Cisco Certified Network Associate (200-301 CCNA) Study Guide
- Time limit
- 2h
- Exam fee
- $300
- Governing body
- Cisco
The Cisco Certified Network Associate (CCNA), tested through the single 200-301 exam, is the entry-level credential in Cisco's certification track and one of the most recognized networking certifications in the IT industry. It validates a broad foundation of skills spanning network fundamentals, switching and routing, IP connectivity, security basics, and modern automation concepts rather than deep specialization in any one area.
The CCNA is designed for early-career IT professionals, help desk technicians looking to move into networking, and career changers who need a credible way to demonstrate hands-on competence with routers, switches, and enterprise network concepts. It also serves as a common baseline for network engineers, systems administrators, and even security-adjacent roles who need to understand how traffic moves across an infrastructure.
Career Value
- Frequently listed as a preferred or required qualification for network administrator, NOC technician, and junior network engineer roles.
- Serves as the prerequisite mindset (though not always a formal prerequisite) for more advanced Cisco certifications, including CCNP-level tracks.
- Signals to employers that a candidate understands vendor-neutral networking theory alongside Cisco-specific configuration and troubleshooting.
Because the exam blends conceptual knowledge with practical configuration skill, earning it typically requires genuine hands-on practice, not just memorization, which is part of why employers weight it heavily when screening candidates for networking positions.
The CCNA 200-301 is a single, comprehensive exam rather than a multi-exam track, which simplifies planning but means candidates need to prepare across all topic areas at once rather than splitting study over separate tests.
Key Logistics
- Duration: The exam runs 120 minutes.
- Cost: The exam fee is 300 USD.
- Delivery: The exam is delivered through Pearson VUE, Cisco's authorized exam delivery provider.
- Proctoring: It is administered in a proctored environment at a Pearson VUE Authorized Test Center.
- Online option: Candidates can alternatively take the exam online through the OnVUE online proctored service with a live remote proctor, which requires a minimum internet speed of 6 Mbps download and 2 Mbps upload.
- Scheduling: Exams are scheduled through the Pearson VUE testing portal via a Cisco certification account.
- Validity: Once earned, the CCNA certification is valid for 3 years before recertification is required.
The 120-minute window covers a mix of question formats typical of Cisco exams, including multiple choice, drag-and-drop, and simulation-style items that test the ability to configure and troubleshoot devices, not just recall facts. Because the exam is delivered at a fixed price point through a single global testing network, candidates have flexibility in choosing between an in-person test center or a remote online session, whichever better fits their schedule and testing environment.
Given the exam fee and the breadth of material, most candidates benefit from treating the exam date as a hard deadline that anchors a structured study plan, rather than scheduling it speculatively before they feel ready.
Cisco organizes the CCNA 200-301 exam topics into 6 content domains, each carrying a different weight toward the overall score. Understanding these weightings helps candidates allocate study time proportionally instead of spreading effort evenly across topics that matter unequally on exam day.
The Six Domains
- Domain 1.0 Network Fundamentals (20%): Covers core networking concepts such as the OSI and TCP/IP models, cabling types, IPv4 and IPv6 addressing, and basic network topology architectures.
- Domain 2.0 Network Access (20%): Focuses on switching concepts including VLANs, trunking, spanning tree protocols, and wireless network fundamentals.
- Domain 3.0 IP Connectivity (25%): The most heavily weighted domain, covering routing concepts, static and dynamic routing including OSPF, and how packets are forwarded across a network.
- Domain 4.0 IP Services (10%): Covers services layered on top of routing and switching, such as NAT, NTP, DHCP, DNS, and QoS concepts.
- Domain 5.0 Security Fundamentals (15%): Covers foundational security concepts including device hardening, access control lists, VPNs, and wireless security.
- Domain 6.0 Automation and Programmability (10%): Covers the shift toward network automation, including APIs, controller-based networking, and configuration management concepts.
