Pair the course with lab practice.
Study discussions recommend using Jeremy’s lessons or another main course with regular Packet Tracer practice, then adding timed exams near the end.
Cisco Certified Network Associate (CCNA) (200-301) Exam Guide
Validates knowledge of network fundamentals, routing, switching, IP services, security and automation for managing connected systems.
Combine one main course with frequent configuration labs. Learn to predict how packets move, read the relevant output and explain why a configuration works. This guide follows the v1.1 exam, which runs until February 2, 2027.
Understand the exam
Syllabus
1.0Network fundamentals20%
- 1.1Explain the role and function of network components
- 1.2Describe characteristics of network topology architectures
- 1.3Compare physical interface and cabling types
- 1.4Identify interface and cable issues (collisions, errors, mismatch duplex, and/or speed)
- 1.5Compare TCP to UDP
- 1.6Configure and verify IPv4 addressing and subnetting
- 1.7Describe private IPv4 addressing
- 1.8Configure and verify IPv6 addressing and prefix
- 1.9Describe IPv6 address types
- 1.10Verify IP parameters for Client OS (Windows, Mac OS, Linux)
- 1.11Describe wireless principles
- 1.12Explain virtualization fundamentals (server virtualization, containers, and VRFs)
- 1.13Describe switching concepts
2.0Network access20%
- 2.1Configure and verify VLANs (normal range) spanning multiple switches
- 2.2Configure and verify interswitch connectivity
- 2.3Configure and verify Layer 2 discovery protocols (Cisco Discovery Protocol and LLDP)
- 2.4Configure and verify (Layer 2/Layer 3) EtherChannel (LACP)
- 2.5Interpret basic operations of Rapid PVST+ Spanning Tree Protocol
- 2.6Describe Cisco Wireless Architectures and AP modes
- 2.7Describe physical infrastructure connections of WLAN components (AP, WLC, access/trunk ports, and LAG)
- 2.8Describe network device management access (Telnet, SSH, HTTP, HTTPS, console, TACACS+/RADIUS, and cloud managed)
- 2.9Interpret the wireless LAN GUI configuration for client connectivity, such as WLAN creation, security settings, QoS profiles, and advanced settings
Example scenario: Two hosts in the same VLAN can communicate on one switch but not across a trunk. Which configuration and show-command output would you inspect?
3.0IP connectivity25%
- 3.1Interpret the components of routing table
- 3.2Determine how a router makes a forwarding decision by default
- 3.3Configure and verify IPv4 and IPv6 static routing
- 3.4Configure and verify single area OSPFv2
- 3.5Describe the purpose, functions, and concepts of first hop redundancy protocols
Example scenario: Two routes match a destination, but they have different prefix lengths and administrative distances. Which route will the router select, and why?
4.0IP services10%
- 4.1Configure and verify inside source NAT using static and pools
- 4.2Configure and verify NTP operating in a client and server mode
- 4.3Explain the role of DHCP and DNS within the network
- 4.4Explain the function of SNMP in network operations
- 4.5Describe the use of syslog features, including facilities and severity levels
- 4.6Configure and verify DHCP client and relay
- 4.7Explain the forwarding per-hop behavior (PHB) for QoS such as classification, marking, queuing, congestion, policing, and shaping
- 4.8Configure network devices for remote access using SSH
- 4.9Describe the capabilities and functions of TFTP/FTP in the network
5.0Security fundamentals15%
- 5.1Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques)
- 5.2Describe security program elements (user awareness, training, and physical access control)
- 5.3Configure and verify device access control using local passwords
- 5.4Describe security password policy elements, such as management, complexity, and password alternatives (multifactor authentication, certificates, and biometrics)
- 5.5Describe IPsec remote access and site-to-site VPNs
- 5.6Configure and verify access control lists
- 5.7Configure and verify Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security)
- 5.8Compare authentication, authorization, and accounting concepts
- 5.9Describe wireless security protocols (WPA, WPA2, and WPA3)
- 5.10Configure and verify WLAN within the GUI using WPA2 PSK
6.0Automation and programmability10%
- 6.1Explain how automation impacts network management
- 6.2Compare traditional networks with controller-based networking
- 6.3Describe controller-based, software defined architecture (overlay, underlay, and fabric)
- 6.4Explain AI (generative and predictive) and machine learning in network operations
- 6.5Describe characteristics of REST-based APIs (authentication types, CRUD, HTTP verbs, and data encoding)
- 6.6Recognize the capabilities of configuration management mechanisms such as Ansible and Terraform
- 6.7Recognize components of JSON-encoded data
Official CCNA exam topics · 200-301 v1.1
v2.0 replaces v1.1 on February 3, 2027. The six domains become five, including a new domain on AI and network operations.
