Network & Cloud Engineering Path
An Obsidian knowledge base for self-study in networking, cloud, and infrastructure engineering , maintained with an LLM study coach. Course transcripts are turned into consistent lesson pages, each tied back to a hands-on k3s lab, AWS VPC, and enterprise practice.
.
├── CLAUDE.md # Wiki schema, page formats, ingest workflow
├── raw/ # Source material, never edited
│ ├── course_tracker.md # Lesson tracking table
│ ├── assets/wireshark-101/ # Course PCAPs + Wireshark profiles
│ └── transcripts/
│ ├── network-plus/ # Lxx_Topic.txt
│ ├── gcp/ # GCPxx_Topic.txt
│ └── wireshark/ # WSxx_Topic.txt
└── wiki/
├── index.md # Full catalog of every page
├── overview.md # Goals, roadmap, current status
├── log.md # Append-only activity log
├── lessons/
│ ├── network-plus/ # "Lxx - Title.md"
│ ├── gcp/ # "GCPxx - Title.md"
│ └── wireshark/ # "WSxx - Title.md"
├── concepts/ # Cross-lesson reference pages
├── certs/ # Per-certification progress, exam traps, weak areas
├── quizzes/ # One folder per course
│ ├── network-plus/ # NQ graded · PE practice exams · WD drills
│ ├── gcp/ # GQ graded
│ ├── wireshark/ # WQ quizzes
│ └── interview/ # IQ interview prep
├── scenarios/gcp/ # GSxx scenario walkthroughs + topology guide
└── labs/ # Hands-on lab notes; labs/practice/ = GPLxx practice labs
Every lesson follows the same structure, defined in CLAUDE.md :
Section
Purpose
Summary
What the objective covers and what the exam tests
Core Concepts
Mechanisms, tables, diagrams, transcript corrections
Key Terms
Glossary for quick review
Real-World Connections
k3s lab, AWS/GCP equivalents, enterprise and telecom practice
Troubleshooting Scenario
Worked incident using the 7-step methodology
Hands-On Ideas
Commands and lab exercises
Quiz
Scenario questions with answer key
Weak Areas to Revisit
Filled in from graded quiz results
When a lecture states something inaccurate (or the auto-captions garble a term), the page flags it inline as a Transcript correction or Caption note .
All 25 lessons across the five exam domains are complete. Domain weights: 1.0 Concepts 23% · 2.0 Implementation 20% · 3.0 Operations 19% · 4.0 Security 14% · 5.0 Troubleshooting 24%.
ID
Lesson
Obj
Key topics
L01
The OSI Model
1.1
Layers, encapsulation, PDUs
L02
Networking Appliances & Applications
1.2
Routers, switches, firewalls, IDS/IPS, LB, proxy, CDN
L03
Network Virtualization & Cloud Technologies
1.3
NFV, VPC, cloud service & deployment models
L04
Ports, Protocols & Services
1.4
Port table, TCP/UDP, IP protocol types
L05
Network Transmission - Media, Standards & Connectors
1.5
Copper/fiber, 802.11, connectors, transceivers
L06
Network Topologies, Architectures & Traffic Flows
1.6
Three-tier, spine-leaf, N-S / E-W traffic
L07
IP Addressing
1.7
IPv4/IPv6, RFC 1918, CIDR, VLSM, subnetting
L08
Modern Networks
1.8
SDN, SD-WAN, VXLAN, Zero Trust, SASE, IaC
L09
Routing Technologies
2.1
Static, OSPF, EIGRP, BGP, NAT/PAT, FHRP
L10
Switching Technologies
2.2
VLANs, 802.1Q, STP/RSTP, EtherChannel, LACP
L11
Wireless Devices and Technologies
2.3
802.11 standards, WPA2/3, channels, MIMO
L12
Physical Installations
2.4
MDF/IDF, racks, UPS/PDU, environmental
L13
Organizational Processes and Procedures
3.1
Documentation, lifecycle, change & config mgmt
L14
Network Monitoring
3.2
SNMP, syslog, NetFlow, packet capture, SIEM
L15
Disaster Recovery
3.3
RPO/RTO, MTBF/MTTR, hot/warm/cold sites
L16
IP Services
3.4
DHCP/DORA, SLAAC, DNS records, DNSSEC, NTP/PTP
L17
Network Access and Management
3.5
IPsec, TLS VPN, split/full tunnel, jump box, OOB
L18
Basic Network Security
4.1
Crypto, PKI, MFA, LDAP/SAML/RADIUS/TACACS+, compliance
L19
Network Attacks
4.2
DDoS, VLAN hopping, MAC flooding, ARP/DNS poisoning, malware
L20
Network Defense Techniques
4.3
Hardening, 802.1X, port security, ACLs, filtering, zones
L21
Network Troubleshooting Methodology
5.1
7-step methodology, OSI approaches, escalation
L22
Troubleshooting Cabling and Physical Issues
5.2
Fiber/copper faults, duplex mismatch, CRC/runts/giants, PoE
L23
Network Service Troubleshooting
5.3
STP, VLAN/trunk, default route, DHCP exhaustion, subnet mask
L24
Troubleshooting Network Performance Issues
5.4
Bandwidth vs throughput, latency/jitter/loss, Wi-Fi issues
L25
Troubleshooting Tools
5.5
Wireshark, ping/traceroute, dig, tcpdump, Nmap, show commands
Progress, exam traps, and weak areas: wiki/certs/network-plus.md
Networking in Google Cloud is a six-course program: Fundamentals ✅ · Routing and Addressing ✅ · Network Architecture ✅ · Network Security (in progress) · Load Balancing · Hybrid and Multicloud.
