All 60 tasks, level by level

The real graded Network Engineering tasks the portal assigns, grouped into three levels.

The portal assigns these Network Engineering tasks. Finish Level 1 before Level 2 and Level 2 before Level 3. Your mentor may mark some tasks as required for the certificate.

Level 1: Foundations (24 tasks)

TaskWhat to do
OSI and TCP/IP modelsDraw both models and map 10 real protocols (HTTP, DNS, TCP, IP, Ethernet, Wi-Fi and others) to their layers.
IP addressingExplain public vs private IPv4, CIDR notation and IPv6 basics with examples from your own network.
Subnetting practiceSplit 192.168.10.0/24 into 6 subnets, list each network, broadcast and host range, and show your working.
Inspect your networkUse ipconfig/ip, ping, traceroute and nslookup at home or college and explain each result.
DNS in depthTrace a DNS lookup for a domain with dig +trace and explain root, TLD and authoritative servers.
DHCP and ARPCapture a DHCP exchange and ARP requests in Wireshark and explain each packet.
TCP vs UDPCapture a TCP three-way handshake and a UDP DNS query in Wireshark and compare them.
Network devicesExplain what a hub, switch, router, access point and firewall do, with a home and an office example.
Cable and Wi-Fi basicsCompare Cat5e, Cat6 and fibre, and 2.4 GHz vs 5 GHz Wi-Fi, with speed and range.
Packet Tracer first labIn Cisco Packet Tracer, connect two PCs through a switch, assign IPs and ping between them. Save the .pkt file.
Router basicsConnect two networks with a router in Packet Tracer and configure interfaces so they can talk.
Ports and servicesList 20 well-known ports and their services, then find which ports are open on your own machine.
Home network auditList every device on your home or hostel network, its IP and MAC, and secure the router settings.
Binary and hex practiceConvert 20 IP addresses and masks between decimal, binary and hex without a calculator.
IPv6 addressingExplain global, link-local and unique local IPv6 addresses and configure IPv6 in Packet Tracer.
Ethernet framesCapture Ethernet frames in Wireshark and label the MAC addresses, type field and payload.
Switch MAC tableShow how a switch learns MAC addresses by watching its table fill in Packet Tracer.
Cable typesExplain straight-through vs crossover and when auto-MDIX removes the difference.
Basic device securitySet enable secret, console and VTY passwords and SSH on a router.
Interface statusUse show commands to read interface status, errors and speed/duplex.
HTTP vs HTTPS captureCapture HTTP and HTTPS traffic and show what can and cannot be read.
Email protocolsExplain SMTP, IMAP and POP3 and which ports they use.
Network diagram symbolsDraw a network using standard icons and a legend.
Speed testsMeasure bandwidth, latency and jitter at different times and explain the results.

Level 2: Building real features (20 tasks)

TaskWhat to do
VLANsCreate two VLANs on a switch in Packet Tracer and show that hosts in different VLANs cannot talk until you add routing.
Inter-VLAN routingConfigure router-on-a-stick so the two VLANs can communicate, and document every command.
Static routingBuild a three-router network and configure static routes until every network can reach every other.
OSPF dynamic routingReplace the static routes with OSPF and show the routing table and neighbours.
NAT and PATConfigure PAT so a private LAN reaches an outside network, and explain the translation table.
Access control listsWrite ACLs that allow web traffic but block ping from one subnet, and test both.
DHCP serverConfigure a router as a DHCP server with an excluded range and verify clients get addresses.
Wireless network setupSet up a secured wireless network in Packet Tracer with WPA2/WPA3 and a separate guest network.
Troubleshooting labBreak your lab in three ways (wrong mask, missing route, shut interface), then diagnose and fix each with commands.
Network documentationDraw a clean topology diagram of your lab with IP plan, VLAN table and device list.
EtherChannelBundle two links between switches with LACP and show load sharing.
Port securityLimit a switch port to one MAC address and show what happens when a second device connects.
DHCP snooping conceptExplain rogue DHCP servers and how DHCP snooping stops them.
OSPF multi-areaConfigure OSPF with two areas and explain area border routers.
Route summarisationSummarise four subnets into one route and verify it.
IPv6 routingConfigure IPv6 static routes or OSPFv3 between three routers.
Syslog and NTPSend device logs to a syslog server and sync time with NTP.
Wireless surveyUse a Wi-Fi analyser app to map signal strength and channels in a building and suggest improvements.
Firewall rulesConfigure a firewall (pfSense or a cloud security group) to allow only required services.
Troubleshooting methodologyWrite a step-by-step troubleshooting method (bottom-up or divide and conquer) and apply it to a lab fault.

Level 3: Professional work and capstone (16 tasks)

TaskWhat to do
Redundancy with STPBuild a looped switch network, show how Spanning Tree blocks a port, and explain what happens when a link fails.
First hop redundancyConfigure HSRP or VRRP between two routers and show failover when one goes down.
Site-to-site VPN conceptExplain IPsec site-to-site VPN and configure a simple one in Packet Tracer or GNS3.
Network monitoringSet up SNMP or a tool like Zabbix/LibreNMS in a lab and graph traffic on one interface.
Network automation with PythonUse Python with Netmiko (or a lab simulator) to back up the configuration of a device automatically.
Cloud networkingDesign a cloud VPC with public and private subnets, route tables and a NAT gateway, and draw it.
Network security reviewReview your lab for weak passwords, open management access and missing ACLs, and harden it.
Capstone: campus networkDesign and build a small campus network (3 departments, VLANs, routing, DHCP, ACLs, Wi-Fi, redundancy) with full documentation.
BGP basics labConfigure eBGP between two autonomous systems in GNS3 or a simulator and advertise networks.
SD-WAN conceptExplain SD-WAN and compare it with traditional MPLS for a company with five branches.
Zero trust network accessExplain ZTNA and how it differs from a traditional VPN.
Ansible for networksUse Ansible to push a configuration change to two lab devices.
Network capacity planningEstimate bandwidth needs for a college of 2,000 students and design the uplinks.
Packet analysis caseAnalyse a provided capture file to find the cause of a slow network and write a report.
Data centre network designExplain spine-leaf architecture and draw a small design.
Capstone 2: branch office networkDesign and build a branch office connected to HQ by VPN, with VLANs, routing, firewall rules, Wi-Fi, monitoring and documentation.
โ† Tools and first-week setupSubmitting tasks and earning your certificate โ†’