Cisco · Associate

Cisco Certified Network Associate (CCNA) (200-301) practice exam & study guide

The Cisco Certified Network Associate (CCNA 200-301) is Cisco’s associate-level certification that validates the skills to install, configure, operate, and troubleshoot networks. It covers network fundamentals, network access, IP connectivity, IP services, security fundamentals, and automation and programmability across Cisco and general networking technologies.

CCNA is a single-exam associate certification focused on Cisco and general networking. It is more configuration-oriented than a vendor-neutral exam: many questions describe a requirement and ask which command, protocol, or design implements it correctly.

This free hub gives you a complete 200-301 study base: a domain-by-domain syllabus breakdown, realistic practice questions with thorough explanations, a glossary of the networking terminology the exam expects you to know, and full-length timed mock exams that reproduce the length and pressure of the real test.

100
Questions
120 min
Time limit
75%
Mock pass %
6
Domains

Start studying 200-301

New here? Follow the three steps below in order. Everything is free and needs no account.

  1. 1
    Learn the plan

    See all 6 domains in exam-weight order.

    Open study path
  2. 2
    Drill by domain

    Practice one topic at a time with explained answers.

    Start with the first domain
  3. 3
    Sit a timed mock

    100 questions · 120 min · 75% to pass our mock.

    Take the mock exam

All 200-301 study resources

200-301 exam domains

The 200-301 exam is weighted across 6 domains. Pick any domain below to drill it — or read the full breakdown in the FAQ.

Exam domainExam weightPractice
Network Fundamentals20%Practice this topic
Network Access20%Practice this topic
IP Connectivity25%Practice this topic
IP Services10%Practice this topic
Security Fundamentals15%Practice this topic
Automation and Programmability10%Practice this topic

Sample 200-301 questions

A sample of the 200-301 questions on this hub. Each links through to the full question, the correct answer, and an explanation of why every other option is wrong.

Key 200-301 terms

Start with these terms, then explore the full glossary. Each links to a plain-English definition written for the 200-301 exam.

200-301 frequently asked questions

What is the 200-301 certification?+

Cisco describes CCNA as validating the knowledge and skills to work with enterprise networks. The 200-301 exam blends conceptual questions with hands-on configuration and troubleshooting, so you are expected to reason about routing tables, VLANs, OSPF, ACLs, and NAT the way you would on real Cisco gear.

It is broad: a single exam spans fundamentals, switching and routing, IP services, security basics, and network automation. That breadth, plus the need to subnet quickly and read device output, is what makes it a meaningful step up from an entry-level networking course.

What topics are on the 200-301 exam?+

The 200-301 exam is organised into six weighted domains. The percentages below are each domain’s share of the exam blueprint, so weight your study toward IP Connectivity and the two 20% domains (Network Fundamentals and Network Access) while still covering IP Services, security, and automation.

Network Fundamentals (20%)

The foundation and one of the two largest domains. It covers the role of network components (routers, switches, firewalls, APs, endpoints), topology architectures (two-tier, three-tier, spine-leaf, SOHO), cabling and interface issues, TCP vs UDP, IPv4 subnetting and private addressing, IPv6 addressing and types, wireless principles, virtualization (VMs, containers, VRFs), and switching concepts.

Network Access (20%)

Focuses on switching and wireless access. It spans configuring VLANs across multiple switches, interswitch connectivity and 802.1Q trunking, discovery protocols (CDP and LLDP), EtherChannel with LACP, Rapid PVST+ spanning tree operations, Cisco wireless architectures and AP modes, and WLAN configuration for client connectivity.

IP Connectivity (25%)

The largest domain. It centres on how routers move packets: interpreting the routing table (administrative distance, metric, next hop), default forwarding decisions, configuring IPv4 and IPv6 static routing, single-area OSPFv2, and the purpose and concepts of first hop redundancy protocols.

IP Services (10%)

Covers the services that support a network. It includes inside source NAT (static and pools), NTP in client/server mode, the role of DHCP and DNS, SNMP, syslog facilities and severity levels, DHCP client and relay, per-hop QoS behavior, remote access with SSH, and TFTP/FTP.

Security Fundamentals (15%)

The security domain. It covers core concepts (threats, vulnerabilities, exploits, mitigation), security program elements, device access control and password policy, IPsec remote-access and site-to-site VPN concepts, standard and extended ACLs, Layer 2 security (DHCP snooping, dynamic ARP inspection, port security), AAA, and wireless security (WPA/WPA2/WPA3).

Automation and Programmability (10%)

The newest and smallest domain. It covers how automation changes network management, traditional vs controller-based (software-defined) networking, overlay/underlay/fabric concepts, AI and machine learning in network operations, REST API characteristics (HTTP verbs, CRUD, authentication), configuration-management tools such as Ansible, and reading JSON-encoded data.

Is the 200-301 hard?+

CCNA is a challenging associate exam because of its breadth and its hands-on nature. You need to configure and troubleshoot, not just recognise concepts, and the exam is time-pressured, so fluency matters as much as knowledge.

The two things that trip people up are subnetting under time pressure and the sheer scope — routing, switching, wireless, security, and automation in one exam. Building muscle memory through repeated configuration practice and timed question sets is the difference between knowing the material and passing.

How many questions are on the 200-301 exam and how long is it?+

The 200-301 is a 120-minute exam. Cisco does not publish the exact number of questions (it typically runs to roughly 100–120 items) and uses several formats, including multiple-choice and drag-and-drop.

Our full-length practice mock uses a 100-question, 120-minute session so you can rehearse the real pacing and build stamina. Sitting a full mock end to end lets you rehearse the timing before test day.

What score do you need to pass the 200-301?+

Cisco does not publish an official passing score for the 200-301, and the score you need can vary between exam forms, so treat any specific number you see online as unofficial. Because there is no published percentage, our practice mock uses a 75% threshold purely as a study checkpoint — aim comfortably above it before booking, and focus on consistent accuracy across all six domains.

How much does the 200-301 exam cost?+

The 200-301 exam is priced by Cisco and varies by region; check Cisco’s site for the current fee in your country. The certification is valid for three years and can be renewed by passing an exam or earning Continuing Education credits. Every resource on this hub is free.

Who should take the 200-301?+

CCNA is aimed at people entering or working in networking roles — network administrators, network engineers (junior), help-desk staff moving toward networking, and support technicians who configure Cisco or general network equipment.

Cisco lists no formal prerequisites, but recommends roughly a year of experience with Cisco solutions, a good grasp of IP addressing, and networking fundamentals. Newcomers pass it too with disciplined study, especially on subnetting and hands-on configuration.

What jobs and salaries can the 200-301 lead to?+

CCNA is relevant to roles such as network administrator, network engineer, network technician, and NOC or support roles, where configuring and troubleshooting networks is part of the job. It is a recognised foundation for further Cisco professional certifications.

How much any certification moves compensation depends heavily on geography, seniority, and hands-on experience, so treat any single salary figure with caution. CCNA is best viewed as a way to demonstrate practical networking competence rather than a guaranteed raise on its own.

How long does it take to study for the 200-301?+

Plan for a substantial ramp: candidates with networking experience often need two to three months, while newcomers may need longer, at an hour or more a day. Spend the early weeks building conceptual coverage and drilling subnetting daily, then commit the back half to configuration practice and full timed mocks.

A good rhythm is to study one domain at a time and take its topic quiz immediately, then move to mixed full-length mocks in the final stretch — reviewing every explanation, including for questions you answered correctly, because CCNA distractors are built from realistic misconfigurations. Use the per-domain results here to find your weakest area and drill it again before booking.

How should you prepare for the 200-301?+

Study the six domains above in order, giving the heaviest weight to IP Connectivity and the two 20% domains, then drill practice questions domain by domain. Every MockAPI question reveals a detailed explanation and a per-option breakdown of why each distractor is wrong, which is essential for an exam whose wrong answers are engineered to look right.

Once your domain scores are solid, sit full-length timed mocks to build the pacing and stamina the 200-301 demands, and pair this question practice with hands-on configuration in a lab or simulator. Use the glossary to nail the precise terminology, and only book the real exam once you clear your mock target consistently.

Can you take the 200-301 exam online?+

Yes. Cisco delivers the 200-301 through Pearson VUE, so you can test at a physical Pearson VUE centre or online with remote proctoring. The online exam has strict environment rules: a private, quiet room, a clear desk, a webcam and microphone, a stable connection, and government-issued photo ID, with a proctor monitoring you throughout.

If you do not pass, Cisco enforces a waiting period (typically five calendar days) before you can retake the exam, and each attempt needs its own registration. Once you pass, the certification is valid for three years and can be kept current by recertifying or earning Continuing Education credits.

What certification should you take after the 200-301?+

CCNA is the associate-level foundation of Cisco’s certification path. A frequent next step is the professional-level CCNP Enterprise (with its core and concentration exams) for deeper routing, switching, and enterprise design.

From there Cisco offers professional and expert credentials across enterprise, security, data center, and service-provider tracks. Pairing any of these with hands-on experience on real network gear is what turns a certificate into a career.