Course 2: Routing and Addressing
ID
Lesson
Key topics
GCP01
Routes and Route Preferences
System/custom/dynamic routes, priority, Cloud Router
GCP02
IPv6 in Google Cloud
Dual-stack subnets, /96 per VM, IPv6 routing
GCP03
BYOIP - Bring Your Own IP
Bring your own public IP ranges into Google Cloud
GCP04
Cloud DNS
Public/private zones, server & routing policies
GCP06
Module Debrief - Routing & Addressing
Module quick reference
GCP07
Private Connection Options - Overview
Option map: PGA, PSC, PSA, Serverless VPC Access, Cloud NAT
GCP08
Private Google Access
Per-subnet access to Google APIs, on-prem via VPN + DNS
GCP09
Private Service Connect
Endpoints, service attachments, PSC interface
GCP10
Private Services Access
Peering-based access to managed services (Cloud SQL)
GCP11
Cloud NAT
Distributed outbound NAT, manual/auto IPs, private NAT
GCP12
Lab: Implement Private Google Access and Cloud NAT
Hands-on: no-external-IP VM, IAP SSH, PGA, Cloud NAT, NAT logging
GCP13
Module Debrief - Private Connection Options
Module quick reference + decision table
Course 3: Network Architecture
ID
Lesson
Key topics
GCP14
Network Architecture - Course Introduction
Modules: Intro to Network Architecture (subnets, routes, firewalls, LB) · Network Topologies
GCP15
Cloud Network Architecture Overview
Design process & metrics, GCP networking toolkit, Premium vs Standard tier, multi-region 3-tier redesign
GCP16
Getting Started with Network Architecture
Considerations, stakeholders → requirements → HLD → LLD → BoM, CapEx/OpEx
GCP17
Module Introduction - Network Topologies
Hub-and-spoke, mesh, mirrored, gated; NCC lab
GCP18
Hub-and-Spoke Topology
Peering vs VPN vs NCC, transitivity, VPC/hybrid spokes, router appliance
GCP19
Lab: Implement a Hub-and-Spoke Network Using NCC
Two isolated VPCs → NCC mesh hub → ping works; Network Topology
GCP20
Other Topologies - Mesh, Mirrored, Gated
Full vs partial mesh, mirrored DR/dev-test, gated egress/ingress
GCP21
Getting Topology Data
Network Topology: entities/hierarchies, 6-week hourly snapshots, metrics, Charlie LB latency case
GCP22
Best Practices for Connectivity and Topologies
SLAs, centralized hybrid hub VPC + custom routes, APIs via Apigee/LB, capacity optimization, two authoritative DNS
Course 4: Network Security
ID
Lesson
Key topics
GCP23
Network Security - Course Introduction
Modules: DDoS protection · Controlling access to VPC networks · Advanced security monitoring and analysis
GCP24
Module Introduction - DDoS Protection
Module map: attacks → Google mitigation → partner products → lab
GCP25
How DDoS Attacks Work
Botnets, volumetric vs protocol vs L7, bisection bandwidth, 46M/398M rps records
GCP26
Google Cloud DDoS Mitigations
LB built-in defense, attack surface, CDN, Apigee, Cloud Armor (WAF, rate limits, Adaptive Protection), Standard vs Enterprise
GCP27
Types of Complementary Partner Products
5 partner categories (data, infrastructure, logging/monitoring, identity, compliance), NVA insertion pattern
GCP28
Lab: Configuring Traffic Blocklisting with Google Cloud Armor
Hands-on: verify global App LB, access-test VM, deny-404 blocklist rule, Cloud Armor logs
GCP29
Module Introduction - Controlling Access to VPC Networks
Control plane (IAM, hierarchy, Org Policy) vs data plane (firewall rules)
GCP30
IAM Roles
