Study guide · Exam overview

CCNA: what 200-301 expects

The format, scoring, and six published domains of Cisco CCNA 200-301 v1.1, plus what changes when v2.0 opens on February 3, 2027.

Current exam: 200-301 v1.1120 minutes · pass/failReviewed October 2026

Exam version notice: This overview follows the Cisco exam topics for Implementing and Administering Cisco Solutions (200-301 CCNA) v1.1, reviewed in October 2026. The last day to test v1.1 is February 2, 2027. v2.0 uses the same exam code and opens on February 3, 2027. The exam is 120 minutes. Cisco reports pass or fail, usually within 48 hours, and does not publish a numeric cut score or a question count. The published price is 300 US dollars, or Cisco Learning Credits. Items tagged Extra are useful context the v1.1 topic list does not name. Items tagged v2.0 belong to the next blueprint. Confirm the version, fee, and PDF with Cisco before you register.

What CCNA covers

CCNA is Cisco's associate certification for people who install, configure, and verify a small to medium network. Exam 200-301 checks whether you can subnet an address, place a host in the right VLAN, read a routing table, bring up single-area OSPFv2, and apply an ACL or a Layer 2 control such as port security. It also asks you to explain wireless, NAT, syslog, and how a controller and a REST API change operations. It is not a design-architect exam, and it does not ask you to build a multi-area OSPF domain or configure EIGRP.

Who it is for

  • Network technicians who configure switches, routers, and wireless
  • Help-desk staff moving into network operations
  • Candidates who already know vendor-neutral ideas from Network+ and now need Cisco syntax

What the exam verifies

  • Which address, VLAN, or route explains a symptom
  • Which Cisco command or GUI setting implements the choice
  • Which security or automation idea limits the blast radius

Exam format

Figures below come from Cisco's CCNA pages and the v1.1 exam topics reviewed in October 2026.

Cisco CCNA 200-301 v1.1 exam facts. Confirm the fee and testing policy with Cisco before you book.
Specification200-301 v1.1
LevelAssociate. No prior certification is required. Cisco recommends hands-on experience with Cisco solutions.
Length of test120 minutes.
Question typesMultiple choice, drag-and-drop, and performance-based items. An exam tutorial is available before you start.
Number of questionsCisco does not publish a fixed count.
ScoringPass or fail. Results are typically available online within 48 hours. Cisco does not publish a numeric cut score.
Topicsv1.1. Six domains. The last day to test this version is February 2, 2027.
LanguagesEnglish and Japanese. Confirm availability with Cisco.
Exam price300 US dollars, or Cisco Learning Credits, on the Cisco page reviewed in October 2026. Regional pricing can change.
ValidityThree years from the pass date. Confirm recertification options with Cisco.
Next version200-301 v2.0 opens on February 3, 2027. A pass on either version earns CCNA.

v1.1 and v2.0

Book the version that matches your test date. The exam code stays 200-301.

Domain weights published for each blueprint. v1.1 ends February 2, 2027. v2.0 starts February 3, 2027. Confirm the PDF before you book.
v1.1 domainv1.1 weightv2.0 domainv2.0 weight
Network Fundamentals20%Network Infrastructure and Connectivity25%
Network Access20%Switching and Network Access25%
IP Connectivity25%IP Routing20%
IP Services10%Network Services and Security20%
Security Fundamentals15%
Automation and Programmability10%AI, and Network Operations and Management10%

Both versions are 120 minutes and pass/fail. The notes, flashcards, and 200 practice questions on this site follow v1.1, because that is the exam you can sit through February 2, 2027. Use the list below if your date is later.

  • More diagnosis. v2.0 asks you to troubleshoot addressing, cables, DHCP, and routing instead of only describing them. OSPFv3 sits next to OSPFv2.
  • Services and security merge. NAT, ACLs, AAA, and Layer 2 protections share one 20 percent domain.
  • Automation shifts toward operations. v2.0 adds agentic AI and how you choose a prompt. Ansible, SNMP, and syslog remain. REST, JSON, Terraform, and QoS marking are v1.1 topics that the v2.0 list drops. v2.0

A CCNA earned on v1.1 stays valid for three years from the pass date. It does not have to be retaken when v2.0 opens.

Published domains

Cisco publishes these v1.1 weights. The 200 practice questions use the same share.

  • 1. Network Fundamentals20%
  • 2. Network Access20%
  • 3. IP Connectivity25%
  • 4. IP Services10%
  • 5. Security Fundamentals15%
  • 6. Automation and Programmability10%
Domain 120%

Network fundamentals

The devices, the cable, and the address a host is given.

  • Routers, switches, APs, controllers, and PoE
  • Two-tier, three-tier, spine-leaf, and SOHO
  • IPv4 subnetting and IPv6 address types
  • TCP versus UDP, and virtualization
Domain 220%

Network access

How frames move inside one site.

  • VLANs, trunks, and inter-VLAN routing
  • Rapid PVST+, PortFast, and the guards
  • LACP EtherChannel, CDP, and LLDP
  • Wireless architectures and the WLC GUI
Domain 325%

IP connectivity

The largest domain. How a packet picks a next hop.

  • Longest prefix, then administrative distance, then metric
  • Static routes, including a floating static
  • Single-area OSPFv2 and the router ID
  • First-hop redundancy
Domain 410%

IP services

The services a router or switch is asked to provide.

  • Inside source NAT and PAT
  • DHCP client and relay, plus DNS
  • NTP, SNMP, syslog, and SSH
  • QoS behavior, TFTP, and FTP
Domain 515%

Security fundamentals

The controls you configure, not a full security-architect exam.

