210 practice questions across NSE 1–4, with a level-by-level progress tracker. Start here.
25 questions — threat landscape, social engineering, security hygiene basics.
25 questions — SIEM, sandbox, NGFW, SD-WAN, cloud/endpoint security, Fortinet ecosystem.
60 questions — interfaces, policies, NAT, security profiles, basic VPN, logging, GUI ops.
100 questions, weighted toward policy/NAT, VPN, security profiles, routing, SD-WAN, HA, FSSO.
30 sheets, ordered for the specific Senior Network & Security Engineer role — start here if that's your interview.
18 sheets — OSI foundations, switching, routing/WAN, wireless, role interview prep, and a mock interview drill.
13 sheets — firewall internals, VPN, WAN path, the protocols a perimeter engineer lives in daily, role interview prep, and a mock interview drill.
11 sheets — detection and response, vulnerability management, wireless security, alert-triage context, role interview prep, and a mock interview drill.
16 sheets — Git, Python, Ansible, Terraform, and Kubernetes reference and mechanism sheets, plus role interview prep and a mock interview drill.
PC to switch connectivity: cabling, signaling, ports, link lights.
Switching, VLANs, and Spanning Tree Protocol.
IP addressing, routing, and subnetting.
TCP, UDP, ports, and the handshake/teardown flow.
Sessions and dialog control between hosts.
Data representation, encoding, and TLS.
HTTP, DNS, and application-layer protocols.
Cisco IOS-XE & Arista EOS BGP config and troubleshooting.
Neighbor FSM, DR/BDR election, area types, LSAs, cost, and adjacency troubleshooting.
Label push/swap/pop, LDP, PHP, label header, and BGP/MPLS L3VPN (RD/RT) walkthrough.
Concepts, interview Q&A, and vendor notes.
Authorized-testing lifecycle — scope/RoE, recon, nmap, enumeration, exploitation, post-ex, OWASP web, CVSS, and reporting.
Local workflow, branching, and remote sync — one page, every day.
Inventory, playbooks, modules, and Vault — one page, every day.
Scripting and automation — envs, syntax, files/OS, requests, and data handling.
kubectl, workloads, debugging, services, and config — one page, every day.
HCL, workflow, state management, modules, and workspaces — one page, every day.
RouterOS on RB4011, RB5009 & L009UiGS-RM — interfaces, routing, firewall, VPN, backup.
CBS350, Catalyst 1000, Catalyst 9300 & ISR routers — VLANs, routing, STP, ACLs, stacking, backup.
RouterOS API/REST, Python/Ansible libraries, guardrails, and 10 project blueprints — backup manager to AI assistant.
Capture/display filters, following streams, TCP analysis, statistics, tshark, and TLS decryption — one page, practical.
Telemetry, IOC vs IOA, MITRE ATT&CK map, investigation workflow, KQL/FQL/osquery hunt queries, and response actions.
Universal method, OSI symptom map, cross-platform network toolkit, Windows/Linux essentials, HTTP & network error codes.
Day-to-day sysadmin toolkit — files, users/permissions, processes, systemd, networking, firewall, storage, packages, SSH, and troubleshooting.
Why they'll ask, likely questions & scenarios for the branch network, firewall estate, and DR programme you'd inherit.
SOC/EDR triage, vulnerability & patch management, wireless estate, and vendor governance interview prep.
Troubleshooting scenarios, design/ops Q&A, STAR behavioral prep, red flags, and questions to ask them.
Policy design and incident-response scenarios, STAR behavioral prep, red flags, and questions to ask them.
Alert-triage and escalation scenarios, STAR behavioral prep, red flags, and questions to ask them.
CI/CD and IaC scenarios, STAR behavioral prep, red flags, and questions to ask them.
Random-draw troubleshooting, design/ops, and behavioral questions, self-rated, with a per-category weak-spot breakdown.
Random-draw policy design, incident response, and behavioral questions, self-rated, with a per-category weak-spot breakdown.
Random-draw alert-triage, escalation, and behavioral questions, self-rated, with a per-category weak-spot breakdown.
Random-draw CI/CD, IaC, and behavioral questions, self-rated, with a per-category weak-spot breakdown.
What really happens, step by step, from cable-in to a page loading — link, DHCP, ARP, routing, NAT, firewall, and back.
DNS, TCP handshake, TLS handshake, HTTP request/response, and browser render — in the order they actually happen.
ARP resolution and the first ping, purely at Layer 2 — no gateway, no routing, no firewall involved.
Direct cable → one switch → one router → two routers + firewall — when MAC addresses actually change, when they don't, and why.
What changes when the destination isn't local — 802.1Q tagging, router-on-a-stick / SVI, and re-framing between VLANs.
What a switch does with a MAC it's never learned or has aged out — learning, flooding, and the CAM table lifecycle.
Why a fresh port takes ~30-50s to pass traffic — Blocking, Listening, Learning, Forwarding, and the PortFast shortcut.
Root bridge election, root/designated ports, and why exactly one port gets blocked — physical loop, logical tree.
The multi-site version — SD-WAN path selection, centralized breakout at HQ, and why NAT happens far from the branch.
Session lookup, fast path vs. slow path, policy match, NAT, and security profiles — one packet's full internal journey.
Gray failures vs. hard failures, BFD detection, and automatic reroute — from fiber cut to (maybe) failback.
The resolver hierarchy and the TLS handshake, message by message — recursive vs. iterative, SNI, OCSP stapling, 1-RTT.
SYN, SYN-ACK, ACK, the half-open state in between, and exactly what happens if the final ACK never arrives.
Why internal and external resolution diverge — separate authoritative zones, split-horizon design, and how to diagnose which.
802.1X roles, EAP/RADIUS mutual auth, and the 4-way handshake — from association to a fully open, encrypted port.
802.11r/k/v — neighbor reports, Fast BSS Transition, and why the roam decision is always the client's, not the network's.
Behavioral IOA detection, process-tree lineage, and host-level network containment — how EDR actually responds.
Discovery, fingerprinting, credentialed enumeration, and CVSS scoring — and why a finding isn't proof of exploitability.
From ansible-playbook to a host actually changing — parse, inventory, connect, facts, module push, execute, handlers.
How idempotency actually works — module inspects current state, compares to desired, and decides changed or ok.
Parsing, bytecode compilation, the import system, the GIL, and the exit code — from python script.py to done.
Why the same command installs somewhere completely different depending on one thing — whether a venv is active.
From a YAML manifest to a container serving traffic — API server, etcd, scheduler, kubelet, and the readiness gate.
The exponential-backoff restart mechanism behind the status message, and exactly where to look to diagnose it.
Why a ClusterIP isn't a real address — the kube-proxy/iptables DNAT mechanism that makes it work anyway.
Refresh, dependency graph, plan, confirmation, and incremental state writes — from HCL to real infrastructure.
The state-locking mechanism — DynamoDB conditional writes — that stops two concurrent applies from corrupting state.