The Cisco Certified Network Associate (CCNA) is one of the most recognized networking certifications. The exam covers a lot of ground, from subnetting and VLANs to OSPF, access control lists, and REST APIs, so it’s normal to feel a bit overwhelmed at the start.

In this guide, we’ll walk you through the exam format, all six domains of the current CCNA outline and their weights, the official resources worth bookmarking, and the questions candidates ask most often.

What Is the Cisco CCNA Exam?

The CCNA is Cisco’s associate-level networking certification. You earn it by passing a single exam: 200-301 CCNA, Implementing and Administering Cisco Solutions. Cisco lists no formal prerequisites, so anyone can register.

The exam validates the skills needed to configure, operate, and troubleshoot small to medium-sized enterprise networks, from switching and routing to security, wireless, and automation basics. It isn’t a pure memorization test. Many objectives begin with “configure and verify,” which means you need to know which commands do what and how to read the output of show commands.

What Is the CCNA Exam Format?

Here is the exam at a glance, based on Cisco’s 200-301 CCNA exam page, the CCNA v1.1 exam topics, and Cisco’s exam policies:

  • Exam code and version: 200-301 CCNA v1.1, effective August 20, 2024.
  • Time: 120 minutes.
  • Questions: Cisco does not publish an official question count. Candidates commonly report roughly 100 to 120 questions.
  • Question types: Expect multiple-choice questions (single- and multiple-answer) and drag-and-drop items. Because so many objectives say “configure and verify,” be ready for simulation-style questions that ask you to interpret or enter IOS commands.
  • Delivery: Scheduled through Pearson VUE, either at a test center or online with a remote proctor.
  • Languages: English and Japanese.
  • Passing score: Cisco does not publish passing scores. Its policy states that they are set by statistical analysis and may change without notice.
  • Results: You receive a score report at the end of your session that includes performance by exam section.
  • Fee: The exam page lists US$300, and Cisco Learning Credits are accepted. Check the exam page for current pricing in your region.

That works out to roughly a minute per item, and simulations take longer. Candidates also report that you can’t return to earlier questions, so answer each one fully before moving on.

What Content Outline Does the CCNA Exam Use?

The current exam follows the CCNA v1.1 (200-301) outline, effective August 20, 2024. Cisco’s CCNA v1.1 release notes summarize what changed from v1.0: Cisco added root guard, loop guard, BPDU filter, and BPDU guard to the spanning tree objective, added AI (generative and predictive) and machine learning in network operations, added REST API authentication types, expanded device management to include cloud-managed access, and replaced Puppet and Chef with Terraform alongside Ansible.

The outline has six domains:

  • 1.0 Network Fundamentals: 20%
  • 2.0 Network Access: 20%
  • 3.0 IP Connectivity: 25%
  • 4.0 IP Services: 10%
  • 5.0 Security Fundamentals: 15%
  • 6.0 Automation and Programmability: 10%

Domain 1: Network Fundamentals (20%)

This domain is the foundation for everything else. It covers what each network component does, how networks are designed, how data moves at Layers 2 and 3, and how IPv4 and IPv6 addresses work.

  • Roles of routers, Layer 2 and Layer 3 switches, next-generation firewalls and IPS, access points, controllers, endpoints, servers, and PoE.
  • Topology architectures: two-tier, three-tier, spine-leaf, WAN, SOHO, and on-premises vs. cloud.
  • Cabling (single-mode fiber, multimode fiber, copper) and interface issues such as collisions, errors, and duplex or speed mismatches.
  • TCP vs. UDP, IPv4 addressing and subnetting, private IPv4 ranges, and IPv6 addressing, prefixes, and address types (global unicast, unique local, link-local, anycast, multicast, modified EUI-64).
  • Verifying IP settings on Windows, macOS, and Linux clients, wireless principles, virtualization (servers, containers, VRFs), and switching concepts like MAC learning and flooding.

Study tip: Subnetting shows up across the entire exam, not only here. Practice until you can find the network, broadcast, and usable host range of any /24 through /30 prefix in under a minute.

Domain 2: Network Access (20%)

Network Access is about connecting devices at Layer 2 and managing them. VLANs, trunks, EtherChannel, spanning tree, and wireless LAN architecture all fall under this.

  • Configure and verify VLANs across multiple switches, including data and voice access ports, the default VLAN, and inter-VLAN connectivity.
  • Configure and verify trunks, 802.1Q, and the native VLAN.
  • Configure Cisco Discovery Protocol and LLDP, and Layer 2/Layer 3 EtherChannel with LACP.
  • Interpret Rapid PVST+ operation: root bridge election, port roles and states, PortFast, root guard, loop guard, BPDU filter, and BPDU guard.
  • Cisco wireless architectures and AP modes, WLAN physical connections (AP, WLC, LAG), management access (Telnet, SSH, HTTP/HTTPS, console, TACACS+/RADIUS, cloud managed), and WLAN GUI configuration.

What questions look like: You might see show interfaces trunk output from two switches and need to spot a native VLAN mismatch or a VLAN missing from the allowed list.

Domain 3: IP Connectivity (25%)

The largest domain covers how routers decide where to send packets. It is heavily hands-on, and many candidates consider it the hardest part of the exam.