Because IP Connectivity is the most heavily weighted domain at 25%, candidates who allocate disproportionate study time to routing protocols and packet forwarding tend to see the strongest return relative to their preparation effort. Network Fundamentals and Network Access, each weighted 20%, together account for nearly half the exam alongside IP Connectivity, meaning the first three domains represent the bulk of the scored content.
Because the CCNA covers 6 domains ranging from foundational networking theory to hands-on device configuration, a phased study plan that moves from concepts to hands-on labs tends to work better than passive reading alone.
Weeks 1-2: Foundations
- Study Network Fundamentals: OSI/TCP-IP models, IP addressing and subnetting, cabling, and topologies.
- Practice subnetting daily until it becomes fast and automatic, since it underpins nearly every later topic.
Weeks 3-4: Switching and Access
- Work through Network Access: VLANs, trunking, spanning tree, and wireless basics.
- Begin hands-on labs in a simulator or emulator to practice real switch configuration commands.
Weeks 5-7: Routing (Highest Priority)
- Since IP Connectivity carries the largest domain weighting, dedicate the most time here: static routing, OSPF, and packet forwarding behavior.
- Build small lab topologies and troubleshoot routing issues deliberately, not just configure them correctly the first time.
Weeks 8-9: Services and Security
- Cover IP Services (NAT, DHCP, DNS, QoS) and Security Fundamentals (ACLs, VPNs, device hardening, wireless security).
- Pair each concept with a short lab exercise to cement retention.
Week 10: Automation and Review
- Study Automation and Programmability concepts, including APIs and controller-based networking, which is lighter but still tested material.
- Spend remaining days on full-length practice exams, reviewing weak domains, and timed drills that simulate the 120-minute exam window.
Throughout the plan, interleaving practice questions with reading helps surface gaps earlier than saving all testing until the end, and revisiting subnetting and routing regularly keeps the highest-weighted material sharp going into exam day.
Small logistical and strategic mistakes can cost candidates more points than gaps in knowledge, especially on an exam with a mix of question types and a fixed time limit.
Before Exam Day
- Confirm testing details in advance through the Pearson VUE testing portal, since exams are scheduled via a Cisco certification account and last-minute scheduling confusion adds unnecessary stress.
- If testing online, verify the internet connection meets the OnVUE minimum requirements of 6 Mbps download and 2 Mbps upload well before exam day, and test the OnVUE system check tool rather than assuming the connection is sufficient.
- If testing at a physical location, confirm the Pearson VUE Authorized Test Center address, arrival time, and required identification ahead of time.
During the Exam
- Budget time deliberately across the 120-minute window; simulation and drag-and-drop items often take longer than multiple-choice questions, so avoid getting stuck on any single item.
- Flag uncertain questions and move on rather than second-guessing extensively in the moment, then return if time remains.
- Read simulation prompts carefully; a common mistake is misconfiguring a device correctly for the wrong scenario because the question was skimmed too quickly.
Common Mistakes to Avoid
- Underweighting IP Connectivity in study time despite it being the most heavily weighted domain.
- Memorizing commands without understanding the underlying concepts, which fails on scenario-based and simulation questions.
- Skipping automation and programmability topics entirely because they feel unfamiliar, even though that domain is still scored.
- Arriving at a test center without proper identification or arriving late, which can result in forfeiting the exam fee.
Treating the exam as a practical skills assessment rather than a pure knowledge quiz, and rehearsing under realistic timed conditions, tends to reduce the anxiety that causes otherwise well-prepared candidates to underperform.
Preparing for an exam that spans 6 weighted domains and blends theory with hands-on configuration benefits from more than one study format, since different resource types reinforce knowledge in different ways.
Practice Questions
Timed practice questions modeled on the exam's mix of formats help build familiarity with how CCNA scenarios are worded, including multi-step troubleshooting and configuration-style prompts. Working through practice questions by domain, especially the higher-weighted ones like IP Connectivity and the equally weighted Network Fundamentals and Network Access domains, helps identify which areas need more review before attempting a full-length timed simulation of the 120-minute exam.