Hierarchy inheritance, deny policies first, permission anatomy, Network Viewer/Admin vs Security Admin, custom roles
GCP31
Firewall Rules
Stateful distributed rules, 5 parameters, priority/deny-wins-tie, implied + default rules, SA vs tag targets, Cloud NGFW hierarchical/network policies, Firewall Insights
GCP32
Lab: Configuring VPC Firewalls
Hands-on: auto-mode VPC, delete default network, tag-based SSH rule, internal ICMP, priority 500 vs 2000, egress deny
GCP33
Cloud IDS
Managed IDS (detect only): IDS endpoints + Packet Mirroring, Palo Alto engine, north-south + east-west, PSA prerequisite, 5 Gbps/endpoint
GCP34
Lab: Getting Started with Cloud IDS
Hands-on: PSA + IDS endpoint + mirroring, low→critical test signatures, duplicate detections, emergency firewall block
GCP35
Secure Web Proxy
Managed egress forward proxy: identity (SA/secure tag/mTLS) + host/URL rules, default deny, URL lists, TLS inspection for paths
GCP36
Module Introduction - Advanced Security Monitoring and Analysis
Module map: Packet Mirroring → best practices → quiz
GCP37
Packet Mirroring for Network Traffic Inspection
Full-packet clones to an ILB collector, host egress cost, filters (ranges × protocols ≤ 30), region/NIC rules, PCI forensics
GCP38
Network Security Best Practices
Eight practices (zero trust, secure hybrid, no default network, perimeter, IDS+mirroring, WAF, IaC, monitoring) mapped to tools
ID
Lesson
Key topics
GCP39
Load Balancing - Course Introduction
Course 5 map: LB overview, hybrid LB, traffic management, ILB next hops, Cloud CDN + Armor, caching
GCP40
Module Introduction - Hybrid Load Balancing and Traffic Management
Backend service vs bucket, Application / proxy / passthrough LBs, five NEG types (zonal, internet, serverless, PSC, hybrid)
GCP41
Hybrid Load Balancing
Hybrid NEG (NON_GCP_PRIVATE_IP_PORT), closest zone, global dynamic routing, health-check range advertisement, same-region internal ALB, encryption, bursting
GCP42
Traffic Management
URL map: host rules, path matchers (longest match), route rules (priority), weighted splits, retries/mirroring/CORS; /video/* rules
GCP43
Lab: Configuring Traffic Management with a Load Balancer
Hands-on: regional internal ALB, proxy-only subnet, blue/green backend services, 70/30 weighted route rule
GCP44
Internal Network Load Balancers as Next Hops
Next-hop ILB by name/IP/URL (IP allows peered VPC), NAT/firewall NVAs, peering export, global access, no ECMP across ILBs
GCP45
Cloud CDN
Cache modes (USE_ORIGIN_HEADERS / CACHE_ALL_STATIC default / FORCE_CACHE_ALL), hit/miss flow, Age header, CDN Interconnect
GCP46
Google Cloud Armor with Cloud CDN
Edge security policies (before cache, IP/geo) vs backend policies (WAF, rate limits)
GCP47
Lab: Cloud Armor Edge Security Policies for Cloud CDN
Hands-on GSP878: cache populated, origin deleted, deny-all edge policy 403, removed → 200 from cache (Age)
GCP48
Load Balancer Optimization Strategies
Autoscaling on LB utilization, right-sizing, monitoring/billing/labels, CUDs, Spot VMs, CDN offload
Course 6: Hybrid and Multicloud
ID
Lesson
Key topics
GCP49
Hybrid and Multicloud - Course Introduction
Course 6 map: connectivity options (Interconnect) and Cloud VPN (HA VPN, NCC)
GCP50
Module Introduction - Connectivity Options
Module map: VPN/Interconnect overview → Dedicated → Partner → Cross-Cloud
GCP51
