Week 10— Layer 3 Technologies · VPN Technologies · Infrastructure Security · Infrastructure Services
12 days- Study →
Layer 3 Technologies
Layer 3 Technologies covers how Cisco IOS and IOS XE routers build and manipulate the routing table: OSPF, EIGRP, BGP, route redistribution, route maps, PBR, and IPv6 routing. ENARSI tests this through configuration and troubleshooting scenarios, so you must read show output, spot the broken statement, and know which command fixes it.
📅 Days 68–70🎯 ~9 questions/day⚖ 35% of exam- ✓OSPFv3 and OSPFv2 adjacency, area types, virtual links, and passive-interface behavior
- ✓EIGRP named mode configuration, K-values, variance, and feasible successor selection
- ✓BGP path selection, route maps, communities, local preference, and AS-path filtering
- Study →
VPN Technologies
VPN Technologies covers IPsec site-to-site and remote-access tunnels, DMVPN, FlexVPN, GET VPN, and IKEv1/IKEv2 negotiation on Cisco IOS and IOS XE routers. Questions are scenario-based: you pick protocols, match crypto map or profile parameters on both peers, read debug and show crypto output, and diagnose Phase 1 versus Phase 2 failures.
📅 Days 68–70🎯 ~10 questions/day⚖ 20% of exam- ✓IKEv1/IKEv2 Phase 1 and Phase 2 parameter matching: encryption, hashing, DH group, lifetime, and pre-shared key or certificate authentication
- ✓IPsec crypto map, IPsec profile, and transform set configuration, including ACL or VTI-based interesting traffic selection
- ✓DMVPN Phase 1/2/3 with NHRP, mGRE, and tunnel protection, plus FlexVPN hub-and-spoke IKEv2 authorization
- Study →
Infrastructure Security
Infrastructure Security covers device access control and control-plane protection on Cisco IOS/IOS-XE routers and switches. Expect scenario items on AAA with TACACS+ and RADIUS, fallback and authorization behavior, OSPF and EIGRP neighbor authentication, and Control Plane Policing, plus IPv6 first-hop security and uRPF features.
📅 Days 68–70🎯 ~8 questions/day⚖ 20% of exam- ✓AAA authentication, authorization, and accounting using TACACS+ and RADIUS with local fallback
- ✓OSPFv2 and OSPFv3 neighbor authentication using MD5 or SHA key chains
- ✓Control Plane Policing and control-plane protection for router CPU-bound traffic
- Study →
Infrastructure Services
Infrastructure Services covers Cisco IOS/IOS-XE features that provide secure connectivity and network services: DMVPN Phase 3, IPv6 First Hop Security, and AAA with TACACS+. Questions present a configuration goal or symptom and ask for the exact command, feature behavior, or verification output needed to meet it.
📅 Days 68–70🎯 ~10 questions/day⚖ 25% of exam- ✓DMVPN Phase 3 hub commands: ip nhrp redirect and ip nhrp shortcut for spoke-to-spoke tunnels
- ✓IPv6 First Hop Security features including DHCPv6 Guard, RA Guard, and IPv6 snooping
- ✓TACACS+ authentication, authorization, and accounting configuration with fallback behavior