApp certification system includes four levels of certification, designed to take
learners’ skills from beginner to expert:

• Associate
• Professional
• Specialist
• Expert
NetApp Associate-Level
Certification
NetApp associate-level certifications validate the
general and NetApp-specific skills entry-level IT
professionals will learn in their first year on the job.
Most vendors recommend hands-on experience
with a technology prior to attempting an exam
— NetApp is no different.
NetApp offers two associate-level exams:
• NetApp Certified Storage Associate
– Hybrid Cloud (NCSA-HC)
• NetApp Certified Technology Associate (NCTA)
NetApp has three specialization tracks: Data, Hybrid
Cloud, and Converged Instructure. The NetApp
Certified Technology Associate (NCTA) is viewed as an
entry-level exam for all three tracks — although it is not
specifically stated as a prerequisite for
higher-level exams.
NETAPP ASSOCIATE
NetApp Certified Technology
Associate (NCTA)
The NetApp Certified Technology Associate
certification is designed for IT professionals who want
an introduction to the NetApp platform and associated
technologies. The NCTA exam is the lowest level in the
NetApp certification path.
The NetApp Certified Technology Associate exam
validates a candidate’s understanding of general and
NetApp-specific storage topics, including:
• Cloud Computing
• ONTAP Fundamentals
• Cloud Data Services Fundamentals
• OnCommand Insight Fundamentals
• SaaS Backup for MS Office365
• Insight Sessions
Required exam: Earning the NCTA certification requires
passing one exam — the NetApp Certified Technology
Associate (NS0-002) exam.
Prerequisites: None.
Recommended experience: NetApp recommends
hands-on experience with NetApp portfolio, cloud data
services and NetApp’s proprietary operating system
ONTAP, as well as the management tool OnCommand
prior to attempting the NCSA-HC exam.
NetApp • 66
NETAPP ASSOCIATE

NetApp Certified Storage Associate

– Hybrid Cloud (NCSA-HC)

The NetApp Certified Storage Associate – Hybrid Cloud

certification is designed for IT professionals with
experience using NetApp storage products and services
for the hybrid cloud. The NetApp Certified Storage
Associate – HC validates a candidate’s understanding of
storage and data management topics, including:

• Storage Fundamentals
• NetApp Products
• Data ONTAP 8.0 7-Mode Fundamentals
• Basic NetApp Configuration and
Administration tasks
• Basics of SAN
• Basics of Virtualization
• CIFS administration tasks
• NFS administration tasks
• An introduction to Cluster-Mode for
7-Mode Administrators

Required exam: Earning the NCSA-HC certification

requires passing one exam — the NetApp Certified
Storage Associate – Hybrid Cloud (NS0-146) exam.
Prerequisites: None.
Recommended experience: NetApp recommends
hands-on experience with NetApp portfolio, ONTAP,
and OnCommand fundamentals prior to attempting the
NCSA-HC exam.

