Skip to main content

NetworkingProfessionalAQS-RS

IICTI Certified Routing and Switching Professional

Professional certification covering 11 modules, from advanced IGP design: OSPF/IS-IS areas, levels and fast convergence to telemetry, observability and advanced fault isolation.

Exam
1 h 30 min
Questions
120
Pass mark
70%
Valid for
3 years

About this certification

Holders demonstrate that they can apply and evaluate advanced IGP design: OSPF/IS-IS areas, levels and fast convergence, bGP architecture, path selection and policy at scale, routing security and internet edge hardening and mPLS, segment routing and traffic engineering, plus 7 further areas, in realistic professional scenarios, as defined in the AQSCERT scheme for Routing and Switching Professional.

Who it is for: Professionals working, or preparing to work, in networking roles.

Syllabus

What you'll be assessed on — 11 modules. The percentage is each module's share of the exam.
  1. 01Advanced IGP design: OSPF/IS-IS areas, levels and fast convergence17% of the exam
    • Design and tune link-state IGP topologies for sub-second convergence and scale.
    • Scope: Multi-area OSPFv2/v3 and multi-level IS-IS design, LSA/LSP flooding control, summarization, SPF/PRC throttling, LFA/rLFA/TI-LFA, BFD and graceful restart.
  2. 02BGP architecture, path selection and policy at scale13% of the exam
    • Architect BGP policy for enterprise, data center and provider-edge routing domains.
    • Scope: iBGP route reflection and confederations, best-path algorithm, ADD-PATH, BGP PIC, communities and large communities, route-maps/RPL, multihoming and traffic engineering with MED, local-pref and AS-path.
  3. 03Routing security and internet edge hardening8% of the exam
    • Evaluate and harden routing infrastructure against hijacks, leaks and control-plane attacks.
    • Scope: RPKI/ROV and ASPA, BGPsec status, MANRS, prefix and max-prefix filtering, GTSM, TCP-AO, control-plane policing (CoPP) and uRPF.
  4. 04MPLS, segment routing and traffic engineering8% of the exam
    • Design MPLS and segment-routing transport with deterministic traffic-engineered paths.
    • Scope: LDP, RSVP-TE, SR-MPLS and SRv6 (uSID), SR-TE policies, Flex-Algo, PCE/PCEP, L3VPN and EVPN-based L2VPN services.
  5. 05Data center fabrics: VXLAN EVPN and Clos design7% of the exam
    • Architect scalable VXLAN EVPN fabrics and evaluate multi-site interconnect options.
    • Scope: Leaf-spine Clos and BGP-only underlays (RFC 7938), VXLAN EVPN route types 2/3/5, symmetric IRB, anycast gateway, ESI multihoming, multi-site/DCI.
  6. 06Layer 2 resilience: STP variants, MLAG and loop prevention13% of the exam
    • Diagnose and design resilient Layer 2 domains with contained failure blast radius.
    • Scope: RSTP/MSTP region design, root/BPDU/loop guard, MLAG/vPC and ESI-LAG failure domains, storm control, unidirectional link detection and migration away from STP-dependent designs.
  7. 07Multicast routing design and troubleshooting7% of the exam
    • Design and troubleshoot multicast delivery across campus, DC and provider networks.
    • Scope: PIM-SM/SSM/BiDir, RP placement and Anycast-RP/MSDP, IGMP/MLD snooping, RPF checks, multicast in EVPN and MVPN.
  8. 08IPv6 transition and dual-stack routing architecture7% of the exam
    • Lead dual-stack and IPv6-only migration with secure first-hop and routing design.
    • Scope: IPv6 addressing plans, OSPFv3/IS-IS MT/MP-BGP for IPv6, RA guard and first-hop security, NAT64/DNS64, 464XLAT and IPv6-only/IPv6-mostly strategies.
  9. 09QoS architecture and congestion management7% of the exam
    • Design end-to-end QoS policies and evaluate their behavior under congestion.
    • Scope: DiffServ PHBs and DSCP marking schemes, queuing (LLQ/CBWFQ/WRED), shaping and policing, buffer tuning in DC switches, ECN/PFC for lossless fabrics.
  10. 10Network automation, programmability and intent validation6% of the exam
    • Architect automated, version-controlled network change pipelines with pre-deployment validation.
    • Scope: YANG/OpenConfig, NETCONF/RESTCONF/gNMI, Ansible and Nornir, CI/CD for network config, digital twins and pre-change verification (Batfish, containerlab).
  11. 11Telemetry, observability and advanced fault isolation7% of the exam
    • Diagnose complex multi-layer routing and switching incidents using telemetry and systematic analysis.
    • Scope: Model-driven streaming telemetry, sFlow/IPFIX, BMP, packet capture and ERSPAN, control-plane versus data-plane fault analysis, structured root-cause methodology.