Flashcards
Flashcards are well suited to the high-volume factual recall the CCNA demands, such as port numbers, protocol behaviors, subnet ranges, and command syntax. Short, frequent review sessions using flashcards help keep this material fresh throughout a multi-week study plan, particularly for lighter-weighted but still-tested domains like IP Services and Automation and Programmability that are easy to neglect.
Glossary
A glossary of networking terminology gives candidates a fast reference for unfamiliar acronyms and concepts encountered while reading study material, without needing to interrupt deeper study sessions to search elsewhere. This is especially useful early in preparation, when foundational vocabulary from Network Fundamentals and Security Fundamentals is still being absorbed.
Combining these formats, conceptual reading, spaced-repetition flashcards, and scenario-based practice questions, mirrors how the actual exam tests both recall and applied understanding, which tends to produce more durable retention than any single method alone.
CCNA flashcards
29 cards on the highest-yield terms and rules. Grading uses spaced repetition and saves in this browser.
Browse all 29 cards
How many content domains make up the CCNA 200-301 exam blueprint?
Six domains: Network Fundamentals, Network Access, IP Connectivity, IP Services, Security Fundamentals, and Automation and Programmability.
Which CCNA exam domain carries the highest weight, and what is it?
IP Connectivity, weighted at 25%, making it the single most heavily tested domain on the exam.
What is the difference between a router and a switch?
A switch forwards frames between devices on the same Layer 2 broadcast domain using MAC addresses; a router forwards packets between different Layer 3 networks using IP addresses.
What are the seven layers of the OSI model, in order from Layer 1 to Layer 7?
Physical, Data Link, Network, Transport, Session, Presentation, Application.
What is the purpose of VLANs?
VLANs logically segment a single physical switched network into multiple separate broadcast domains, improving security and reducing unnecessary broadcast traffic without requiring separate physical switches.
What does a trunk port do?
A trunk port carries traffic for multiple VLANs between switches (or a switch and router), tagging frames with 802.1Q VLAN IDs so the receiving device can identify which VLAN each frame belongs to.
What is the function of Spanning Tree Protocol (STP)?
STP prevents Layer 2 loops in redundant switched topologies by blocking redundant paths while keeping one loop-free active path, then re-enabling blocked ports if the active path fails.
What is the default administrative distance of OSPF versus EIGRP?
OSPF has a default administrative distance of 110, while EIGRP's internal routes default to 90 — a router prefers the route from the source with the lower administrative distance.
What is the purpose of a default gateway?
A default gateway is the router interface a host sends traffic to when the destination IP address is on a different network than the host's own subnet.
How does CIDR notation /24 relate to a subnet mask?
/24 means the first 24 bits of the 32-bit IP address are the network portion, equivalent to a subnet mask of 255.255.255.0.
What is the difference between a broadcast domain and a collision domain?
A broadcast domain is the set of devices that receive each other's broadcast frames (bounded by routers); a collision domain is a set of devices that could cause a frame collision on a shared segment (bounded by switch ports or routers).
What does DHCP do and what are its four main message types?
DHCP automatically assigns IP addressing information to hosts. Its core process uses four messages: Discover, Offer, Request, and Acknowledge (DORA).
What is the role of DNS in a network?
DNS translates human-readable domain names into IP addresses so hosts can locate and communicate with each other without users needing to memorize numeric addresses.
What is NAT and why is it used?
Network Address Translation maps private internal IP addresses to public IP addresses, conserving public IPv4 address space and hiding internal addressing from external networks.
What is the difference between static and dynamic routing?
Static routes are manually configured by an administrator and do not adapt to topology changes; dynamic routing protocols like OSPF or EIGRP automatically learn and adjust routes as the network changes.