NetApp • 67
NetApp Professional-Level
Certifications
Professional-level certifications represent a step up in
NetApp expertise and experience. NetApp offers three
professional-level certifications:
• NetApp Certified Data Administrator (NCDA)
• NetApp Certified Storage Installation
Engineer (NCSIE)
• NetApp Certified Support Engineer (NCSE)
NETAPP PROFESSIONAL
NetApp Certified Data Administrator,
ONTAP (NCDA)
The NetApp Certified Data Administrator certification
is designed for IT professionals with experience on
NetApp’s proprietary operating system, ONTAP®.
The NCDA exam validates a candidate’s understanding
of general and NetApp-specific topics, including:
• NetApp Storage Architecture
• Core Clustered Data ONTAP
• High Availability
• NAS and SAN Protocols and Solutions
• Network Concepts and Components
• Storage Implementation and Configuration
• Security Concepts and Strategies
• Data Protection Operations
Required exam: Earning the NCDA certification
requires passing one exam — the NetApp Certified Data
Administrator, ONTAP (NS0-160) exam.
Prerequisites: None.
Recommended experience: NetApp recommends 6 to
12 months experience administering, implementing,
and troubleshooting clustered Data ONTAP features
prior to attempting the NCDA exam.
NetApp • 68
NETAPP PROFESSIONAL
NetApp Certified Storage Installation
Engineer, ONTAP (NCSIE)
The NetApp Certified Storage Installation Engineer,
ONTAP certification is designed for IT professionals
with experience on NetApps proprietary operating
system, ONTAP, and an interest in more of a
hands-on approach.
The NCSIE exam validates a candidate’s understanding
of general and NetApp-specific topics, including:
• Basic Installation Topics and Tools
• ONTAP Concepts
• ONTAP Networking
• ONTAP Switches
• ONTAP Configuration and Troubleshooting
• Customer Handoff
Required exam: Earning the NCSIE certification
requires passing one exam — the NetApp Certified
Storage Installation Engineer, ONTAP (NSO-182) exam.
Prerequisites: While there are no prerequisite exams,
NetApp recommends candidates earn the
NCDA certification.
Recommended experience: NetApp recommends 6 to
12 months experience administering, implementing,
and troubleshooting clustered Data ONTAP features
prior to attempting the NCSIE exam.
NETAPP PROFESSIONAL
NetApp Certified Support
Engineer (NCSE)
The NetApp Certified Support Engineer certification
is designed for IT professionals with significant
experience on the NetApp platform.
The NCSE exam validates a candidate’s understanding
of general and NetApp-specific topics:
• ONTAP Fundamentals
• Platforms and Storage
• Configuration and Troubleshooting
• Performance Analysis
• NetApp Data Protection and
Management Software
Required exam: Earning the NCSE certification requires
passing one exam — the NetApp Certified Support
Engineer (NSO-193) exam.
Prerequisites: None.
Recommended experience: NetApp recommends 6
to 12 months experience with performance analysis,
troubleshooting, and data protection on NetApp
solutions prior to attempting the NCSE exam.
NetApp • 69
NetApp Specialist-Level
Certifications
NetApp specialist-level exams cover troubleshooting,
performance analysis, data protection, and storage
configuration. The Specialist level is the third of four
levels in the NetApp certification path. NetApp offers
five specialist-level certifications:
• NetApp Certified Implementation Engineer
— SAN Specialist (NCIE-SAN), ONTAP
• NetApp Certified Implementation Engineer
— Data Protection Specialist (NCIE-DP)
• NetApp Certified Implementation Engineer
— SAN Specialist (NCIE-SAN), E-Series
• NetApp Certified Support Engineer
— ONTAP Specialist (NCSE)
• Cisco and NetApp FlexPod Design
NETAPP SPECIALIST
NetApp Certified Implementation
Engineer—SAN Specialist,
ONTAP (NCIE-SAN)
The NetApp Certified Implementation Engineer—SAN
Specialist certification is designed for IT professionals
with significant experience implementing the NetApp
SAN solution from start to finish.
The NCIE-SAN Specialist, ONTAP exam validates
a candidate’s understanding of NetApp-specific
configuration and troubleshooting topics, including:
• ONTAP SAN Solution Assessment
• ONTAP SAN Planning
• ONTAP SAN Implementation and Configuration
• ONTAP SAN implementation Testing
and Troubleshooting
Required exam: Earning the NCIE-SAN Specialist,
ONTAP certification requires passing one exam — the
NetApp Certified Implementation Engineer—SAN (NS0-
509) exam.
Prerequisites: Prior to attempting this certification,
candidates must earn the NCDA certification.
Recommended experience: NetApp recommends 6 to
12 months experience planning, implementing, and
validating end-to-end SAN solutions for customers in
FC and iSCSI environments prior to attempting the
NCIE-SAN Specialist, ONTAP exam.
NetApp • 70
NETAPP SPECIALIST
NetApp Certified Implementation
Engineer—Data Protection Specialist
(NCIE-DP)
The NetApp Certified Implementation Engineer—Data
Protection Specialist (NCIE-DP) is designed for IT
professionals with significant experience implementing
the NetApp SAN solution from start to finish. The
NCIE-DP exam validates a candidate’s understanding of
NetApp-specific data protection and implementation
topics, including:
• ONTAP Replication Technology
• Planning ONTAP Data Protection Implementation
• Configuring Data Protection Software
• Operating Data Protection Deployments
• Best Practices
Required exam: Earning the NCIE-DP certification
requires passing one exam — the NetApp Certified
Implementation Engineer—Data Protection
(NS0-525) exam.
Prerequisites: Prior to attempting this certification,
candidates must earn the NCDA certification.
Recommended experience: NetApp recommends 6 to
12 months experience planning and implementing data
protection solutions, configuring backup and recovery
software, and operating backup and disaster recovery
deployments prior to attempting the NCIE-SAN exam.
NETAPP SPECIALIST
NetApp Certified Implementation
Engineer—SAN Specialist,
E-Series (NCIE-SAN)
The NetApp Certified Implementation Engineer—SAN
Specialist, E-Series certification is designed for IT
professionals with significant experience with the
NetApp E-Series storage solution. The E-Series exam
validates a candidate’s understanding of advanced
general networking and NetApp-specific topics:
• Storage Configuration
• Documentation
• Hardware
• Host Side
• Management
• Toolbox
• SAN
• Troubleshooting
Required exam: Earning the NCIE-SAN, E-Series
certification requires passing one exam — the NetApp
Certified Implementation Engineer—SAN, E-Series
(NS0-515) exam.
Prerequisites: NetApp recommends candidates earn
the NCDA certification.
Recommended experience: NetApp recommends 6 to
12 months experience with physical and logical storage
requirements, setting up alerts and notifications, and
configuring hosts for multipathing prior to attempting
the NCIE-SAN, E-Series exam.
NetApp • 71
NETAPP SPECIALIST

NetApp Certified Support Engineer

- ONTAP Specialist (NCSE)

The NetApp Certified Support Engineer - ONTAP

Specialist certification is designed for IT professionals
with significant experience with the NetApp Data
ONTAP storage solutions.

The NCSE - ONTAP Specialist exam validates a

candidate’s understanding of NetApp-specific
storage topics:

• Data ONTAP
• Platform and Storage
• Networking and Protocols
• Performance

Required exam: Earning the NCSE - ONTAP Specialist

certification requires passing one exam — the NetApp
Certified Support Engineer - ONTAP (NS0-591) exam.
Prerequisites: None.
Recommended experience: NetApp recommends 6 to
12 months experience troubleshooting, analysis and
resolution of NetApp Data ONTAP Storage Systems
prior to attempting the NCSE - ONTAP Specialist exam.

