200-301 exam domains
The 200-301 exam is weighted across 6 domains. Pick any domain below to drill it — or read the full breakdown in the FAQ.
| Exam domain | Exam weight | Practice |
|---|---|---|
| Network Fundamentals | 20% | Practice this topic |
| Network Access | 20% | Practice this topic |
| IP Connectivity | 25% | Practice this topic |
| IP Services | 10% | Practice this topic |
| Security Fundamentals | 15% | Practice this topic |
| Automation and Programmability | 10% | Practice this topic |
Sample 200-301 questions
A sample of the 200-301 questions on this hub. Each links through to the full question, the correct answer, and an explanation of why every other option is wrong.
- A network administrator needs to maintain a record of every configuration command that engineers enter on the core routers, including the username, ti…View question
- A network administrator has deployed a TACACS+ server to control access to the company's routers. After a junior technician successfully logs in to a…View question
- A network technician is connecting a new employee's PC to switch port GigabitEthernet0/5. The PC must reside in VLAN 30 (the Sales VLAN), which alread…View question
- A network operations team wants to standardize router and switch configurations across 200 devices. They require a tool that pushes configuration chan…View question
- You are documenting a new network and cannot physically access the wiring closet. From switch SW1, you run 'show cdp neighbors detail' and see an entr…View question
- A network engineer configures interface GigabitEthernet0/0 on a router with the command 'ip address 10.20.30.1 255.255.255.0'. After the interface com…View question
- A network technician arrives at a remote site to configure a brand-new Cisco switch that has just been powered on for the first time. The switch has n…View question
- A DevOps team needs to deploy dozens of small, independent microservices on a single physical server. Each service must start in seconds, share the ho…View question
- A network engineer is documenting a newly deployed software-defined fabric. She notes that VXLAN tunnels carry endpoint traffic across the data center…View question
- A network administrator is configuring a branch router's WAN interface (GigabitEthernet0/1) to automatically obtain its IPv4 address from the ISP's DH…View question
Key 200-301 terms
Start with these terms, then explore the full glossary. Each links to a plain-English definition written for the 200-301 exam.
200-301 frequently asked questions
What is the 200-301 certification?+
Cisco describes CCNA as validating the knowledge and skills to work with enterprise networks. The 200-301 exam blends conceptual questions with hands-on configuration and troubleshooting, so you are expected to reason about routing tables, VLANs, OSPF, ACLs, and NAT the way you would on real Cisco gear.
It is broad: a single exam spans fundamentals, switching and routing, IP services, security basics, and network automation. That breadth, plus the need to subnet quickly and read device output, is what makes it a meaningful step up from an entry-level networking course.
What topics are on the 200-301 exam?+
The 200-301 exam is organised into six weighted domains. The percentages below are each domain’s share of the exam blueprint, so weight your study toward IP Connectivity and the two 20% domains (Network Fundamentals and Network Access) while still covering IP Services, security, and automation.
Network Fundamentals (20%)
The foundation and one of the two largest domains. It covers the role of network components (routers, switches, firewalls, APs, endpoints), topology architectures (two-tier, three-tier, spine-leaf, SOHO), cabling and interface issues, TCP vs UDP, IPv4 subnetting and private addressing, IPv6 addressing and types, wireless principles, virtualization (VMs, containers, VRFs), and switching concepts.
Network Access (20%)
Focuses on switching and wireless access. It spans configuring VLANs across multiple switches, interswitch connectivity and 802.1Q trunking, discovery protocols (CDP and LLDP), EtherChannel with LACP, Rapid PVST+ spanning tree operations, Cisco wireless architectures and AP modes, and WLAN configuration for client connectivity.
IP Connectivity (25%)
The largest domain. It centres on how routers move packets: interpreting the routing table (administrative distance, metric, next hop), default forwarding decisions, configuring IPv4 and IPv6 static routing, single-area OSPFv2, and the purpose and concepts of first hop redundancy protocols.
IP Services (10%)
Covers the services that support a network. It includes inside source NAT (static and pools), NTP in client/server mode, the role of DHCP and DNS, SNMP, syslog facilities and severity levels, DHCP client and relay, per-hop QoS behavior, remote access with SSH, and TFTP/FTP.
Security Fundamentals (15%)
The security domain. It covers core concepts (threats, vulnerabilities, exploits, mitigation), security program elements, device access control and password policy, IPsec remote-access and site-to-site VPN concepts, standard and extended ACLs, Layer 2 security (DHCP snooping, dynamic ARP inspection, port security), AAA, and wireless security (WPA/WPA2/WPA3).
Automation and Programmability (10%)
The newest and smallest domain. It covers how automation changes network management, traditional vs controller-based (software-defined) networking, overlay/underlay/fabric concepts, AI and machine learning in network operations, REST API characteristics (HTTP verbs, CRUD, authentication), configuration-management tools such as Ansible, and reading JSON-encoded data.
Is the 200-301 hard?+
CCNA is a challenging associate exam because of its breadth and its hands-on nature. You need to configure and troubleshoot, not just recognise concepts, and the exam is time-pressured, so fluency matters as much as knowledge.
The two things that trip people up are subnetting under time pressure and the sheer scope — routing, switching, wireless, security, and automation in one exam. Building muscle memory through repeated configuration practice and timed question sets is the difference between knowing the material and passing.
How many questions are on the 200-301 exam and how long is it?+
The 200-301 is a 120-minute exam. Cisco does not publish the exact number of questions (it typically runs to roughly 100–120 items) and uses several formats, including multiple-choice and drag-and-drop.
Our full-length practice mock uses a 100-question, 120-minute session so you can rehearse the real pacing and build stamina. Sitting a full mock end to end lets you rehearse the timing before test day.
What score do you need to pass the 200-301?+
Cisco does not publish an official passing score for the 200-301, and the score you need can vary between exam forms, so treat any specific number you see online as unofficial. Because there is no published percentage, our practice mock uses a 75% threshold purely as a study checkpoint — aim comfortably above it before booking, and focus on consistent accuracy across all six domains.
How much does the 200-301 exam cost?+
The 200-301 exam is priced by Cisco and varies by region; check Cisco’s site for the current fee in your country. The certification is valid for three years and can be renewed by passing an exam or earning Continuing Education credits. Every resource on this hub is free.
Who should take the 200-301?+
CCNA is aimed at people entering or working in networking roles — network administrators, network engineers (junior), help-desk staff moving toward networking, and support technicians who configure Cisco or general network equipment.
Cisco lists no formal prerequisites, but recommends roughly a year of experience with Cisco solutions, a good grasp of IP addressing, and networking fundamentals. Newcomers pass it too with disciplined study, especially on subnetting and hands-on configuration.
What jobs and salaries can the 200-301 lead to?+
CCNA is relevant to roles such as network administrator, network engineer, network technician, and NOC or support roles, where configuring and troubleshooting networks is part of the job. It is a recognised foundation for further Cisco professional certifications.
How much any certification moves compensation depends heavily on geography, seniority, and hands-on experience, so treat any single salary figure with caution. CCNA is best viewed as a way to demonstrate practical networking competence rather than a guaranteed raise on its own.
How long does it take to study for the 200-301?+
Plan for a substantial ramp: candidates with networking experience often need two to three months, while newcomers may need longer, at an hour or more a day. Spend the early weeks building conceptual coverage and drilling subnetting daily, then commit the back half to configuration practice and full timed mocks.
A good rhythm is to study one domain at a time and take its topic quiz immediately, then move to mixed full-length mocks in the final stretch — reviewing every explanation, including for questions you answered correctly, because CCNA distractors are built from realistic misconfigurations. Use the per-domain results here to find your weakest area and drill it again before booking.
How should you prepare for the 200-301?+
Study the six domains above in order, giving the heaviest weight to IP Connectivity and the two 20% domains, then drill practice questions domain by domain. Every MockAPI question reveals a detailed explanation and a per-option breakdown of why each distractor is wrong, which is essential for an exam whose wrong answers are engineered to look right.
Once your domain scores are solid, sit full-length timed mocks to build the pacing and stamina the 200-301 demands, and pair this question practice with hands-on configuration in a lab or simulator. Use the glossary to nail the precise terminology, and only book the real exam once you clear your mock target consistently.
Can you take the 200-301 exam online?+
Yes. Cisco delivers the 200-301 through Pearson VUE, so you can test at a physical Pearson VUE centre or online with remote proctoring. The online exam has strict environment rules: a private, quiet room, a clear desk, a webcam and microphone, a stable connection, and government-issued photo ID, with a proctor monitoring you throughout.
If you do not pass, Cisco enforces a waiting period (typically five calendar days) before you can retake the exam, and each attempt needs its own registration. Once you pass, the certification is valid for three years and can be kept current by recertifying or earning Continuing Education credits.
What certification should you take after the 200-301?+
CCNA is the associate-level foundation of Cisco’s certification path. A frequent next step is the professional-level CCNP Enterprise (with its core and concentration exams) for deeper routing, switching, and enterprise design.
From there Cisco offers professional and expert credentials across enterprise, security, data center, and service-provider tracks. Pairing any of these with hands-on experience on real network gear is what turns a certificate into a career.