  • Interpret routing table components: protocol code, prefix, mask, next hop, administrative distance, metric, and gateway of last resort.
  • Determine how a router makes a forwarding decision: longest prefix match first, then administrative distance, then metric.
  • Configure and verify IPv4 and IPv6 static routes, including default, network, host, and floating static routes.
  • Configure and verify single-area OSPFv2: neighbor adjacencies, point-to-point and broadcast networks (DR/BDR election), and router ID.
  • Describe first hop redundancy protocols (FHRPs).

Study tip: Read routing tables until they feel natural. If you can explain every field in a line of show ip route output, you’re well on your way.

Domain 4: IP Services (10%)

IP Services covers the supporting protocols that keep a network usable and manageable.

  • Configure and verify inside source NAT using static mappings and pools.
  • Configure NTP in client and server mode, and DHCP client and relay.
  • Explain DHCP and DNS, SNMP, syslog facilities and severity levels, and TFTP/FTP.
  • Explain QoS per-hop behavior: classification, marking, queuing, congestion, policing, and shaping.
  • Configure devices for remote access using SSH.

Study tip: Memorize the eight syslog severity levels (0 Emergency through 7 Debugging) and know the NAT terms inside local, inside global, outside local, and outside global.

Domain 5: Security Fundamentals (15%)

This domain blends security concepts with specific device-hardening configurations.

  • Key concepts: threats, vulnerabilities, exploits, and mitigation, plus security program elements like user awareness training and physical access control.
  • Device access control with local passwords, password policy, and alternatives such as MFA, certificates, and biometrics.
  • IPsec remote access and site-to-site VPNs.
  • Configure and verify access control lists and Layer 2 security (DHCP snooping, dynamic ARP inspection, port security).
  • AAA concepts, wireless security (WPA, WPA2, WPA3), and configuring a WLAN with WPA2 PSK in the GUI.

What questions look like: A classic item shows an ACL and asks which traffic is permitted. Remember that ACLs are processed top-down, stop at the first match, and end with an implicit deny.

Domain 6: Automation and Programmability (10%)

This domain introduces how modern networks are managed with controllers and code rather than box-by-box CLI work.

  • How automation affects network management, and traditional vs. controller-based networking.
  • Software-defined architecture: overlay, underlay, fabric, control plane vs. data plane separation, and northbound vs. southbound APIs.
  • AI (generative and predictive) and machine learning in network operations.
  • REST APIs: authentication types, CRUD operations, HTTP verbs, and data encoding.
  • Configuration management with Ansible and Terraform, and reading JSON-encoded data.

Study tip: Map CRUD to HTTP verbs (Create = POST, Read = GET, Update = PUT/PATCH, Delete = DELETE) and practice identifying objects, arrays, and key-value pairs in JSON.

How Should You Use the CCNA Outline to Build a Study Plan?

Treat the exam topics PDF as your master checklist. It has 53 numbered objectives, and each one can be tested.

  1. Take a baseline. A mixed practice set shows where you stand.
  2. Weight your time. IP Connectivity, Network Fundamentals, and Network Access together make up 65% of the exam. Give them most of your hours.
  3. Lab the “configure and verify” objectives. Use Cisco Packet Tracer or Cisco Modeling Labs to build VLANs, trunks, OSPF, NAT, and ACLs yourself.
  4. Map every miss to an objective number. Patterns show up quickly, like repeated misses on 2.5 (spanning tree) or 3.2 (forwarding decisions).
  5. Don’t skip the 10% domains. IP Services and Automation are highly learnable and can be the difference on a close score.

What Official Resources Should You Use?

Commonly used Cisco CCNA study textbooks:

  • CCNA 200-301 Official Cert Guide, Volume 1, 2nd Edition (ISBN 978-0138229634)
  • CCNA 200-301 Official Cert Guide, Volume 2, 2nd Edition (ISBN 978-0138214951)
  • CCNA Technology Workbook (ISBN 979-8624045088)

Frequently Asked Questions About the Cisco CCNA Exam

What score do I need to pass the CCNA exam?
Cisco does not publish passing scores, and its policy says they can change without notice. Aim for consistent, comfortable performance in every domain rather than chasing a specific number.

Are there prerequisites for the CCNA?
No. Cisco lists no prerequisites. Hands-on practice with switches and routers (real or simulated) makes a big difference, though.

How soon do I get my results?
You receive a score report at the end of your session with a breakdown by exam section.

What happens if I fail the CCNA exam?
Under Cisco’s exam policies, you must wait five calendar days, starting the day after your attempt, before you can retake an associate-level exam.

How long is the CCNA valid?
Three years. You can recertify by earning 30 Continuing Education (CE) credits, retaking the exam, or advancing to a higher-level certification. See Cisco’s recertification page.

Is the Cisco CCNA exam changing soon?
Cisco has posted CCNA v2.0 exam topics on the Cisco Learning Network and reported that v2.0 will replace v1.1 on February 3, 2027, while keeping the 200-301 exam number. If you test before then, study the v1.1 blueprint. If your exam date is close to the changeover, check the Cisco exam page to confirm which version you’ll see.

Start Preparing for the Cisco CCNA Exam With Pocket Prep

Pocket Prep’s Cisco CCNA practice questions give you 650 questions aligned to the v1.1 blueprint, each with a detailed explanation, plus a full-length 120-question mock exam. Use Build Your Own Quiz to drill a single domain like IP Connectivity, then turn to the Missed Questions quiz to close your gaps. With a clear plan and steady practice, you can walk into the testing center ready to pass.