CISCO CERTIFICATION PROGRAM

Cisco Certified Support Technician (CCST)

Networking Objective Domain & Blueprint Guide

Certification Overview: The successful candidate has the foundational knowledge and skills necessary to
demonstrate how networks operate, including the devices, media, and protocols that enable network
communication. This exam serves as an entry point into the Cisco certification pathway, positioned before the
CCNA, targeting entry-level network technicians, cybersecurity support staff, students, and interns.

1. Standards and Concepts

• TCP/IP vs. OSI Model: Conceptual frameworks used to visualize how protocols interact. The OSI model
consists of 7 layers (Physical, Data Link, Network, Transport, Session, Presentation, Application), whereas
the simplified TCP/IP model contains 4 layers (Network Access, Internet, Transport, Application).

• Frames and Packets: Encapsulated data units. At Layer 2 (Data Link), data is formatted into frames
containing physical MAC addresses. At Layer 3 (Network), it becomes a packet embedded with logical IP
addresses.

• Bandwidth vs. Throughput: Bandwidth is the theoretical maximum transmission capacity of a link.
Throughput represents the actual data rate achieved, heavily influenced by network latency and hardware
delays. Tools like Iperf evaluate accurate throughput versus standard internet speed tests.

• Network Topologies & Types:

◦ PAN: Personal Area Network (short-range, e.g., Bluetooth).

◦ LAN / WLAN: Local Area Network / Wireless LAN (homes, offices).

◦ CAN: Campus Area Network (interconnected local buildings).

◦ MAN: Metropolitan Area Network (citywide coverage).

◦ WAN: Wide Area Network (spans across countries/continents).

• Cloud vs. On-Premises: On-premises localizes infrastructure inside private buildings. Cloud solutions rely
on remote data centers utilizing public, private, or hybrid deployments under delivery models such as SaaS
(Software as a Service), PaaS (Platform as a Service), and IaaS (Infrastructure as a Service).

• Core Network Protocols:

◦ TCP vs. UDP: TCP is connection-oriented ensuring guaranteed packet delivery; UDP is
connectionless, prioritizing speed for real-time traffic.

◦ FTP / SFTP / TFTP: File transfer mechanisms, with SFTP utilizing secure cryptographic tunnels.

◦ DHCP: Automates assignment of IP addresses, subnet masks, and default gateways.

◦ DNS: Resolves human-readable hostnames to network-routable IP addresses.

Cisco Certified Support Technician (CCST) Networking Study Guide Page 1 of 4

 ◦ HTTP / HTTPS: Hypertext transfer protocols powering web traffic, secured via TLS encryption in
HTTPS.

◦ ICMP & NTP: ICMP generates diagnostic error and control signaling; NTP synchronizes atomic clocks
across infrastructure.

2. Addressing and Subnet Formats

• Public vs. Private IP Addresses: Private addresses are non-routable on the global internet, reserved for
internal infrastructure. Public addresses are globally unique. NAT (Network Address Translation) maps
internal private addresses to an internet-facing public address.

• IPv4 Addressing & Subnetting: Formatted as 32-bit dotted-decimal blocks. Subnet masks and slash
notation (e.g., /24 ) establish the boundary between network and host portions, regulating the size of
local broadcast domains.

• IPv6 Fundamentals: Deploys a 128-bit hexadecimal architecture to alleviate address exhaustion. Employs
modern prefix concepts instead of classic class-based subnet filters.

3. Endpoints and Media Types

• Physical Media & Connectors: Structured cabling leverages Copper (twisted-pair, coaxial, utilizing RJ-45
and RJ-11 connectors) subject to Electromagnetic Interference (EMI), and Fiber-optic lines sending light
pulses over extended spans completely isolated from electrical noise.

• Wired vs. Wireless Technologies: Wireless technologies encompass Wi-Fi operating across unlicensed
radio spectrums (2.4GHz, 5GHz, 6GHz) defined under the 802.11 standard, and Cellular protocols
running on strictly licensed enterprise carrier spectrum bands.

• Endpoint Configuration: Provisioning clients (PCs, Mobile, Servers, IoT devices, IP Phones) requires
managing client profiles, SSIDs, security keys, and WPA encryption schemas across multiple operating
systems including Windows, Linux, macOS, Android, and iOS.

Cisco Certified Support Technician (CCST) Networking Study Guide Page 2 of 4

4. Infrastructure

• Cisco Hardware Status: Diagnosing hardware begins by mapping physical interface LED behaviors
(blinking or solid amber/green indicators) to link state and activity.

• Device Ports & Interfaces: Includes Console ports (direct terminal management), Serial ports,
Ethernet ports, and high-speed fiber interfaces driven by modular SFPs (Small Form-factor Pluggable).
Interfaces may leverage PoE (Power over Ethernet) to deliver low-voltage DC current to remote endpoints
via traditional twisted-pair lines.

• Switching vs. Routing Mechanics:

◦ Switches (Layer 2): Forward frames within an identical network segment using locally compiled MAC
address tables, utilizing MAC filtering and VLANs to segregate traffic domains.

◦ Routers (Layer 3): Interconnect distinct subnets and route packets across diverse physical links.
Endpoints leverage a Default Gateway address to target destinations outside local area zones.

5. Diagnosing Problems

• Help Desk Methodology: Enforces structured diagnostic tracking, issue prioritization, accurate
documentation, and uniform escalation flows.

• Packet Analysis: Operating network sniffing software like Wireshark to capture real-time traffic and
archive operations to standard .pcap diagnostic files.

• Command Line Diagnostics: Core diagnostic suites run at terminal levels:

Command Primary Diagnostic Function

ping Tests end-to-end IP layer reachability via ICMP echo requests.

ipconfig / ifconfig / ip Displays local network adapter parameters, IP addresses, and masks.

tracert / traceroute Traces the exact hop-by-hop router paths to a specific target address.

nslookup Queries regional DNS servers to verify host name-to-IP resolution.

• Cisco IOS Verification Commands: Checking operational variables on live Cisco infrastructure using
execution commands:
◦ show run — Outlines the active running configuration file.

◦ show ip interface brief — Synthesizes logical status and IP layouts of all local interfaces.

◦ show cdp neighbors — Identifies directly attached upstream and downstream Cisco devices.

◦ show ip route — Presents the active Layer 3 routing topology table.

◦ show mac address-table — Lists current layer 2 port-to-hardware MAC address translations.

Cisco Certified Support Technician (CCST) Networking Study Guide Page 3 of 4

6. Security

• Firewall Access Rules: Packet filters screening traffic stream parameters against strict conditional rule
boundaries (Permit or Deny) targeting restricted layer 4 network ports and protocols.

• The CIA Triad: Explains core architectural objectives: Confidentiality (restricting unapproved data
access), Integrity (preventing unauthorized content alteration), and Availability (guaranteeing continuous
operational uptime).

• AAA Security & Controls: Implements explicit Authentication (identity validation), Authorization
(governing privilege limitations), and Accounting (auditing actions). Leverages Multifactor Authentication
(MFA), central directory domains like Active Directory, and algorithmic cryptographic certificates.

• Threat Landscapes & Wireless Protection: Identifying risk profiles including phishing, spam, distributed
malware, and denial-of-service (DoS) vectors. Securing local environments is accomplished by
establishing resilient WPA, WPA2, or WPA3 Personal/Enterprise encryption constraints on access
points.

Cisco Certified Support Technician (CCST) Networking Study Guide Page 4 of 4