  • Threats, passwords, and AAA
  • Standard and extended ACLs
  • Port security, DHCP snooping, and DAI
  • WPA2, WPA3, and IPsec VPN types
Domain 610%

Automation and programmability

How a controller and an API replace one-device CLI work.

  • Underlay, overlay, and the two API directions
  • REST verbs and JSON
  • Ansible and Terraform
  • Generative AI, predictive AI, and machine learning

Ideas to recognize

Learn the unmarked rows first. The same map is in the core notes and flashcards.

High-yield CCNA distinctions. Extra rows are useful context the v1.1 topic list does not name. v2.0 rows are on the next blueprint.
PairHow to separate them
Longest prefix and ADThe longest matching prefix wins. Administrative distance is used only when two sources offer that same prefix.
Connected, static, OSPFConnected is 0, static is 1, OSPF is 110. A lower number is more trusted.
Access and trunkAn access port carries one data VLAN, untagged. A trunk carries many VLANs with 802.1Q. The native VLAN is the untagged one.
Root port and designated portThe root port is the switch's best path toward the root bridge. The designated port is the forwarding port for that segment.
BPDU Guard and Root GuardBPDU Guard error-disables an edge port that receives a BPDU. Root Guard stops a port from becoming root if a superior BPDU arrives.
NAT and PATStatic NAT maps one inside address to one public address. PAT, also called overload, also translates ports so many hosts share one public address.
Standard and extended ACLA standard ACL filters the source only. An extended ACL can filter protocol, source, destination, and port.
WPA2 and WPA3WPA2-Personal uses a pre-shared key and AES-CCMP. WPA3-Personal uses SAE. The v1.1 GUI task is WPA2 PSK.
Northbound and southboundA northbound API faces the application. A southbound API faces the network devices.
Chef and Puppet Extrav1.1 removed them from the configuration-management list. Learn Ansible and Terraform for this version.
OSPFv3 v2.0v1.1 configures OSPFv2. v2.0 adds OSPFv3 for IPv6. Do not expect an OSPFv3 lab on a v1.1 exam.

How CCNA questions are written

Many items are multiple choice. Some ask you to choose two answers, and the stem says so. Drag-and-drop items ask you to match a command to a job or put a process in order. Performance-based items show a topology or a short configuration and ask what is missing. Read FIRST, NEXT, and BEST as ordering words: the right command at the wrong step is still wrong.

Cisco can ask about any task in the topic list, including a show command you must read. This site's practice questions are original and are not a device simulator. Confirm command syntax on a lab before test day.

How to plan your CCNA study

A practical sequence if masks, trunks, and show ip route still blur together. Use v1.1 if you test by February 2, 2027.

01

Subnet until the mask is a reflex

Know /24 through /30 host counts, the three private blocks, and the network and broadcast of a given host. Then do the same idea in IPv6: global, unique local, link-local, and EUI-64.

02

Build one VLAN path

Access port, voice VLAN, 802.1Q trunk, native VLAN, then inter-VLAN routing with a router-on-a-stick or an SVI. Add LACP only after both ends match.

03

Say how spanning tree picks a port

Lowest bridge ID is root. Then root port, designated port, and the port that blocks. Put PortFast and BPDU Guard on edge ports. Know what Root Guard and Loop Guard each stop.

04

Read a route, then build OSPF

Longest prefix, then administrative distance, then metric. Configure a static route and a floating static. Then single-area OSPFv2: router ID, a point-to-point link, and a broadcast link that elects a DR.

05

Add services and a control

NAT overload, a DHCP relay, NTP, syslog levels, and SSH. Then a numbered extended ACL, port security, DHCP snooping, and WPA2 PSK on the WLAN GUI.

06

Explain the controller, then sit a timed exam

Separate underlay from overlay, and a northbound API from a southbound one. Read a small JSON object. Use the four flashcard decks until you answer before the card flips. Then take original questions and return to any domain under 75 percent. Use 120 minutes as the pace of the live exam. Treat the percentage as a personal trend, not a Cisco score.

The NodnWebTools CCNA study path

The overview, core notes, flashcards, and practice exams are all published.

CCNA hub →
Available · You are here

Overview

Exam format, pass/fail scoring, six domain weights, and the February 2027 v2.0 change.

Available

Core Notes

Reference notes for addresses, VLANs, spanning tree, OSPF, services, security, and automation.

Available

Flashcards & Memory Notes

40 recall cards in four decks, plus memory notes for masks, administrative distance, and syslog.

Available

Practice Exams

200 original questions with custom exams, explanations, and an unofficial percentage.

Frequently asked questions

How long is the CCNA 200-301 exam?

Cisco allows 120 minutes. Questions include multiple choice, drag-and-drop, and performance-based items. Cisco does not publish the number of questions. Confirm the current details with Cisco before you book.

What score do I need to pass CCNA?

Cisco reports a pass or fail result, usually within 48 hours, and does not publish a numeric passing score. This site reports an unofficial percentage. A practice percentage does not predict a Cisco result.

Should I study v1.1 or v2.0?

Study v1.1 if you test on or before February 2, 2027. Study v2.0 if you test on or after February 3, 2027. Both versions use exam code 200-301. The certification you earn is CCNA either way.

Does CCNA expire?

Yes. Cisco certifications are valid for three years from the date you pass. Confirm the current recertification options with Cisco.

Are there prerequisites for CCNA?

No prior certification is required. Cisco recommends experience implementing and administering Cisco solutions. Confirm the current recommendation on the Cisco certification page.

Does this page include real Cisco exam questions?

No. The practice questions on this site are original. They are not Cisco exam items, and a practice score does not predict a result.

Related Tools

Useful companions while you study.

All study topics →