1.0Network Infrastructure and Connectivity25%
- 1.1Diagnose interface and cable (copper and fiber) issues such as collisions, errors, mismatched duplex, speed, distance, interface, signal levels, pin out, and cable types
- 1.2Describe the role and function of hypervisors, virtual machines, and containers
- 1.3Troubleshoot IPv4 address configuration, assignment, and subnetting (public and private)
- 1.4Troubleshoot IPv6 address configuration, assignment, and prefix sizing (unicast and modified EUI 64)
- 1.5Describe wireless principles
- 1.6Troubleshoot wired and wireless client connectivity (IP configuration, network reachability, and wireless security parameters on Windows, MacOS, and Linux)
- 1.7Troubleshoot DHCPv4 client, server, and relay on IOS devices
2.0Switching and Network Access25%
- 2.1Configure network infrastructure connectivity (switch-to-switch and switch-to-router)
- 2.2Configure Layer 2 switch port attributes for edge-host connectivity (VLAN, PoE, port channel, and LACP)
- 2.3Validate the accuracy of network documentation using CDP and LLDP
- 2.4Troubleshoot basic Layer 2/Layer 3 connectivity and device operations using show commands (including show logs), ping, extended ping, trace route, and packet capture output
- 2.5Configure operations of the Rapid Per VLAN Spanning Tree Protocol (Rapid PVST+)
3.0IP Routing20%
- 3.1Interpret a routing table to identify the next hop for a packet (routing protocol, prefix/mask, administrative distance, metric, and default route)
- 3.2Troubleshoot IPv4 and IPv6 static routing
- 3.3Configure single area OSPFv2 for IPv4 and OSPFv3 for IPv6
- 3.4Interpret the operational status of First Hop Redundancy Protocols (HSRP and VRRP)
4.0Network Services and Security20%
- 4.1Configure network devices with local usernames and as an AAA client (TACACS+ and RADIUS) for management
- 4.2Manage device configuration and software files using secure file transfer operations with SFTP/SCP
- 4.3Configure NAT/PAT on IOS XE routers
- 4.4Diagnose issues with DNS records (A, AAAA, CNAME, MX, NS, and PTR) to support host, web application, and mail server access by name
- 4.5Describe IPsec remote access and site-to-site VPNs (protocols and transport modes)
- 4.6Configure IPv4 access control lists (standard, extended, numbered, and named ACLs)
- 4.7Configure Layer 2 security features
5.0AI, and Network Operations and Management10%
- 5.1Describe the role of agentic AI in network operations
- 5.2Select a prompt to send to a generative AI system to support network operations considering prompt components such as data classification, output format, persona, and instructions
- 5.3Describe network management approaches (device-based, cloud-based, controller-based, automation-based, and infrastructure as code)
- 5.4Describe the function of SNMP in network operations
- 5.5Use configuration management mechanisms such as Ansible to execute commands
- 5.6Interpret syslog message content, severity levels, and facilities
Official CCNA v2.0 exam topics · 200-301 v2.0
Format
- Duration
- 2h
- Delivery
- Test centre or online
- Languages
- English, Japanese
Question types
Choose the best answer from the options, or the stated number of answers when a question asks for more than one.
CertUp example
A switch port is configured as an access port in VLAN 20. Which traffic does the port carry?
Show answer
A. An access port belongs to one VLAN and sends and receives its frames untagged; only a trunk port tags frames.
Move items into the correct slots or match them to the correct description.
CertUp example
Drag each route source to its default administrative distance. The values are 1, 90, 110 and 0.
Show answer
Connected → 0, Static → 1, EIGRP (internal) → 90, OSPF → 110.
Complete a hands-on task on simulated devices, such as configuring a feature or reading command output to find a fault.
CertUp example
On the simulated switches, bundle GigabitEthernet0/1 and GigabitEthernet0/2 into a Layer 2 EtherChannel that uses LACP, then confirm that it is up.
Show answer
Configure both interfaces with channel-group 1 mode active, then check that show etherchannel summary lists Po1 as in use (SU) with both ports bundled (P).
Eligibility and booking
Create your Cisco certification account, then schedule 200-301 through Pearson VUE. Wait five calendar days after a failed attempt before retesting.
Make a study plan
Work through networking foundations first, then alternate lessons with configuration and troubleshooting.
Most candidates spend 120–300 hours. Plan for the low end if you already work with routers and switches; plan for the high end if networking is new to you, and keep lab and mock-exam time.
- 1Understand the examRead the syllabus and format, check you’re eligible and pick a target date.11 h
- 3Learn the core conceptsWork through one main course or book, topic by topic.125 h
- 4Practice with mock examsTake timed practice tests and review every mistake.63 h
- 5Prepare for exam dayBook the exam and check the ID and delivery rules.11 h
Learn the core concepts
Use one main course and keep Packet Tracer open while you study. A book is useful for deeper explanations and review.
Best free courseCCNA 200-301 Complete Course
Best paid video courseCCNA 200-301 Full Course
Best v2.0 coverageCCNA 200-301 Complete GuideType the commands. Rebuild a lab without the walkthrough, then explain how you know the network is working.
Practice with mock exams
Use questions to find conceptual gaps and labs to test practical skills. Review every wrong answer and the commands that would confirm it.
CCNA 200-301 Free Practice TestJeremy's IT Lab Free CCNA Course (quizzes and flashcards)
ExSim-Max for Cisco 200-301 CCNAAre you ready?
- You can subnet and explain a routing-table decision.
- You can configure and verify VLANs, trunks, routing and basic security without a walkthrough.
- You can troubleshoot an unfamiliar fault using command output.
- You can finish timed practice and explain why the incorrect options fail.
Prepare for exam day
Choose the checklist for your delivery route.
Before travelling to Pearson VUE
Before testing with OnVUE
- Check the appointment details, route and arrival time.
- Bring the identification required in your booking, with your legal name matching the registration.
- Leave notes and personal devices outside the testing room.
- Read practical-task instructions and manage the 120-minute clock.
- Run the OnVUE system test on the computer and connection you will use.
- Prepare a private room, clear desk and working webcam.
- Have your accepted ID ready and follow the check-in instructions.
- Close other applications and follow the proctor’s instructions throughout the exam.
Advice from exam takers
Give security and automation their own review.
One passer singled out these domains as weaker areas after otherwise strong results. Check them explicitly in your own practice results.