Build Job-Ready IT Skills That Employers Demand

Enterprise Campus Network Design

Build a multi-building campus network from scratch with VLANs for departments, inter-switch trunks, redundant links using EtherChannel, and Spanning Tree Protocol optimization. Configure switch port security and troubleshoot layer 2 loops.

Multi-Site Branch Office Connectivity

Design and implement routing between headquarters and three branch offices using OSPF. Configure DHCP for automatic IP assignment, NAT for internet access, and static routes for backup paths. Troubleshoot routing failures and optimize path selection.

Secure Network Access Control

Implement layered security across the network: standard and extended ACLs to control traffic flow, port security with MAC address filtering, secure wireless with WPA3-Enterprise, and SSH access to network devices. Simulate and mitigate common attacks.

Scalable Web Application on EC2

Launch and configure EC2 instances to host a web application. Set up security groups, create AMIs for backup, implement auto-scaling to handle traffic spikes, and use Elastic Load Balancer to distribute requests across multiple instances. Monitor performance with CloudWatch.

Cloud Storage and Backup Strategy

Create S3 buckets for different use cases: web hosting for a static website, secure storage for sensitive documents with encryption, and backup storage with lifecycle policies. Configure bucket permissions, enable versioning to protect against accidental deletions, and understand different storage classes (Standard, Infrequent Access, Glacier) by implementing basic lifecycle rules.

Cloud Network Isolation

Explore how AWS isolates your resources with Virtual Private Cloud (VPC). Launch an EC2 web server in a VPC and configure two layers of security: security groups (instance-level firewall) to allow HTTP traffic, and Network ACLs (subnet-level firewall) for an additional security boundary. Understand the key difference - security groups are stateful (return traffic automatically allowed) while NACLs are stateless (must explicitly allow both inbound and outbound). See how VPCs create network boundaries that isolate your resources.