Connectivity Options
VPN vs Dedicated vs Partner vs Cross-Cloud: capacity, encryption, lead time, decision flow
GCP52
Dedicated Interconnect
Own router in Google colo, LOA-CFA, BGP over VLAN attachments, 10/100/400G circuits, 99.9 vs 99.99 topologies
GCP53
Partner Interconnect
Service provider, pairing key, 50 Mbps–50 Gbps, Layer 2 (you run BGP) vs Layer 3 (provider runs BGP)
GCP54
Cross-Cloud Interconnect
Google-provisioned links to AWS/Azure/OCI/Alibaba, primary + redundant ports, SLA, MACsec scope, NCC site-to-site
GCP55
Module Introduction - Cloud VPN
Module map: overview, HA VPN topologies, lab, path selection, NCC
GCP56
Cloud VPN Overview
When to use VPN, HA VPN (2 interfaces, BGP, 99.99%) vs Classic VPN, selective advertisement
GCP57
HA VPN Topologies
Peer redundancy types, AWS (4 tunnels, TGW ECMP), HA-to-HA, HA VPN over Interconnect (2 routers), active/passive
GCP58
Lab: Configuring Google Cloud HA VPN
Hands-on: two VPCs, HA VPN gateways, 4 tunnels, BGP on 169.254/30s, global routing for region 2, tunnel failover
GCP59
Influence Best Path Selection
Advertised route priority → BGP MED (0–65535, default 100, lower wins) + region-to-region cost 201–9999 in global mode
GCP60
Network Connectivity Center
Hub with VPC spokes and hybrid spokes (VPN, VLAN, router appliance), site-to-site data transfer
The geolocation traffic-steering lab lives in wiki/labs/gcp-geolocation-lab.md . Progress: wiki/certs/gcp-networking.md
Wireshark 101: Packet Analysis Essentials
Lab-heavy protocol analysis course, running in parallel with Google Cloud. Course PCAPs and instructor profiles live in raw/assets/wireshark-101/.
ID
Lesson
Lab file
Key topics
WS00
Introduction
—
Why packet analysis, course files, instructor profiles
WS01
Pre-Lesson - Your First Lab
Pre-Lab-SlowNetwork.pcapng
Client vs network vs server: 105 ms RTT, 20.6 s server think time
WS02
Your First Packet Capture
— (live capture)
Interfaces, save as pcapng, Capture Options, ring buffers
WS03
Where to Capture on the Network
— (concepts)
Endpoint vs SPAN vs TAP vs cloud mirroring, SPAN oversubscription
WS04
Packet Capture - Best Practices
— (concepts)
No capture filter first, client first, ring buffer, capture the problem, TAP, multi-point
WS05
The Default Interface
Pre-Lab-SlowNetwork.pcapng
Packet List / Details / Bytes panes, profile in status bar, coloring rules
WS06
Configuring Columns
Pre-Lab-SlowNetwork.pcapng
Delta time column, UTC vs local time, TTL column, 3 ways to add columns
WS07
Coloring Traffic
Pre-Lab-SlowNetwork.pcapng
TCP SYN coloring rule, drag-to-filter, rule priority, instructor's Cybersec rules
WS08
Creating Profiles
Pre-Lab-SlowNetwork.pcapng
Profile = settings bundle; Copy-from coloring rules; Frame metadata fields
WS09
Saving Filter Buttons
Pre-Lab-SlowNetwork.pcapng
Bad TCP button, grouped buttons, field references, signature buttons, 4.x syntax fixes
WS10
The Statistics View
Pre-Lab-SlowNetwork.pcapng
Conversations & Endpoints per layer, asymmetric next-hop MACs, tshark -z
Progress: wiki/certs/wireshark-101.md
Scenario Walkthroughs & Practice Labs
Step-by-step explanations of every course scenario (context → architecture diagram → diagnosis workflow → commands → why → verify), plus original practice labs with hidden solutions. Diagrams are Mermaid (render in Obsidian and GitHub).
