Six weeks, weighted to the exam
A plan that spends time in proportion to the blueprint — the two 20–25% domains first, VPN last.
- Weeks 1–2 · Domains 1 & 2 (deployment, policies, NAT, auth) — ~45% of the exam
- Domain 1 — Deployment & system configuration
- Nail: local-in vs firewall policy
- Memorise: HA election order & override
- Domain 2 — Firewall policies & authentication
- Central vs policy NAT — know the evaluation difference
- FSSO — agent vs agentless (the NOC-engineer gap)
- Weeks 3–4 · Domain 3 (content inspection) + Domain 4 (routing)
- Certificate vs deep inspection — and why deep breaks things
- Flow vs proxy
- Route selection order (policy route → FIB → SD-WAN)
- Domain 4 — Routing & SD-WAN
- Weeks 5–6 · Domain 5 (VPN) + review + practice exams
- Domain 5 — VPN
- Drill every deck, then re-drill your misses