What is EtherChannel used for?
EtherChannel bundles multiple physical switch links into one logical link, increasing available bandwidth and providing redundancy while appearing as a single link to Spanning Tree Protocol.
What is the purpose of an Access Control List (ACL)?
An ACL is an ordered set of permit/deny rules applied to router or switch interfaces that filters traffic based on criteria such as source/destination IP address, protocol, and port number.
What distinguishes TCP from UDP?
TCP is connection-oriented, providing reliable, ordered delivery with acknowledgments and flow control; UDP is connectionless and offers faster, lower-overhead delivery without reliability guarantees.
What is the function of ARP (Address Resolution Protocol)?
ARP resolves a known IPv4 address to its corresponding MAC address on a local network segment so a device can properly frame and deliver traffic at Layer 2.
What is a first-hop redundancy protocol (FHRP), and name one example?
An FHRP allows multiple routers to share a virtual IP address so hosts have a resilient default gateway if one router fails; examples include HSRP, VRRP, and GLBP.
What is the difference between IPv4 and IPv6 addressing?
IPv4 uses 32-bit addresses typically written in dotted decimal, offering a limited address space; IPv6 uses 128-bit addresses written in hexadecimal, vastly expanding available addresses and eliminating the practical need for NAT.
What is Power over Ethernet (PoE) used for?
PoE delivers electrical power to devices like IP phones, wireless access points, and cameras over the same Ethernet cable used for data, eliminating the need for a separate power source.
What is the purpose of QoS (Quality of Service)?
QoS classifies, marks, and prioritizes network traffic so that latency-sensitive or business-critical traffic (like voice or video) receives preferential treatment over less time-sensitive traffic during congestion.
What security concept does 802.1X provide?
802.1X provides port-based network access control, requiring a device to authenticate (often via a RADIUS server) before it is granted access to the network through a switch port.
What is the difference between a stateful and stateless firewall?
A stateful firewall tracks the state of active connections and permits return traffic automatically based on that state; a stateless firewall evaluates each packet independently against static rules with no awareness of connection context.
What is network automation typically achieved with in the CCNA context?
Network automation uses APIs and tools (such as RESTCONF/NETCONF and controller-based platforms) to programmatically configure and manage network devices, replacing manual box-by-box CLI configuration.
What is the difference between a controller-based and traditional network architecture?
A traditional architecture manages each device individually via its own control plane and CLI; a controller-based (SDN) architecture centralizes the control plane in a controller that programmatically manages many devices.
What does the acronym CDP stand for and what does it do?
Cisco Discovery Protocol is a Cisco-proprietary Layer 2 protocol that lets directly connected Cisco devices discover information about each other, such as device type, platform, and port ID.
How is the CCNA exam delivered and proctored?
The CCNA 200-301 exam is delivered through Pearson VUE, either at an Authorized Test Center in a proctored environment or online via the OnVUE remote-proctoring service.
CCNA glossary
23 terms the CCNA tests, defined in plain English.
- 802.1Q
- The IEEE standard for VLAN tagging that inserts a tag into an Ethernet frame to identify which VLAN the frame belongs to as it crosses a trunk link.
- ACL (Access Control List)
- An ordered list of permit or deny statements applied to a router or switch interface to filter traffic based on criteria such as source/destination address or port.
- Administrative Distance
- A value used by a router to rank the trustworthiness of a routing information source; when multiple sources offer a route to the same destination, the router prefers the one with the lowest administrative distance.
- ARP (Address Resolution Protocol)
- A protocol used to map a known IPv4 address to its corresponding MAC address on a local network segment.
- Broadcast Domain
- The set of all devices that receive a broadcast frame sent by any one device within that domain; broadcast domains are bounded by routers.
- CIDR (Classless Inter-Domain Routing)
- A method of allocating IP addresses and routing using variable-length subnet masking, expressed in slash notation (e.g., /24) to denote the number of network bits.
