A+ or CCST IT Support can establish context before Network+ and Security+.
The map is not
the destination.
Use certifications to organize knowledge and improve hiring signals. Use labs, projects, and work to prove the skill behind them.
Skip A+ when experience already demonstrates it; assess networking before specializing.
Before using the mapHow to read certification sequence, course labels, and lifecycle changes
Arrows describe useful knowledge order. Cisco, for example, lists no formal CCNP Enterprise prerequisite even though prior experience is typical.
TryHackMe Jr Penetration Tester and PEN-100 are labeled learning paths or courses—not silently presented as proctored certifications.
Retiring options stay on the map with a warning and successor instead of disappearing from your history.
Certification and learning highway
Every node opens the same study workspace with goals, time tracking, scores, and graphs.
Enter and support IT
New learners build endpoint and troubleshooting context. Experienced workers can validate gaps and start farther right.
Endpoint, operating-system, support, and troubleshooting foundations.
Entry-level end-user support, hardware, software, and operational skills.
Build the network layer
Network+ is broad and vendor-neutral; CCST Networking is a Cisco-oriented foundation. CCNA goes deeper.
Vendor-neutral networking concepts, operations, security, and troubleshooting.
Entry-level network support and a Cisco-oriented bridge toward CCNA.
Network access, IP connectivity and services, security, and automation.
Cisco has announced CCNA 200-301 v2.0 for February 3, 2027. This bank remains mapped to v1.1 until its migration is reviewed.Professional enterprise infrastructure, assurance, security, and automation.
Defend and govern
Security+ is a baseline. CySA+ adds operations depth; SecurityX and CISSP belong later and serve different roles.
Security concepts, architecture, operations, governance, and incident response.
Defensive analysis, detection, vulnerability management, and incident response.
CS0-004 launched June 23, 2026 while CS0-003 remains in its retirement window. Choose one exam code and use only materials mapped to it.Advanced enterprise security architecture, operations, and engineering.
SecurityX is the current name for the credential formerly called CASP+.Broad security leadership and engineering credential with an experience requirement.
The current outline took effect April 15, 2024. ISC2 generally requires five years across two domains, with limited waiver rules; passing the exam alone does not confer full CISSP status.Practice offensive security
Knowledge credentials and hands-on paths reinforce each other; a course completion is not presented as a proctored certification.
Vendor-neutral penetration-testing planning, tooling, attacks, and reporting.
Guided hands-on web, network, tooling, and penetration-testing exercises; room and module counts can change independently of certification exams.
Foundational Linux, networking, scripting, and security preparation.
OSCP+ is the certification exam outcome; PEN-200 is OffSec's associated training course, not the credential name.
Passing the current exam awards OSCP+ and the lifetime OSCP credential; OSCP+ itself has a renewal period. Verify OffSec's current policy before purchase.Manage endpoints and identity
MD-102 covers endpoint administration. SC-300 adds identity and access depth that supports systems, cloud, and security work.
Deploy, secure, manage, and monitor Windows endpoints with Microsoft Intune and Microsoft Entra ID.
The official study guide lists skills measured as of July 24, 2026.Manage workforce identities, authentication, application access, and identity governance in Microsoft Entra.
The official study guide lists skills measured as of April 27, 2026.Add systems and cloud depth
Linux and cloud administration make security and networking knowledge operationally useful.
Linux administration, security, scripting, containers, and troubleshooting.
AWS cloud concepts, services, security, architecture, pricing, and support.
Design secure, resilient, high-performing, and cost-optimized AWS architectures.
Administer Azure identity, governance, storage, compute, and virtual networking.
Azure security controls, posture, threat protection, and remediation.
This credential and exam retired August 31, 2026. Existing achievements remain on Microsoft Learn transcripts; new learners should use SC-500.Cloud and AI security engineering across modern enterprise environments.
Microsoft's official credential page lists SC-500 as available to schedule and no longer labels it beta as of September 12, 2026.