Cisco CCNA 200-301 Study Guide: Exam Topics and Study Plan
Prepare for Cisco CCNA 200-301 with an overview of its six domains, core networking skills, and a hands-on study plan.
Cisco CCNA 200-301 is an associate-level networking exam covering network fundamentals, switching access, IP connectivity, common IP services, security basics, and network automation and programmability. Preparation should go beyond memorizing commands: understand how traffic moves through switches and routers, then verify configurations in a lab.
This guide follows Cisco’s current 200-301 CCNA exam page and official exam topics. Exam duration, languages, and topics can change, so confirm the official details before scheduling.
Cisco currently lists a 120-minute exam in English and Japanese, with no Chinese option shown. Confirm the available languages in Cisco’s registration system when scheduling.
Who is this exam for?
It suits learners preparing for entry-level networking, network operations, technical support, or help-desk roles, and anyone who wants a structured foundation in IPv4/IPv6, switching, and routing. Cisco has no formal exam prerequisites; basic computer use, networking, and IP address knowledge will help.
Exam domains and weights
| Domain | Main topics | Weight |
|---|---|---|
| Network Fundamentals | Devices, topologies, cabling, TCP/UDP, IPv4/IPv6, wireless basics | 20% |
| Network Access | VLANs, trunks, STP, EtherChannel, WLAN, switching security | 20% |
| IP Connectivity | Routing tables, forwarding, static routes, single-area OSPF, gateway redundancy | 25% |
| IP Services | NAT, DHCP, DNS, NTP, QoS, SSH, Syslog, SNMP, and more | 10% |
| Security Fundamentals | Security concepts, access control, hardening, VPN, wireless security | 15% |
| Automation and Programmability | Controller networks, REST APIs, JSON, configuration automation, SDN | 10% |
IP Connectivity carries the most weight, but Network Access and Fundamentals together account for 40% of the exam. Cover every domain, then spend extra time on your weak areas.
How to study the six domains
1. Network Fundamentals
Know common device roles, Layer 2 and Layer 3 topologies, copper and fiber connections, speed/duplex issues, TCP versus UDP, and IPv4/IPv6 addressing. Understand how a host uses a gateway to reach a remote network.
Common confusion: MAC addresses support frame forwarding on a local link; IP addresses provide addressing across networks. Start troubleshooting by deciding whether the issue is local Layer 2 or the Layer 3 path.
2. Network Access
Practice VLANs, 802.1Q trunks, inter-VLAN routing, spanning tree, EtherChannel, and switch access security. For wireless, understand APs, WLCs, SSIDs, authentication, and common GUI configuration.
Common confusion: An access port usually carries endpoint traffic for one VLAN; a trunk carries multiple VLANs over one link using tags. A mismatch can prevent some VLANs from communicating.
3. IP Connectivity
Read routing tables and understand how longest-prefix match, administrative distance, and metrics affect forwarding. Practice IPv4/IPv6 static routes, default and floating static routes, and single-area OSPFv2. Know the purpose of first-hop redundancy protocols.
Common confusion: Administrative distance compares route sources; a metric compares paths within a routing protocol. A destination in the routing table does not guarantee the next hop or Layer 2 adjacency is working.
4. IP Services
Understand the purpose of NAT/PAT, DHCP, DNS, NTP, SNMP, Syslog, QoS, SSH, and file transfer services. Practice basic configuration and verification, especially identifying which service component has failed from a symptom.
5. Security Fundamentals
Learn basic threat and vulnerability concepts, management-plane hardening, passwords and AAA, ACLs, port security, DHCP Snooping, DAI, VPNs, and WPA wireless security. Apply least privilege to management access and traffic.
6. Automation and Programmability
Compare device-by-device management with controller-based networking. Understand control/data planes, underlay/overlay, and northbound/southbound APIs. Recognize REST APIs, HTTP methods, JSON structures, and the basic roles of configuration tools such as Ansible, Puppet, and Chef.
Recommended study sequence
- Practice addressing and subnetting first. IPv4/IPv6 addressing underpins routing and troubleshooting.
- Configure switching in a simulator or lab. Start with VLANs, trunks, STP, and EtherChannel, and inspect state and MAC tables.
- Add routing and services. Configure static routes and OSPF, then DHCP, NAT, ACLs, and management services.
- Verify against outcomes. Do not stop when commands are accepted; check routes, neighbor states, interface counters, and end-to-end reachability.
- Finish with security and automation. Explain the concepts, read simple JSON/API requests, and identify component roles in controller architectures.
Readiness checklist
- Subnet IPv4 networks and explain IPv6 prefixes and common address types.
- Configure and troubleshoot VLANs, trunks, STP, and EtherChannel.
- Read routing tables and troubleshoot static routes and basic OSPF.
- Explain NAT, DHCP, DNS, NTP, ACLs, AAA, and Syslog.
- Recognize the basics of controllers, APIs, JSON, and configuration automation.
- Practice configuration and troubleshooting instead of relying only on videos or memorized questions.
Keep practicing
Use practice questions to learn the question style and spot weak areas, then revisit the related topics. Start CCNA 200-301 practice.