ID
Page
Covers
GS01
Private connectivity scenarios — 8 walkthroughs with diagrams
GCP07–GCP13
GS02
Topologies explained — how, when, pros/cons, implementation
GCP17–GCP20
GS03
Architecture & topology scenarios — 8 walkthroughs with diagrams
GCP14–GCP20
GPL01
Practice labs: hardened VPC, PSC overlap, PSA hybrid, NAT load, PSC for APIs
GCP07–GCP13
GPL02
Practice labs: 3-tier SA firewall, NCC star, VPN hub, failover, gated egress, mirrored IaC
GCP14–GCP20
GS04
Network security scenarios: L7 flood, least-privilege IAM, org firewall guardrail, lateral movement + IDS, SWP egress, VPC-SC exfiltration
GS05
Load balancing scenarios: LB picker, canary + header routing, hybrid bursting, geo-licensed CDN, NVA next hop, cost cuts
GS06
Hybrid scenarios: connection picker, 99.99% Interconnect, active/passive HA VPN, Azure CCI + NCC, L3 partner, VPN break-fix
GS07
Capstone design brief + reference landing zone, decision log mapped to all six courses, IP plan, failure drills
GPL03
Practice labs: Armor throttle preview→enforce, IAM deny, secure-tag firewall policy, DIY mirroring + Wireshark, SWP bypass guard, VPC-SC dry run
GPL04
Practice labs: canary + header URL map, hybrid NEG over HA VPN, CDN cache-mode matrix, NAT gateways as next-hop ILB, LB-utilization autoscaling
GPL05
Practice labs: MED active/passive, regional vs global advertisements, NCC hybrid spokes, k3s home lab over HA VPN (strongSwan + FRR), break-fix drill
GPL06
Capstone build in Terraform: 10 verifiable milestones from IP plan to rebuild
Scenario Drill
Interactive: 22 decision cards across Courses 4–6 + capstone
ID
Quiz
Covers
NQ01
Networking Concepts (Coursera graded)
L01–L08
NQ02
Networking Concepts (Practice)
L01–L08
NQ03
Network Implementation (Coursera graded)
L09 + L10–L12
NQ04
Network Operations (Coursera graded)
L13–L17
NQ05
Network Security (Coursera graded)
L18–L20
NQ06
Network Troubleshooting (Coursera graded)
L21–L25
PE01
Practice Exam 1 — 90 Q, domain-weighted, original
L01–L25
WD01
Weak-Area Drill — Troubleshooting Methodology
L21–L22
ID
Quiz
Covers
GQ01
GCP Private Connection Options (Coursera graded)
GCP07–GCP13
GQ03
Network Topologies Quiz (Coursera graded)
GCP17–GCP22
GQ04
DDoS Protection Module Quiz (Coursera graded)
GCP24–GCP28
GQ05
Controlling Access to VPC Networks Module Quiz (Coursera graded)
GCP29–GCP35
GQ06
Advanced Security Monitoring and Analysis Module Quiz (Coursera graded)
GCP36–GCP38
GQ07
Hybrid Load Balancing and Traffic Management Quiz (Coursera graded)
GCP40–GCP44
GQ08
Caching and Optimizing Load Balancing Quiz (Coursera graded)
GCP44–GCP48
GQ09
Connectivity Options Quiz (Coursera graded)
GCP50–GCP54
GQ10
Cloud VPN Quiz (pending submission)
GCP55–GCP60
ID
Quiz
Covers
WQ01
Introduction to Wireshark Quiz (Coursera)
WS00–WS04
ID
Quiz
Covers
IQ01
CCNA-level interview questions — self-test (Q1–Q80)
L01–L25
Graded quizzes are saved with an answer key and reasoning. Missed questions are recorded as weak areas on the cert page and the related lesson.