NetApp • 72
NETAPP SPECIALIST
NetApp Certified Hybrid Cloud
Administrator (NCHC)
The NetApp Certified Hybrid Cloud Administrator
certification is designed for IT professionals with
significant experience with NetApp cloud solutions
such as Cloud Volumes Service, Cloud Volumes
ONTAP, Cloud Manager, Cloud Sync, SaaS Backup,
StorageGRID, and NetApp HCI.
The NCHC Administrator exam validates a candidate’s
understanding of NetApp-specific storage
topics, including:
• Cloud Manager Administration
• Cloud Volumes ONTAP Administration
• Cloud Volumes Services Administration
• Cloud Connected Platforms
• Cloud Data Security
• Data Protection
• Public Cloud Prerequisites
Required exam: Earning the NCHC Administrator
certification requires passing one exam — the NetApp
Certified Hybrid Cloud Administrator (NS0-302) exam.
Prerequisites: None.
Recommended experience: NetApp recommends 6
to 12 months experience administering NetApp data
management solutions in the cloud prior to attempting
the NCHC Administrator exam.
NETAPP SPECIALIST
Cisco and NetApp FlexPod Design
Specialist (FlexPod Design)
The Cisco and NetApp FlexPod Design Specialist
certification is designed for IT professionals who have
experience with NetApp FlexPod and its
associated hardware.
The FlexPod Design exam validates a candidate’s
understanding of these converged infrastructure topics:
• Hardware components
• Configuration
• High Availability
• SAN Boot
• UCS Manager
Required exam: Earning the FlexPod Design
certification requires passing one exam — the Cisco and
NetApp FlexPod Design (NS0-173) exam.
Prerequisites: None.
Recommended experience: NetApp recommends
6 to 12 months experience working with converged
FlexPod and Cisco infrastructure prior to attempting
the FlexPod Design exam.
NetApp • 73
NETAPP SPECIALIST
Cisco and NetApp FlexPod
Implementation and Administration
Specialist (FlexPod Administration)
The Cisco and NetApp FlexPod Implementation and
Administration Specialist certification is designed for
IT professionals with experience using NetApp FlexPod
and its associated hardware.
The FlexPod Administration exam validates a
candidate’s understanding of these converged
infrastructure topics:
• Hardware components
• Configuration
• High Availability
• SAN Boot
• UCS Manager
Required exam: Earning the FlexPod Administration
certification requires passing one exam — the Cisco and
NetApp FlexPod Implementation and Administration
(NS0-174) exam.
Prerequisites: None.
Recommended experience: NetApp recommends
6 to 12 months experience working with converged
FlexPod and Cisco infrastructure prior to attempting
the FlexPod Administration exam.
NetApp Expert-Level
Certifications
The NetApp Certified Hybrid Cloud Architect
certification is the only exam within the highest of
four tiers in the NetApp certification path. Candidates
should not only be fully versed in NetApp core
knowledge, they should know how to take the
customer from planning stages to full production.
NETAPP EXPERT
NetApp Certified Hybrid Cloud
Architect (NCHC Architect)
The NetApp Certified Hybrid Cloud Architect
certification is designed for IT professionals who
analyze customer business requirements and
architect NetApp data fabric solutions in hybrid cloud
environments. The NCHC Architect exam validates a
candidate’s understanding of both general and NetApp-
specific business and technical topics:
• Core Knowledge
• Requirements Identification
• Business Analysis
• Business Translation
• Solution Design
• Solution Validation
NetApp • 74
 • Solution Adoption Strategies
• Reporting and Documentation
Required exam: Earning the NCHC Architect
certification requires passing two exams — the NetApp
Certified Hybrid Cloud Architect (NS0-602) exam, and
one of these certifications from major cloud providers:
• AWS Certified Solutions Architect Associate
• GCP Professional Cloud Architect
• Microsoft Azure Architect Technologies (AZ-300)
• Microsoft Azure Architect Design (AZ-301)
Prerequisites: None.
Recommended experience: NetApp recommends at
least 12 months designing solutions for customers and
architecting NetApp data fabric solutions in hybrid
cloud environments prior to attempting the NCHC
Architect exam.
How Much Does It Cost to Get
NetApp Certified?
NetApp certification exams are proctored by the testing
company Pearson VUE. NetApp certification costs much
less than many other IT certifications we’ve discussed.
According to current Pearson prices, certifications cost
either $150 or $300. The only two exams that cost $300
are those that deal with FlexPod technology.
NetApp Recertification
and Renewal
NetApp University certifications are valid for two years
from the date granted. That may seem clear, but the
company’s “Expiration Period Policy” seems to muddy
the waters. In certain cases, certification may be active
for 27 months.
For instance, if a candidate with an active Professional-
level certification renews their credential by passing a
Specialist-level certification, then the new renewal date
will be the date of the Specialist-level certification.
NetApp • 75
NetApp Certification Salary
and Career Information
Payscale.com puts an average salary for someone with
a NetApp Certified Data Management Administrator
(NCDA) at $101,000. Someone with the NetApp
Certified Storage Associate certification draws an
average salary of $79,000. So, there appears to be a big
jump between Associate-level and Professional-level
certifications. Here’s a list of jobs with their salaries for
NCDA according to Payscale (in USD):
• Senior Storage Engineer: $113,111
• Storage Engineer: $98,852
• Storage Area Network (SAN) Systems
Administrator: $98,074
• Systems Administrator: $74,000
• Professional Services Engineer: $100,443
• Senior Systems Engineer: $104,432
• Technical Support Engineer: $66,308
Storage engineers in general seem to do pretty
well. Payscale puts the average salary for storage
engineers at $88,935. In terms of salary potential,
NetApp looks like a pretty good choice. The keyword
“NetApp” yielded 2,227 results on Indeed.com. If
you are interested in, or enjoy working with, storage
technology and are looking for lots of opportunities,
NetApp certification may be the right fit for you.
NetApp Certification Training
CBT Nuggets offers the following NetApp training:
• NetApp Certified Storage Associate (NCSA)
In addition to quality, entertaining video training
created by expert-level trainers, CBT Nuggets provides
everything a learner needs to study for IT certification
exams, including virtual labs, supplemental files,
practice exams, and access to a robust Learner
Community.
All CBT Nuggets training provides learners with custom
virtual labs or supplemental files to learn technical
concepts alongside the video training. Virtual labs
were designed by experts to help learners gain hands-
on experience in a sandbox environment. NuggetLab
supplemental files include practice commands,
configuration files, and network diagrams — everything
a learner needs to study for a certification exam.
CBT Nuggets learners should also take advantage
of the Kaplan® IT Training Practice Exams included
with a subscription to CBT Nuggets. Practice exams
can either be taken timed or untimed, and provide
a good baseline for learners to test their knowledge.
Additionally, Kaplan® IT Training Practice Exams
evaluate a learner’s strengths and weaknesses, so they
know where to focus their attention while studying.
© 2019 CBT Nuggets. Version 1.0.
 F5
Certifications
F5 Networks is well-known for their software- and appliance-based cloud and security
application services solutions, based on the Company’s BIG-IP product suite. F5’s flagship
solution is their BIG-IP Local Traffic Manager.

