NFV, VPC, security groups/lists, internet/NAT gateways, VPN, Direct Connect, public/private/hybrid cloud, SaaS/IaaS/PaaS, scalability, elasticity, multitenancy

FTP, SFTP, SSH, Telnet, SMTP, DNS, DHCP, TFTP, HTTP, NTP, SNMP, LDAP, HTTPS, SMB, Syslog, SMTPS, LDAPS, SQL Server, RDP, SIP, ICMP, TCP, UDP, GRE, IPSec/AH/ESP/IKE, unicast, multicast, anycast, broadcast

802.3, 802.11, cellular, satellite, single-mode/multimode fiber, DAC/twinax, coax, cable speeds, plenum, SFP/QSFP, Ethernet, Fibre Channel, SC/LC/ST/MPO/RJ11/RJ45/F-type/BNC

Mesh, hybrid, star, hub-and-spoke, spine-leaf, point-to-point, three-tier, collapsed core, north-south/east-west traffic

Public/private IPs, APIPA, RFC1918, loopback, VLSM, CIDR, classes A-E, gateway, subnet mask, duplicate IPs, address pool exhaustion

IPv6 basics, address exhaustion, tunneling, dual stack, NAT64, SDN, SD-WAN, VXLAN, DCI, ZTA, SASE/SSE, IaC, automation, source control, configuration drift

Static routing, dynamic routing, BGP, EIGRP, OSPF, administrative distance, prefix length, metric, NAT, PAT, FHRP, VIP, subinterfaces

VLAN database, SVI, native VLAN, voice VLAN, 802.1Q, link aggregation, speed/duplex, STP, MTU, jumbo frames, root bridge, port roles/states, ACL switching issues

Channels, channel width, non-overlap, 802.11h, 2.4/5/6 GHz, band steering, SSID/BSSID/ESSID, mesh/ad hoc/point-to-point/infrastructure, WPA2/WPA3, captive portal, PSK vs Enterprise, antennas, lightweight/autonomous APs

MDF, IDF, rack size, port-side exhaust/intake, patch panels, fiber distribution panels, lockable racks, UPS, PDU, power load, voltage, humidity, fire suppression, temperature

Physical/logical diagrams, rack diagrams, cable maps, L1/L2/L3 diagrams, asset inventory, hardware/software/licensing/warranty, IPAM, SLA, wireless survey/heat map

EOL, EOS, patches, OS updates, firmware, decommissioning, service requests, change tracking, production/backup/baseline/golden configs

SNMP traps, MIB, v2c/v3, community strings, authentication, flow data, packet capture, baselines, anomaly alerts, log aggregation, Syslog collector, SIEM, API integration, port mirroring, discovery, traffic/performance/availability/config monitoring

DHCP reservations, scopes, lease time, options, relay/IP helper, exclusions, SLAAC, DNSSEC, DoH, DoT, A/AAAA/CNAME/MX/TXT/NS/PTR records, forward/reverse zones, authoritative/non-authoritative, primary/secondary, recursive DNS, hosts file, NTP, PTP, NTS

Site-to-site VPN, client-to-site VPN, clientless VPN, split tunnel vs full tunnel, SSH, GUI, API, console, jump box, in-band vs out-of-band management

RPO, RTO, MTTR, MTBF, cold/warm/hot sites, active-active, active-passive, tabletop exercises, validation tests

Encryption in transit/at rest, certificates, PKI, self-signed certs, IAM, MFA, SSO, RADIUS, LDAP, SAML, TACACS+, time-based auth, authorization, least privilege, RBAC, geofencing, cameras, locks, honeypots, honeynets, CIA triad, risk, vulnerability, exploit, threat

Data locality, PCI DSS, GDPR, IoT, IIoT, SCADA, ICS, OT, guest networks, BYOD, segmentation enforcement

DoS/DDoS, VLAN hopping, MAC flooding, ARP poisoning, ARP spoofing, DNS poisoning, DNS spoofing, rogue DHCP, rogue AP, evil twin, on-path attack, phishing, dumpster diving, shoulder surfing, tailgating, malware

Disable unused ports/services, default password changes, NAC, port security, 802.1X, MAC filtering, key management, ACLs, URL filtering, content filtering, trusted/untrusted zones, screened subnet/DMZ

Identify problem, gather info, question users, symptoms, changes, duplicate issue, multiple problems, theory of cause, OSI top-down/bottom-up, divide and conquer, test, plan, implement, verify, document

Wrong cable type, SMF/MMF, Cat 5/6/7/8, STP vs UTP, crosstalk, interference, attenuation, bad termination, TX/RX transposed, CRC, runts, giants, drops, error disabled, admin down, suspended, PoE budget/standard, transceiver mismatch, signal strength

STP loops, root bridge issues, port roles/states, VLAN assignment, ACLs, routing table, default routes, address pool exhaustion, wrong gateway, wrong IP, duplicate IP, wrong subnet mask

Congestion, contention, bottlenecks, bandwidth, throughput capacity, latency, packet loss, jitter, channel overlap, wireless signal loss, poor coverage, client disassociation, roaming misconfiguration

Protocol analyzer, ping, traceroute/tracert, nslookup, tcpdump, dig, netstat, ip/ifconfig/ipconfig, arp, Nmap, LLDP/CDP, speed tester, toner, cable tester, taps, Wi-Fi analyzer, visual fault locator, show mac-address-table, show route, show interface, show config, show arp, show vlan, show power