Page
Covers
osi-model
Layers, encapsulation, TCP vs UDP
network-devices
Router, switch, firewall, IDS/IPS, LB, proxy, CDN
cloud-fundamentals
IaaS/PaaS/SaaS, deployment models, SDN/NFV
vpc-and-subnets
VPC design, security groups, NAT, connectivity
ports-and-protocols
Port table, IPsec, ICMP, RADIUS/TACACS+
network-media
Wi-Fi standards, Ethernet, fiber, connectors
network-topologies
Three-tier, spine-leaf, N-S / E-W
ip-addressing
Classes, RFC 1918, CIDR, VLSM, NAT
modern-networks
SDN, VXLAN, Zero Trust, SASE, IaC, IPv6
gcp-routing
Route types, Cloud Router, BGP, multi-NIC, BYOIP
gcp-dns
Cloud DNS zones and policies
gcp-network-architecture
Design process, service tiers, topologies, Network Connectivity Center
gcp-private-access
PGA, PSC, PSA, Cloud NAT + AWS mapping
gcp-product-map
Google Cloud products, their use, and AWS/Azure equivalents
gcp-command-anatomy
gcloud command anatomy: each part and flag explained, what it does and when to use it
wireshark
Capture workflow, time formats, RTT vs server time, filters, tshark
Lab
Description
k3s-lab
ARM64 Ubuntu k3s cluster with Kubeshark, Elasticsearch, and Kibana, used as the hands-on reference for every lesson
gcp-geolocation-lab
Cloud DNS geolocation routing policy for traffic steering
GCP12 lab
Private Google Access + Cloud NAT for a VM with no external IP, reached via IAP
GCP19 lab
Hub-and-spoke with Network Connectivity Center: two isolated VPCs connected as VPC spokes
GCP28 lab
Cloud Armor blocklist of one client IP at Google's edge; verify with curl and policy logs
GCP32 lab
Firewall rules end to end: implied rules, target tags, NAT'd external-IP ping, priority and egress
GCP34 lab
Detect with Cloud IDS, respond with a priority-1 firewall deny, verify with firewall logs
GCP43 lab
Hands-on: regional internal ALB, proxy-only subnet, blue/green backend services, 70/30 weighted route rule
GCP47 lab
Hands-on GSP878: cache populated, origin deleted, deny-all edge policy 403, removed → 200 from cache (Age)
GCP58 lab
Hands-on: two VPCs, HA VPN gateways, 4 tunnels, BGP on 169.254/30s, global routing for region 2, tunnel failover
Now CompTIA Network+ N10-009 ── course complete, exam prep (PE01)
Parallel Wireshark 101 (in progress) + Networking in Google Cloud (courses 2–6)
Next Docker & Kubernetes Masterclass ─▶ KCNA ─▶ CKA ─▶ AZ-500 ─▶ KCSA ─▶ CKS (PCA anywhere after CKA)
Azure AZ-900 ─▶ AZ-104 ─▶ AZ-500
AWS Cloud Practitioner Essentials / AWS Fundamentals ─▶ CCP ─▶ AWS Cloud Solutions Architect (SAA)
Cisco Network Fundamentals ─▶ CCNA 200-301 ─▶ Wireless Foundations · Network Automation · SD-WAN
Security Cybersecurity Operations Fundamentals (CyberOps 200-201 CBROPS)
Anytime Google AI Professional Certificate
Certification
Status
CompTIA Network+ N10-009
Course complete, exam prep
Google Cloud Networking (6-course program)
✅ Complete
Wireshark 101: Packet Analysis Essentials (course)
In progress
Kubernetes and Cloud Native Associate (KCNA)
Next
Certified Kubernetes Administrator (CKA)
Planned
Microsoft Azure Security Engineer (AZ-500)
Planned
Kubernetes and Cloud Native Security Associate (KCSA)
Planned
Certified Kubernetes Security Specialist (CKS)
Planned
Prometheus Certified Associate (PCA)
Planned
AWS Cloud Practitioner / Solutions Architect – Associate
Planned
Docker and Kubernetes Masterclass (Packt)
Planned
Microsoft Azure Fundamentals (AZ-900) / Azure Administrator (AZ-104)
Planned
AWS Fundamentals (AWS)
Planned
Cisco Network Fundamentals / CCNA 200-301
Planned
Cisco Network Automation · Wireless Foundations · SD-WAN
Planned
Cisco CyberOps Associate (Cybersecurity Operations Fundamentals)
Planned
Google AI Professional Certificate
Planned
Full list with Coursera links, providers, course counts and the exam each one prepares for: wiki/certs/course-catalog.md .
Open the repository folder as an Obsidian vault . Pages link to each other with [[wiki links]] using full file names, e.g. [[L09 - Routing Technologies]].
Start from wiki/index.md (catalog) or wiki/overview.md (status and roadmap).
Add a lesson: drop the transcript in raw/transcripts/<track>/ and ask the coach to ingest it. The workflow in CLAUDE.md creates the lesson page and updates the index, concept pages, cert page, log, and this README.
Practice: take a quiz from wiki/quizzes/<course>/, paste your answers for grading, and weak areas are logged automatically.
The original notes, lesson pages, concept pages, quizzes, and practice exams in wiki/ are licensed under Creative Commons Attribution-NonCommercial-ShareAlike 4.0 (CC BY-NC-SA 4.0).
Excluded: third-party material in raw/ (course transcripts and articles) remains the property of its original authors (Coursera course providers, CompTIA, Google Cloud, and others). It is kept only as private study reference and is not covered by this license. CompTIA, Network+, Google Cloud, AWS, Azure, Kubernetes, and other names are trademarks of their respective owners. This project is not affiliated with or endorsed by them.