Network Monitoring, SNMP and Baselines
Objective 3.1 covers monitoring. The recurring exam idea is that you cannot recognise abnormal behaviour without first documenting normal behaviour, which is what a baseline provides.
Exam tip. When a question asks how you would know that current behaviour is abnormal, the answer is the baseline. It appears as the correct option far more often than any monitoring product.
Remote Access Methods for Network Administration
Administering infrastructure remotely has its own set of tools and risks. The exam consistently favours encrypted, authenticated, out-of-band options.
Exam tip. Out-of-band management is the answer whenever the scenario involves needing to reach a device after a change has broken normal connectivity.
Traffic Shaping, QoS and Bandwidth Management
Quality of service ensures that traffic sensitive to delay gets it. Questions describe a symptom affecting voice or video and expect QoS as the mitigation.
Exam tip. QoS reprioritises within existing capacity. If a link is saturated all day rather than at peaks, the correct answer is additional bandwidth, not QoS.
Hardware and Software Tools for Network Work
Tool questions describe a task and expect the right instrument. Group them into cable testing, signal measurement and traffic analysis and the choices become obvious.
Exam tip. Cable tester versus certifier is a favourite distinction. If the requirement mentions meeting a standard or guaranteeing a speed, only a certifier is adequate.
Configuration Management and Network Hardening Baselines
Consistency is what makes a network supportable. Configuration management questions test how changes are controlled, recorded and reversed across many devices.
Exam tip. If devices of the same role behave differently, the answer is configuration drift. The remedy is comparing against the golden configuration, not replacing hardware.
High Availability, Redundancy and Failover
Objective 3.3 covers availability. Know the metrics by name, and the difference between designs that survive a failure and designs that merely recover from one.
Exam tip. RPO drives backup frequency: an RPO of one hour requires backups or replication at least hourly. RTO drives the recovery design, not the backup schedule.
Disaster Recovery Sites and Continuity Planning
Recovery site questions weigh cost against recovery speed. Know what each site type has in place before a disaster, since that is what determines how quickly it can take over.
Exam tip. Match the site type to the stated recovery time objective. If the RTO is measured in minutes, only a hot site or equivalent cloud failover qualifies.
Policies, Agreements and Network Documentation
Objective 3.2 covers the documents that govern and describe a network. Questions describe a purpose and expect the document name, so learn each by what it is for.
Exam tip. SLA and MOU are the confusable pair. An SLA carries enforceable performance commitments; an MOU records intent without them.
Network Access Control and Device Onboarding
Controlling which devices may join the network is an operations concern as much as a security one. Know how 802.1X works and what happens to devices that fail assessment.
Exam tip. MAC filtering appears as a distractor in access control questions. It is trivially bypassed by spoofing, so 802.1X is the correct answer whenever real control is required.