Although they are not a dominant networking player like Cisco, F5 does have a solid
position within enterprise customers. They claim that 49 of the Fortune 50 companies use
F5 solutions. The company also enjoys a complementary relationship with a number of
the larger technology companies including Amazon Web Services, Cisco, Microsoft Azure,
and VMware.
F5 Certifications
Like many IT vendors, F5 is a firm supporter of
certification programs as a way to ensure that
customers and channel partners have access to a
pool of F5 certified IT professionals with the assured
proficiency to design, build, deploy and manage
F5-based solutions.
The F5 certification program has eight certifications in
four tracks related to different job roles:
• Administrator
• Channel Sales
• Certified Technical Specialist
• Certified Solutions Expert
F5 ADMINISTRATOR
F5 Certified BIG-IP
Administrator (F5-CA)
The F5 Certified BIG-IP Administrator certification is
designed for IT professionals who handle day-to-day
management of an F5 Application Delivery Network
(ADN). The F5-CA serves as the foundation for all of F5’s
higher-level technical certifications, and validates a
candidate’s understanding of these topics and skills:
•  Troubleshooting basic hardware issues
•  Troubleshooting basic performance issues
•  Troubleshooting basic device management
•  Opening a support ticket with F5
•  Identifying and reporting current device status
•  Maintaining system configuration
•  Managing existing system and app services
Required exam: Earning the F5 Certified BIG-IP
Administrator (F5-CA) requires passing two exams —
Application Delivery Fundamentals (Exam 101) and
TMOS Administration (Exam 201).
Prerequisites: Prior to attempting Exam 201,
candidates must pass Exam 101.
Required experience: F5 recommends that candidates
have a basic understanding of network fundamentals,
protocols, and common traffic management concepts,
and must be capable of performing day-to-day
operations on TMOS-based devices.
CHANNEL SALES
F5 • 78
F5 CHANNEL SALES

F5 Certified Technical Professional,

Sales (F5-CTP, Sales)

The F5 Certified Technical Professional, Sales is

designed for sales engineers who work for F5 channel
partners — such as resellers and solution providers.
The F5-CTP, Sales certification validates a candidate’s
understanding of these F5 topics and skills:

•  Discovery
•  Education
•  Proposal
•  Supporting the close
•  Ongoing support/maintenance

Required exam: Earning the F5 Certified Technical

Professional, Sales certification requires passing one
exam — Pre-Sales Fundamentals (Exam 202).
Prerequisites: Prior to attempting this certification,
candidates must have either passed Application
Delivery Fundamentals (Exam 101) or earned the F5
Certified BIG-IP Administrator (F5-CA) certification.
Required experience: F5 recommends that candidates
have a proven track record of selling F5 solutions.

F5 • 79
F5 Certified Technical
Specialist Certifications
The F5 Certified Technical Specialist certification is
designed for networking professionals who design,
implement, maintain, and troubleshoot enterprise
application networks that are built upon advanced F5
product features. Candidates may pursue one or more
of four F5-CTS specialization tracks:
•  F5-CTS BIG-IP Local Traffic Manager
•  F5-CTS BIG-IP Domain Name System
•  F5-CTS BIG-IP Application Security Manager
•  F5-CTS BIG-IP Access Policy Manager
The first two F5-CTS certs (BIG-IP LTM and BIG-IP
DNS) are prerequisites to the expert-level F5 Certified
Solutions Expert, Cloud certification, while all four are
required for the F5 Certified Solutions Expert,
Security certification.
F5 CERTIFIED TECHNICAL SPECIALIST
F5-CTS BIG-IP Local Traffic
Manager (LTM)
The F5-CTS BIG-IP Local Traffic Manager certification
is designed for networking professionals performing
day-to-day operations and basic troubleshooting of
TMOS-based devices installed in various application
environments. The F5 LTM certification validates a
candidate’s understanding of these topics and skills:
•  Architecting an application
•  Administering and securing LTM devices
•  Deploying applications
•  Troubleshooting basic virtual server
connectivity issues
•  Troubleshooting basic hardware issues
•  Troubleshooting basic performance issues
Required exams: Earning the F5-CTS LTM certification
requires passing two exams — BIG-IP LTM Specialist:
Architect, Setup, and Deploy (Exam 301a) and BIG-IP
LTM Specialist: Maintain and Troubleshoot
(Exam 301b).
Prerequisites: Prior to attempting this certification,
candidates must earn the F5 Certified BIG-IP
Administrator certification.
Required experience: F5 recommends that candidates
have practical experience designing, implementing,
maintaining, optimizing, and troubleshooting
advanced BIG-IP LTM product features.
F5 • 80
F5 CERTIFIED TECHNICAL SPECIALIST
F5-CTS BIG-IP Domain Name
System (DNS)
The F5-CTS BIG-IP Domain Name System certification
is designed for networking professionals who deliver
scalable intelligent DNS/Global Server Load Balancing
(GSLB) infrastructure across multiple data centers.
The F5 DNS certification validates a candidate’s
understanding of these topics and skills:
•  Global Traffic Manager Introduction
•  Deployment
•  Operations and Troubleshooting
Required exam: Earning the F5-CTS DNS certification
requires passing one exam — BIG-IP LTM Specialist:
Architect, Setup, and Deploy (Exam 302).
Prerequisites: Prior to attempting this certification,
candidates must earn the F5 Certified BIG-IP
Administrator certification.
Required experience: F5 recommends that candidates
have at least one year of experience as BIG-IP DNS
administrator with the ability to deploy and test
configurations, and troubleshoot and remedy
common misconfigurations.
F5 CERTIFIED TECHNICAL SPECIALIST
F5-CTS BIG-IP Application Security
Manager (ASM)
The F5-CTS BIG-IP Application Security Manager
certification is designed for networking professionals
who design, implement, maintain, and troubleshoot
the full functionality of BIG-IP ASM product features to
assure the security of an application delivery network.
The F5 ASM certification validates a candidate’s
understanding of these topics and skills:
•  Architecture/design and policy creation
•  Policy maintenance and optimization
•  Reviewing event logs and mitigating attacks
•  Troubleshooting
Required exam: Earning the F5-CTS ASM certification
requires passing one exam — BIG-IP ASM Specialist
(Exam 303).
Prerequisites: Prior to attempting this certification,
candidates must earn the F5 Certified BIG-IP
Administrator certification.
Required experience: F5 recommends that candidates
have at least one year of experience as a senior
network, system, or application security engineer
delivering highly-available, secure, and scalable
applications with ASM technology.
F5 • 81
F5 CERTIFIED TECHNICAL SPECIALIST

F5-CTS BIG-IP Access Policy

Manager (APM)

The F5-CTS BIG-IP Access Policy Manager certification

is designed for networking professionals who manage
the day-to-day operation of application delivery
networks based on F5 Networks technology. The F5
APM certification validates a candidate’s understanding
of these topics and skills:

•  Authentication, authorization, and accounting

(AAA), single sign-on (SSO), federated
authorization, and mobile device management
•  Network and application access
•  Visual policy editor
•  Deploying and maintaining iApps
•  Administering and troubleshooting BIG-IP APM
•  Security

Required exam: Earning the F5-CTS ASM certification

requires passing one exam — BIG-IP APM Specialist
(Exam 304).
Prerequisites: Prior to attempting this certification,
candidates must earn the F5 Certified BIG-IP
Administrator certification.
Required experience: F5 recommends that candidates
be proficient in configuring, implementing,
troubleshooting, and maintaining BIG-IP APM in
various application environments.

F5 • 82
Certified Solution
Expert Certifications
The F5 Certified Solution Expert (F5-CSE) certifications
are the highest level of the F5 certification path.
An F5-CSE certification validates that the holder
is highly proficient in architecting, designing, and
troubleshooting complex solutions incorporating both
F5 and non-F5 products.
Candidates for this expert-level credential can choose
between two tracks:
•  F5 Certified Solution Expert, Cloud
(F5-CSE, Cloud)
•  F5 Certified Solution Expert, Security
(F5-CSE, Security)
F5 CERTIFIED SOLUTION EXPERT
F5 Certified Solution Expert, Cloud
(F5-CSE, Cloud)
The F5-Certified Solution Expert, Cloud certification is
designed for network and application architects who
assess and determine business requirements and then
satisfy those requirements with a F5 cloud solutions.
The F5-CSE, Cloud certification validates a candidate’s
understanding of these topics and skills:
•  Foundational cloud concepts
•  Cloud infrastructure design
•  Cloud migration
•  Cloud deployment
•  Cloud orchestration and automation
Required exam: Earning the F5-CTS ASM certification
requires passing one exam — Cloud Solutions
(Exam 402).
Prerequisites: Prior to attempting this certification,
candidates must earn two certifications — F5-CTS BIG-
IP LTM and F5-CTS BIG-IP DNS.
Required experience: F5 recommends that candidates
have experience integrating cloud infrastructure with
other technologies into optimal cloud solutions.
F5 • 83
F5 CERTIFIED SOLUTION EXPERT Required experience: F5 recommends that candidates
F5 Certified Solution Expert, Security have practical experience designing security solutions
(F5-CSE, Security) leveraging F5’s BIG-IP, BIG-IQ, IP Intelligence (IPI),
WebSafe, and MobileSafe technologies.
The F5-CSE, Security certification is designed for
security professionals who assess and determine the
cybersecurity requirements of the business and then
satisfy those requirements with technical security
solutions. The F5-CSE, Security certification validates a
candidate’s understanding of these topics and skills:

•  Assessing requirements
•  Designing a unified solution that includes
multiple security modules
•  Building security solution
•  Maintaining security solutions
•  Identifying, diagnosing, and resolving security
solutions issues

Required exam: Earning the F5-CSE, Security

certification requires passing one exam — Security
Solutions (Exam 401).
Prerequisites: Prior to attempting this certification,
candidates must pass all four F5-CTS BIG-IP
specialization certifications:
•  F5-CTS BIG-IP Local Traffic Manager (LTM)
•  F5-CTS BIG-IP Domain Name System (DNS)
•  F5-CTS BIG-IP Application Security Manager (ASM)
•  F5-CTS BIG-IP Access Policy Manager (APM)

F5 • 84
How Much Does It Cost
to Get F5 Certified?
With each exam costing $135, F5 certification cost
is based on the number of exams required to earn
a certification. For instance, the F5 Certified BIG-IP
Administrator (F5-CA) requires two exams at a total
cost of $270. F5 Certified Technical Specialist (F5-CTS)
specialties cost either $406 or $540. The F5 Certified
Solution Expert (F5-CSE) certifications cost $912 for
Cloud and $1,080 for Security.
F5 Recertification
and Renewal
F5 certifications are valid for two years from the
date that certification was achieved. F5 certification
expiration is based on the last, highest certification
that the F5-certified individual has achieved. For
example, someone who holds the F5-CTS BIG-IP LTM
cert will have previously earned the prerequisite F5
Certified BIG-IP Administrator (F5-CA) credential.
Their certification expiration is driven by the date they
earned the F5-CTS LTM.
In order to renew their F5 certification, the F5-certified
individual is only required to retake the last exam in the
highest certification they achieved.
F5-certified individuals can go to the F5 candidate
portal to determine their certification dates and
status. In addition, for the three months prior to their
certification expiration date, F5-certified individuals
will receive a monthly email that alerts them to register
for a recertification exam at the Pearson VUE website.
Individuals who let their certification lapse are no
longer considered certified. However, there is a 30-
day grace period to take the recertification exam and
reactivate an certification after the expiration date.
Beyond this 30-day grace period, the certification
expires completely, and the individual must start the
entire F5 certification process over from scratch. At this
point, the person is not F5 certified and is not eligible
for higher-level exams, nor any benefits tied to
F5 certification.
F5 Certification Salary
and Career Information
A search of the Indeed.com for IT jobs requiring F5
experience confirms the earlier comment that F5
technology is typically viewed as complementary to
products from other vendors, especially Cisco.
We found over 4,700 job openings that specified F5
experience and/or certifications. While some of these
openings were clearly for F5-specific roles (e.g. Senior
F5 Engineer, F5 Systems Engineer, and F5 Network
F5 • 85
Engineer), the clear majority were for generic titles. F5 Certification Training
In both the general and F5-specific job title openings,
Cisco certifications — CCNA, CCNP, CCIE — were CBT Nuggets offers the following F5 training:
frequently preferred or required. The F5 Certified BIG-
IP Administrator and F5 Certified Technology Specialist • F5 BIG-IP Local Traffic Manager
were the F5 certifications cited most often. The generic
title search indicated annual salaries ranging from CBT Nuggets’ F5 BIG-IP Local Traffic Manager training
$80,000 to $125,000, with an average of almost $95,000. class prepares students for the two exams that must be
When we drill down to the subset of F5-specific titles, passed to become an F5 Certified BIG-IP Administrator
where F5 certification is preferred or required, the (F5-CA).
annual F5 certification salary ranges from $95,900
to $117,400, with an average of over $103,000. This Good luck to you as you start on your F5 certification
suggests that employers are willing to pay an F5 path. Our course offerings do change from time-to-time
certification salary premium of $8,000 over the general as we support the F5 certification roadmap, so be sure
job titles. to check CBT Nuggets for new and updated on-line
courses that are relevant to your personal F5
A take-away from this is that a laser-focus on the career journey.
fewer F5-specific jobs could deliver a premium F5
certification salary. However, a combined Cisco
and F5 certification path might be a better personal
development strategy, offering a larger pool of well-
paying job opportunities.

© 2019 CBT Nuggets. Version 1.0.

 CompTIA
Certifications
CompTIA — formally called the Computing Technology Industry Association — is a non-
profit organization with membership comprising more than 200 leading IT companies and
2,000 member companies.

As an IT industry trade organization, a CompTIA goal is to help ensure that there is a

strong pool of IT professionals with the skills required to drive the adoption and use of
information technologies in enterprises worldwide. CompTIA is the leading provider of
vendor-neutral training and certification programs for those IT professionals, having
issued more than two million certificates to date.

CompTIA certificate programs have been established for IT support, networking, security,
open-source (Linux) development, and cloud. In addition to technical certifications,
additional professional CompTIA certificate programs are available for business
professionals, non-IT staff, and technical trainers.
What is CompTIA CompTIA Core Certifications
Certification?
CompTIA Core Certifications are for beginners and
CompTIA provides vendor-neutral certifications that entry-level IT professionals. There are four CompTIA
validate candidates have achieved a specific level of Core Certifications:
expertise that can be applied universally, regardless of
vendor. For example, someone with CompTIA Network+ • CompTIA IT Fundamentals+
certification should apply their knowledge and skills to • CompTIA A+
Cisco or Juniper networking technologies • CompTIA Network+
— at a basic level. • CompTIA Security+

The CompTIA certification program encompasses certs CompTIA A+, CompTIA Network+, and CompTIA
in four categories: Security+ are all DoD 8570.01-M
-approved certifications.
• CORE

• INFRASTRUCTURE

• CYBERSECURITY

• PROFESSIONAL

CompTIA • 88
COMPTIA CORE
CompTIA IT Fundamentals+
CompTIA IT Fundamentals+ is designed for individuals
who want to begin exploring a career in IT. It’s also
a good option for business, sales, and marketing
professionals who work closely with systems and
information technology.
The IT Fundamentals+ certification validates a
candidate’s understanding of these topics:
• Computing
• IT infrastructure
• Software development
• Database use
Required exam: Earning the CompTIA IT
Fundamentals+ Certification requires passing one exam
— CompTIA IT Fundamentals+ (FC0-U61).
Prerequisites: None.
Recommended experience: CompTIA recommends this
exam for advanced end users or individuals thinking
about entering the IT field. That means you should feel
comfortable using computer systems and networks.
COMPTIA CORE
CompTIA A+
The CompTIA A+ certification is designed for people
who want to build a career in IT technical support and
operations. The CompTIA A+ certification validates a
candidate’s ability to:
• Identify, use, and connect hardware components
• Install and support Windows OS
• Troubleshoot PC and mobile device issues
• Explain types of networks and connections
• Troubleshoot device and network issues
• Identify and protect against security
vulnerabilities
• Install & configure laptops and other
mobile devices
• Understand Mac OS, Linux and mobile OS
Required exams: Earning the CompTIA A+ certification
requires passing two exams — CompTIA A+ 220-1001
and CompTIA A+ 220-1002.
Prerequisites: None.
Recommended experience: While there are no specific
prerequisites for the exams, CompTIA recommends that
candidates have 9 to 12 months hands-on experience
with various mobile, desktop, and networking tasks.
CompTIA • 89
COMPTIA CORE
CompTIA Network+
The CompTIA Network+ certification is designed for IT
professionals with entry-level experience. Network+
is a common stepping stone common to move into
network administration. Given that almost everything
is networked, networking experience is a valuable
asset for any IT professional. The CompTIA Network+
certification validates the candidate’s ability to:
• Implement networking concepts
• Determine the appropriate cabling, device
and storage technologies
• Use best practices to manage a network
• Summarize physical security, and common wired
and wireless attacks
• Explain the network troubleshooting
methodology
Required exam: Earning the CompTIA Network+
certification requires passing one exam — CompTIA
Network+ (N10-007).
Prerequisites: None.
Recommended experience: While are no specific
prerequisites for the exam, CompTIA recommends that
candidates have obtained CompTIA A+ certification and
at least 9 to 12 months of networking experience.
COMPTIA CORE
CompTIA Security+
The CompTIA Security+ certification validates
the baseline cybersecurity skills required of IT
administrators and security professionals. The
CompTIA Security+ certification validates the
candidate’s ability to:
• Detect various types of threats, attacks and
vulnerability
• Install, configure, and deploy network security
components
• Implement a secure network architecture
• Install, configure and manage identity
and access services
• Implement risk management procedures to
mitigate business impact
• Install and configure wireless security settings
and implement public key infrastructure
Required exam: Earning the CompTIA Security+
certification requires passing one exam — CompTIA
Security+ (SY0-501).
Prerequisites: None.
Recommended experience: There are no specific
prerequisites for the exam, although CompTIA
recommends that candidates have obtained CompTIA
Network+ certification and two years of experience in
IT administration with a security focus.
CompTIA • 90
CompTIA Cybersecurity
Certifications
CompTIA Cybersecurity certifications make up the
final step of the CompTIA technical certification path.
These certifications are for advanced and expert-level
professionals. There are three certs at this tier:
• CompTIA Cybersecurity Analyst (CySA+)
• CompTIA PenTest+
• CompTIA Advanced Security Practitioner (CASP+)
CompTIA CySA+ and CompTIA CASP+ are both DoD
8570.01-M-approved certifications.
COMPTIA CYBERSECURITY
CompTIA CySA+
The Cybersecurity Analyst (CySA+) certification is
designed for cybersecurity professionals who use
an analytics-based approach to identify and combat
malware and advanced persistent threats (APTs). As
hackers continue to evade traditional signature-based
solutions such as firewalls, the IT security industry is
moving toward an analytics-based approach.
The CompTIA CySA+ certification validates the
candidate’s ability to:
• Implement a vulnerability management process
• Perform data analysis and interpret the results to
identify vulnerabilities, threats and risks
to an organization
• Configure and use threat-detection tools
• Secure and protect applications and systems
within an organization
Required exam: Earning the CompTIA CySA+
certification requires passing one exam — CompTIA
CySA+ (CS0-001).
Prerequisites: None.
Recommended experience: While not required in order
to take the CompTIA CySA+, CompTIA recommends
that candidates either have a CompTIA Network+ or
Security+ certification, or at least three years of hands-
on experience in information security.
CompTIA • 91
COMPTIA CYBERSECURITY
CompTIA PenTest+
The CompTIA PenTest+ certification is designed
for intermediate-level cybersecurity professionals
who are tasked with penetration testing to manage
vulnerabilities on a network. The CompTIA PenTest+
certification validates the candidate’s ability to:
• Plan a comprehensive compliance-based
vulnerability assessment
• Perform a vulnerability scan and
analyze results
• Exploit network, wireless, application, and
RF-based vulnerabilities, summarize physical
security attacks, and perform post-
exploitation techniques
• Conduct information gathering exercises with
various penetration testing tools
• Utilize report-writing and handling best practices
Required exam: Earning the CompTIA PenTest+
certification requires passing one exam — CompTIA
PenTest+ (PT0-001).
Prerequisites: None.
Recommended experience: While not required in
order to take the CompTIA PenTest+ exam, CompTIA
recommends that candidates have CompTIA Network+
or Security+ certification, and at least three years of
hands-on information security or related experience.
CYBERSECURITY CERTIFICATION
CompTIA CASP+
The CompTIA CASP+ certification is designed for expert
cybersecurity professionals who implement security
solutions. While cybersecurity managers identify the
cybersecurity policies and frameworks that need to
be implemented, cybersecurity technical practitioners
implement solutions within those policies
and frameworks. The CompTIA CASP+ certification
validates the candidate’s ability to:
• Analyze security risks and frameworks that come
along with specific industry threats
• Integrate network and security components and
implement security controls
• Implement incident response and recovery
procedures
• Integrate hosts, storage, networks and
applications into a secure enterprise architecture
• Apply research methods to determine industry
trends and their impacts to the enterprise
Required exam: Earning the CompTIA CASP+
certification requires passing one exam — CompTIA
CASP+ (CAS-003).
Prerequisites: None.
Recommended experience: CompTIA recommends
that candidates have at least 10 years of IT
administration experience, including at least five years
of hands-on technical security experience.
CompTIA • 92
CompTIA Cybersecurity
Stackable Certifications
When you complete the set of CompTIA certifications
that represent a particular CompTIA Stackable
Certification, you will be automatically granted the
relevant stackable certification(s).
The CompTIA Cybersecurity Career Pathway is aimed
at IT professionals who choose to specialize in the
field of cybersecurity. There are seven sets of CompTIA
stackable certifications for cybersecurity.
• CompTIA Secure Infrastructure Specialist (CSIS)
• CompTIA Secure Cloud Professional (CSCP)
• CompTIA Security Analytics Professional (CSAP)
• CompTIA Network Vulnerability Assessment
Professional (CNVP)
• CompTIA Network Security Professional (CNSP)
COMPTIA STACKABLE SPECIALIST
CompTIA Secure Infrastructure
Specialist (CSIS)
The CompTIA Secure Infrastructure Specialist stackable
certification is designed for security professionals who
primarily support hardware and software systems.
Required exams: To earn the CSIS stackable
certification, you must earn CompTIA A+, Network+ and
Security+ certifications.
COMPTIA STACKABLE PROFESSIONAL
CompTIA Secure Cloud
Professional (CSCP)
The CompTIA Secure Cloud Professional stackable
certification is designed for security professionals that
primarily work with cloud applications and services.
Required exams: To earn the CSCP stackable
certification, you must pass CompTIA Security+ and
Cloud+ certifications.
COMPTIA STACKABLE PROFESSIONAL
CompTIA Security Analytics
Professional (CSAP)
The CompTIA Security Analytics Professional stackable
certification validates that security professionals can
monitor for security events and enact measures to
protect their network and systems.
Required exams: To earn the CSAP stackable
certification, you must earn the CompTIA Security+ and
CySA+ certifications.
CompTIA • 93
COMPTIA STACKABLE PROFESSIONAL
CompTIA Network Vulnerability
Assessment Professional (CNVP)
The CompTIA Network Vulnerability Assessment
Professional stackable certification validates that
security professionals can scan applications and
systems for vulnerabilities.
Required exams: To earn the CNVP stackable
certification, you must earn the CompTIA Security+ and
PenTest+ certifications.
COMPTIA STACKABLE PROFESSIONAL
CompTIA Network Security
Professional (CNSP)
The CompTIA Network Security Professional stackable
certification validates that security professionals can
monitor networks for threats and vulnerabilities, as
well as actively respond to those threats.
Required exams: To earn the CNSP stackable
certification, you must pass CompTIA Security+,
PenTest+, and CySA+ certifications.
COMPTIA STACKABLE EXPERT
CompTIA Security Analytics
Expert (CSAE)
The CompTIA Security Analytics Expert stackable
certification validates that security professionals can
research and find vulnerabilities through data — and
then engineer solutions.
Required exams: To earn the CSAE stackable
certification, you must earn CompTIA Security+, CySA+,
and CASP certifications.
COMPTIA STACKABLE EXPERT
CompTIA Security Infrastructure
Expert (CSIE)
The CompTIA Security Infrastructure Expert stackable
certification validates that security professionals
can lead and manage every element of security
infrastructure for large, complex organizations.
Required exams: To earn the CSIE stackable
certification, you must earn CompTIA Security+, CySA+,
PenTest+, and CASP certifications.
CompTIA • 94
How Much Does CompTIA
Certification Cost?
CompTIA certification exams range in cost between
$219 and $349, depending on the exam. For CompTIA
A+, you must pass two exams for a total cost of
$438. For CompTIA Security+, the single CompTIA
certification exam costs $339. The cost for the CompTIA
Network+ exam is $319.
How Do I Get a Copy of My
CompTIA Certification?
What happens if you need verification of your CompTIA
certification(s) for a job application, for your resume, or
to submit to a potential client? Through your CompTIA
certification account (login here if you have one)
CompTIA provides two ways to provide proof of
your certs:
• Download a PDF Certificate: You can download a
PDF certificate that contains a URL and verification
code that can be used to authenticate
your certification.
• Create a Transcript: You can create a customized
certification transcript which will be sent by email
to a designated recipient.
CompTIA Recertification
and Renewal
CompTIA certifications earned since 2011 are valid for
three years from the date of original certification. They
must be renewed before their expiration date. CompTIA
recertification and renewal comes under the auspices
of the CompTIA Continuing Education (CE) program.
You must be enrolled in that program to renew
a certification.
There are a number of ways to renew a certification.
You can simply recertify by paying for, and taking,
the most recent version of the relevant CompTIA
certification exam(s). Here are some of the other ways
to renew a CompTIA certification:
• Complete a CompTIA CertMaster CE course.
CertMaster CE e-learning courses are available for
A+, Network+, and Security+. When you complete
the course, you’ll automatically earn Continuing
Education Units (CEU) for the exam in your
CompTIA certification account. CertMaster CE
e-learning courses cost between $129 and $199.
• Earn a higher-level CompTIA certification. If you
earn or renew a qualifying higher-level CompTIA
certification, your existing CompTIA certifications
are renewed.
CompTIA • 95
 • Earn a non-CompTIA IT industry certification.
If you earn or renew a qualifying non-CompTIA
IT industry certification, you’ll earn Continuing
Education Units (CEU) that can apply toward the
renewal requirements for your existing CompTIA
certification. For example, earning a Cisco CCNA
Security cert gives you the 50 CEUs you need for
CompTIA Security+ certification renewal.
• Earn other CEUs. You can earn CEUs to apply
to recertification through a number of different
avenues. These include taking training and higher
education, participating in IT Industry activities,
publishing articles or white papers, or even
submitting relevant work experience.
Is a CompTIA Certification a
Lifetime Certification?
As of January 1, 2011, CompTIA ended lifetime
certifications. CompTIA certifications earned since that
date are valid for three years only and are then subject
to renewal and recertification as described above.
CompTIA A+, CompTIA Network+ or CompTIA Security+
certifications earned before 2011 are considered good-
for-life (GFL) and do not expire. Note that GFL certs are
not valid for CompTIA stackable certifications. If you
want to bring your certification current, you’ll need to
pass the current version of the exam. You’ll then have
two certs: your GFL certification and the new CE one.
CompTIA Certification Salary
and Career Information
PayScale reports the following average salaries
(USD) for employees holding particular
CompTIA certifications:
• CompTIA A+ salary: $59,000
• CompTIA Server+: $63,000
• CompTIA Network+: $64,000
• CompTIA Project+: $67,000
• CompTIA Linux+: $70,000
• CompTIA Security+: $73,000
• CompTIA CTT+: $74,000
• CompTIA Cloud+: $76,000
• CompTIA Advanced Security
Practitioner (CASP): $86,000
CompTIA certification will be just one indicator of the
value that you bring to the table. Other factors will play
a big part in how much a job will pay. For example,
although the average salary for CompTIA A+ is $59,000,
PayScale reports salaries up to $91,000 for A+ certified
professionals in Washington D.C.
Not surprisingly, given CompTIA’s inclusion in the
US Department of Defense (DoD) baseline
certifications, the US military and Federal Government
contractors are popular employers for CompTIA
certification holders.
CompTIA • 96
CompTIA Certification
Training

CBT Nuggets offers a variety of training that maps to

CompTIA certification exams, ranging from A+
to Cloud+.

• Core Series
• CompTIA Network+ (N10-007)
• CompTIA Security+ (SY0-501)
• CompTIA A+ 220-1001
• CompTIA A+ 220-1002
• Infrastructure Series
• CompTIA Cloud+ (CV0-002)
• LPI Linux LPIC-1 101 and CompTIA Linux+
• Cybersecurity Series
• CompTIA CySA+ (CS0-001)
• Additional Professional Series
• CompTIA Project+ (PK0-004)
• CompTIA Cloud Essentials (CLO-001)

Our training changes from time-to-time as we support

the CompTIA certification roadmap. So be sure to check
CBT Nuggets for new and updated training relevant to
your personal CompTIA certification goals.

© 2019 CBT Nuggets. Version 1.0.