- Collision Domain
- A network segment where data frames sent by devices can collide with one another; each switch port on a full-duplex link forms its own collision domain.
- Default Gateway
- The router interface address a host uses to send traffic destined for networks outside its own local subnet.
- DHCP (Dynamic Host Configuration Protocol)
- A protocol that automatically assigns IP addresses and other network configuration parameters (such as default gateway and DNS servers) to hosts on a network.
- DNS (Domain Name System)
- A distributed naming system that resolves human-readable domain names to IP addresses, enabling users to reach network resources without memorizing numeric addresses.
- EIGRP (Enhanced Interior Gateway Routing Protocol)
- A Cisco-proprietary advanced distance-vector routing protocol that uses a composite metric and the DUAL algorithm to select loop-free paths.
- EtherChannel
- A link aggregation technology that bundles multiple physical Ethernet links between two switches into a single logical link for increased bandwidth and redundancy.
- HSRP (Hot Standby Router Protocol)
- A Cisco-proprietary first-hop redundancy protocol that allows multiple routers to present a single virtual default gateway IP address, providing failover if the active router goes down.
- NAT (Network Address Translation)
- A technique that translates private IP addresses used inside a network into public IP addresses for communication with external networks, and vice versa.
- NETCONF/RESTCONF
- Network management protocols that use structured, machine-readable data (XML for NETCONF, JSON/XML for RESTCONF) to programmatically configure and retrieve state from network devices, commonly used in automation.
- OSI Model
- A seven-layer conceptual framework (Physical, Data Link, Network, Transport, Session, Presentation, Application) used to describe how network communication functions and to standardize troubleshooting and protocol design.
- OSPF (Open Shortest Path First)
- A link-state interior gateway routing protocol that uses a cost metric based on bandwidth to calculate the shortest path to each destination network.
- QoS (Quality of Service)
- A set of techniques for classifying, marking, and prioritizing network traffic to ensure critical or latency-sensitive applications receive appropriate bandwidth and low delay.
- SDN (Software-Defined Networking)
- A network architecture that separates the control plane from the data plane and centralizes it in a controller, enabling programmatic, centralized management of network devices.
- Spanning Tree Protocol (STP)
- A Layer 2 protocol that prevents bridging loops in networks with redundant switch links by selectively blocking ports while maintaining backup paths for failover.
- Subnetting
- The process of dividing a larger IP network into smaller, more manageable subnetworks by borrowing bits from the host portion of an address for the network portion.
- Trunk Port
- A switch port configured to carry tagged traffic for multiple VLANs simultaneously, typically using the 802.1Q tagging standard.
- VLAN (Virtual Local Area Network)
- A logical grouping of switch ports that creates a separate broadcast domain, allowing devices to be segmented by function or department regardless of physical location.
Sources
- 1.CCNA Exam v1.0 (200-301) — Official Exam Topics — Cisco (accessed Jul 18, 2026)
- 2.Cisco IT Certification Exams — Pearson VUE — Pearson VUE (accessed Jul 18, 2026)
- 3.200-301 CCNA Exam — Cisco Certifications — Cisco (accessed Jul 18, 2026)
- 4.Cisco Online Exams with OnVUE — Pearson VUE (accessed Jul 18, 2026)
Official sources
Primary documents used to verify the exam details shown on this page.
- CCNA Exam v1.0 (200-301) — Official Exam TopicsCiscolearningcontent.cisco.com
- Occupational Employment and Wage Statistics, May 2025 — Network and Computer Systems Administrators (SOC 15-1244)U.S. Bureau of Labor Statisticsbls.goveffective May 31, 2025
- Cisco IT Certification Exams — Pearson VUEPearson VUEpearsonvue.com
- 200-301 CCNA Exam — Cisco CertificationsCiscocisco.com
- Cisco Online Exams with OnVUEPearson VUEpearsonvue.com
Last verified against the official exam content outline: