On this page
Intro
The Cisco Certified Network Associate (CCNA) is for people building the skills to implement and administer networks, from addressing and switching to security basics and automation. This guide turns the 200-301 exam outline into manageable study tasks, with CertMonk as one option for reviewing what you learn. The exam scope comes from Cisco’s CCNA page; the study plan below is our suggested approach.
Exam at a glance
| Detail | 200-301 |
|---|---|
| Exam | 200-301 CCNA, Implementing and Administering Cisco Solutions |
| Time | 120 minutes |
| Languages | See Cisco’s exam page for current languages |
| Questions | See Cisco’s exam page |
| Passing score | See Cisco’s exam page |
| Prerequisites | None listed |
| Price | Check the vendor’s site for current pricing |
| Validity | Three years |
Source: Cisco’s CCNA page, reviewed November 7, 2026. Cisco’s page does not state a question count or passing score, so this guide leaves them out rather than guessing.
Version update: Cisco revises its exam topics from time to time. Check the CCNA exam topics page for the current version and any change date before you book, and match your study materials to it.
Exam domains and weights
| Domain | Weight | In plain English |
|---|---|---|
| Network fundamentals | See Cisco’s exam topics | Know the components, interfaces, addressing and protocols that make a network work. |
| Network access | See Cisco’s exam topics | Configure and verify switching, VLANs, trunks and wireless access. |
| IP connectivity | See Cisco’s exam topics | Understand how routers choose paths and forward traffic. |
| IP services | See Cisco’s exam topics | Configure and verify services such as addressing, time, name resolution and traffic handling. |
| Security fundamentals | See Cisco’s exam topics | Apply basic device, access and wireless protection and recognize common threats. |
| Automation and programmability | See Cisco’s exam topics | Understand how controllers, data formats and APIs change network management. |
Domain names follow the list on Cisco’s exam page. Cisco publishes the percentage for each domain in its exam topics document, which we do not reproduce here. Use the full official exam objectives as your coverage checklist, and let the published weights help allocate attention without becoming a reason to skip smaller topics.
What each domain really tests
Network fundamentals
Start with the pieces and how they connect. Compare routers, switches, access points, firewalls and endpoints, and explain what each one does with a frame or packet. Study interface and cabling types, and the way a network is drawn in tiers.
Spend real time on IPv4 and IPv6 addressing. Practice subnetting until you can split a block into subnets without a calculator, and write the address range for each. Compare transport protocols and wireless principles, and learn the virtualization ideas that appear in modern networks.
Network access
This domain is mostly switching and wireless. Learn how a switch builds its forwarding table, how VLANs separate traffic and why a trunk carries several of them. Study loop prevention, link aggregation and neighbor discovery protocols, and know what each one prevents or reveals.
For wireless, compare architectures and how access points connect to a controller. Practice reading simple configuration and output, and say what each line does. Write the command you would use to verify a setting, then compare it with what the output should show.
IP connectivity
Routing is the heart of this domain. Learn how a router reads its routing table: the longest match, administrative distance and metric, and what a default route does. Compare static routes with a dynamic protocol, and study the behavior of the open-standard link-state protocol the exam covers, including neighbor relationships.
Add first-hop redundancy ideas, which keep a default gateway available. Trace a packet across three routers on paper, naming the table entry used at each hop. This habit catches mistakes that memorizing definitions does not.
IP services
Group these topics by the problem they solve. Address assignment, name resolution and time synchronization support almost every device. Address translation lets private networks reach outside ones, so learn the types and what each changes in the packet.
Also review quality of service ideas, remote management and logging. For each service, write what a device cannot do when it is missing or misconfigured. That question helps you spot the cause in a troubleshooting scenario.
Security fundamentals
Cover the basics of protecting devices, ports and users. Study access control lists and what they match, port-level protections on switches, and wireless security options and their trade-offs. Understand how passwords, multi-factor methods and directory-based authentication work together.
Learn common threats and the idea behind each defense. Keep the weakness, the threat and the control as three separate ideas in your notes, so you can match a described problem to a sensible measure.
Automation and programmability
You do not need to be a developer, but you should read simple structured data and understand why automation helps. Compare traditional device-by-device management with controller-based and software-defined approaches. Learn what REST APIs do and the common data formats.
Review configuration management tools at a conceptual level and what they make repeatable. Write a short comparison of manual changes and automated ones, including the risk of repeating a mistake faster.
The coverage above is organized from Cisco’s published domain list; the note-taking exercises are study suggestions.
A realistic 30-day study plan
Treat this as a starting schedule, not a deadline you must meet. Aim for a focused session most days, with time for reading, practice and review. CCNA rewards hands-on repetition, so use a simulator or free lab software for configuration work, and extend the plan if networking is new to you.
Days 1–7: fundamentals and addressing
Save the exam topics and mark each as familiar, uncertain or new. Study components, interfaces, and IPv4 and IPv6 addressing. Do a small subnetting exercise every day. After each session, close your notes and explain one idea aloud.
Keep a learning log with three columns: topic, misunderstanding and next action. A next action should be specific, such as redoing one subnetting set. “Study more” is too broad to help tomorrow.
Days 8–14: switching and wireless
Cover VLANs, trunks, loop prevention and wireless architecture. Build a small lab, change one setting at a time and note what you see. At the end of the week, revisit addressing without looking at your notes first.
Reserve one session for catching up. If several concepts remain unclear, reduce the new material instead of adding longer study days.
Days 15–21: routing
Give routing several separate sessions. Trace packets by hand, then confirm with a lab. Practice reading routing tables and picking the route a router will use. Use untimed practice to expose reasoning gaps.
End the week with mixed review. Record correct guesses as uncertain knowledge. They need follow-up even though a practice score may count them as correct.
Days 22–28: services, security, automation and pacing
Cover IP services, security fundamentals and automation, then revisit your weakest areas. Add timed practice once you can explain the material without help. Afterward, separate knowledge gaps from rushed reading or time-management problems.
Days 29–30: make a readiness decision
Review concise notes and remaining uncertainties. Check your exam version and booking details directly with Cisco. If important topics still feel unfamiliar, plan another week; finishing a calendar is not evidence that learning is complete.
Common mistakes and how to avoid them
- Studying only by reading. Configuration and output reading need lab practice, even if it is on free software.
- Skipping subnetting practice. Do a few problems every day so the method becomes automatic.
- Memorizing commands without meaning. Write what each command changes and how you would verify it.
- Treating automation as optional. It is its own domain, so schedule it explicitly.
- Counting lucky guesses as mastery. Flag them for review alongside incorrect responses.
- Repeating a familiar set until the score rises. Return to the underlying concept and explain it without answer choices.
How to use practice questions well
Begin untimed. Read the explanation for your selected answer and for each alternative, then identify the distinction you missed. Wrong-answer explanations matter because they can reveal why a familiar term does not fit the situation being described.
CertMonk offers explanations for every answer choice, randomized practice tests, timed practice and an untimed learning mode, plus flip-card flashcards, study games and progress by exam domain. Use those tools for different jobs: explanations for reasoning, flashcards and games for recall, and domain progress to choose what to review next.
After a practice session, choose a small number of gaps to repair. Read the relevant material, write a short explanation and revisit it later. Add timed practice when the concepts feel more stable. Treat practice results as feedback about your preparation, not a prediction of your exam result.
Free practice questions
Use the free samples below to explore the format and review the explanations without a purchase.
The same /24 prefix is offered to the routing table by a static route and by OSPF. Which value does the router compare FIRST to decide which one to install?
- AThe metric, because the path with the lower cost is preferred
- BThe administrative distance of each source
- CThe prefix length, because the longer prefix is preferred
- DThe age of each route, because the older route is more stable
Show the answer and explanation
Answer: B. The administrative distance of each source
Correct. For identical prefixes from different sources the router installs the one with the lower administrative distance (static 1 beats OSPF 110 by default).
Why not the others
- A. Metric compares paths within one protocol, after the source has been chosen. A static route has no comparable cost to set against OSPF's.
- C. Longest match decides between different prefixes at forwarding time. Here both offers are the same /24, so length cannot separate them.
- D. Route age is displayed but never used as a selection criterion; older routes are not considered more stable.
Takeaway: Same prefix, different sources: compare AD. Same source, several paths: compare metric. Different prefixes: all can be installed and longest match forwards.
A syslog entry shows traffic from 172.20.77.9/20. To build a matching route summary, the engineer needs the subnet ID of that host's /20 subnet. What is it?
- A172.20.0.0, the start of the 172.20.0.0/16 block that holds the host
- B172.20.72.0, the nearest multiple of 8 below 77
- C172.20.64.0, the start of the 16-wide block that holds 77
- D172.20.77.0, because the subnet matches the host's third octet
Show the answer and explanation
Answer: C. 172.20.64.0, the start of the 16-wide block that holds 77
Correct. /20 = 255.255.240.0, so the third octet moves in blocks of 16: 64 to 79. 77 falls in the block starting at 64.
Why not the others
- A. That is the /16 block, not the /20 subnet.
- B. Multiples of 8 apply to a /21 in the third octet. A /20 uses blocks of 16.
- D. That is only true for a /24 mask.
Takeaway: Find the interesting octet, compute the block size (256 minus the mask value, 256 - 240 = 16), and round the host's value down to a multiple of it.
Two switches are joined by a full-duplex link. When the link comes up, the designated port moves to forwarding within about a second rather than waiting 30 seconds. What makes this possible in RSTP?
- ACDP confirming that the neighbor is a Cisco switch before forwarding
- BShorter forward-delay timers, which RSTP sets to 1 second by default
- CA proposal and agreement handshake between the switches on the point-to-point link
- DPortFast being enabled automatically on each full-duplex link
Show the answer and explanation
Answer: C. A proposal and agreement handshake between the switches on the point-to-point link
Correct. On point-to-point (full-duplex) links, RSTP uses proposal/agreement to move a designated port to forwarding quickly; shared (half-duplex) links fall back to timers.
Why not the others
- A. CDP plays no part in spanning-tree convergence.
- B. RSTP still has timers, but fast transition comes from a handshake, not shortened timers.
- D. PortFast is for edge ports and is not enabled automatically between switches.
Takeaway: RSTP converges fast on point-to-point links with proposal/agreement and on edge ports with PortFast; shared half-duplex links still rely on timers.
Source: Cisco: Understand Rapid Spanning Tree Protocol (802.1w)
A router runs software with a known flaw in its web interface. An attacker group is scanning the internet for that flaw, and a public script can take advantage of it. In this scenario, what is the software flaw itself?
- AThe exploit, because a public script already exists for it
- BThe vulnerability, a weakness that could be exploited
- CThe mitigation, because patching it will remove the risk
- DThe threat, because it could cause harm to the organization
Show the answer and explanation
Answer: B. The vulnerability, a weakness that could be exploited
Correct. A vulnerability is a weakness in a system that a threat could exploit; here it is the flaw in the web interface.
Why not the others
- A. The exploit is the public script: the means of taking advantage of the flaw. The flaw exists whether or not a script has been written.
- C. Mitigation is the countermeasure, such as patching or disabling the web interface. The flaw is what needs mitigating, not the mitigation itself.
- D. The threat is the attacker group (or event) that could exploit the weakness. The flaw could cause harm, which makes "threat" tempting, but it is the weakness, not the actor.
Takeaway: Vulnerability = weakness; threat = actor or event that could harm; exploit = the means of using the weakness; mitigation = control that reduces the risk.
Source: NIST SP 800-30 Rev. 1: Guide for Conducting Risk Assessments
A server team is publishing a dual-stack web service in DNS. Which two statements about DNS resource records are correct? (Choose two.)
Choose 2.
- AA PTR record maps an IPv4 address to a MAC address
- BAn AAAA record maps a name to an IPv6 address
- CA CNAME record maps a name to a TCP port number
- DAn A record maps a name to an IPv4 address
- EAn MX record maps a name to the router that forwards its traffic
Show the answer and explanation
Answer: B. An AAAA record maps a name to an IPv6 address and D. An A record maps a name to an IPv4 address
Correct. AAAA records hold IPv6 addresses.
Correct. A records hold IPv4 addresses.
Why not the others
- A. PTR records map an address back to a name (reverse lookup). DNS never maps to MAC addresses; that is ARP's job.
- C. A CNAME is an alias that points one name at another name. Port numbers are carried in SRV records, not CNAMEs.
- E. MX records name the mail exchangers for a domain, not routers.
Takeaway: Common DNS records: A (IPv4), AAAA (IPv6), CNAME (alias), MX (mail exchanger), PTR (reverse lookup), NS (name server).
Source: RFC 1035: Domain Names — Implementation and Specification
FAQ
Is CCNA one exam?
Yes. Cisco lists a single exam, 200-301, for the CCNA certification, with a time limit of 120 minutes according to its CCNA page.
Are there prerequisites?
Cisco’s page lists no prerequisites for CCNA. Your own background in networking will still decide how much preparation time you need.
Do I need lab practice?
Hands-on practice is strongly useful because many topics involve reading configurations and command output. A free simulator is enough to practice the basics.
Is 30 days enough to prepare?
It can be a useful planning window, but your starting knowledge and available time decide whether it is realistic. Extend it if you cannot yet subnet confidently or trace a packet through a routed network.
Where can I find the domain percentages?
Cisco publishes them in its exam topics document on the Cisco Learning Network. Use them to balance your schedule.
How should I decide what to revise next?
Start with concepts you cannot explain and mistakes that recur across practice sessions. Use the published domain weights to balance the remaining schedule, while keeping every domain on your checklist.
Next step
Try free practice questions → https://app.certmonk.app/samples