Competencies assessed

  • High availability and redundancy — Apply and evaluate high availability and redundancy in realistic professional scenarios.
  • Network telemetry and diagnostics — Apply and evaluate network telemetry and diagnostics in realistic professional scenarios.
  • Configuration automation — Apply and evaluate configuration automation in realistic professional scenarios.

Exam blueprint

Multiple-choice examination (120 questions, 4 options, single correct answer) built from professional scenarios.
Questions per module120 questions · 1 h 30 min · pass 70%
  • Advanced IGP design: OSPF/IS-IS areas, levels and fast convergence20
  • BGP architecture, path selection and policy at scale16
  • Routing security and internet edge hardening10
  • MPLS, segment routing and traffic engineering10
  • Data center fabrics: VXLAN EVPN and Clos design9
  • Layer 2 resilience: STP variants, MLAG and loop prevention16
  • Multicast routing design and troubleshooting8
  • IPv6 transition and dual-stack routing architecture8
  • QoS architecture and congestion management8
  • Network automation, programmability and intent validation7
  • Telemetry, observability and advanced fault isolation8
Question types
Single choice 100%
Delivery
Online (remote proctored), Test centre, On-site (corporate)
Retakes
Up to three attempts within any 12-month period. A 14-day waiting period applies after a first unsuccessful attempt and 30 days after a second. Each retake requires a new booking and fee. Retakes draw a different randomised form from the question bank.

Provisional cut score — psychometric validation is required before live delivery. Blueprint v1.0.

Your path to certification

  1. 1

    Register

    Create a free account and start the programme.

  2. 2

    Practice

    Online practice test (coming soon).

  3. 3

    Training

    Optional

    Online course or classroom — or skip it.

  4. 4

    Certification

    Independent exam and certification decision.

Training is optional and does not by itself confer certification. Find a training partner

Eligibility & prerequisites

Required

  • Valid government-issued photo identification
  • Agreement to abide by the AQSCERT Code of Professional Conduct

Recommended

  • No formal prerequisites; relevant professional experience is strongly recommended

More information

Certification process
  1. 1. Application — Create an account and apply for this certification.
  2. 2. Eligibility review — AQSCERT checks the formal eligibility requirements.
  3. 3. Assessment — Sit the 1 h 30 min examination online or at a test centre.
  4. 4. Independent decision — A decision maker not involved in your training or assessment reviews all evidence.
  5. 5. Issuance — A digitally signed certificate with QR verification, valid for 3 years.
  6. 6. Recertification — Before expiry, evidence 60 hours of CPD or re-sit the examination.
  7. Certificates may be suspended, withdrawn or revoked in line with the Certification Scheme. Status is always shown on the public verification page.
Scheme & accreditation
Certification scheme
Networking Certification Scheme
Scheme code
AQS-SCH-IT-06
Scheme version
v1.0 (effective 1 Jan 2026)

Accreditation: AQSCERT is accredited by DA, an IAF MLA signatory, to ISO/IEC 17024. Our programmes are developed by leading experts from industry.

Ready to start AQS-RS?

Practise online, add optional training, then sit the independent exam.

  • Professional

    AQS-NE

    IICTI Certified Network Engineer

    Professional certification covering 11 modules, from advanced IGP design and fast convergence engineering to network resilience, change governance and capacity planning.

    Exam duration
    1 h 30 min
    Questions
    120 questions

    Exam fee from

    €130

  • Professional

    AQS-NA

    IICTI Certified Network Administrator

    Professional certification covering 12 modules, from enterprise routing design with OSPF, IS-IS and BGP policy to network resilience, change governance and capacity planning.

    Exam duration
    1 h 30 min
    Questions
    120 questions

    Exam fee from

    €130

IICTI Certified Routing and Switching Professional (AQS-RS) · AQSCERT