Complete CCNA 200-301 Study Guide 2026: Pass Cisco's Network Certification

The CCNA (Cisco Certified Network Associate) is the networking industry's most recognized entry-to-intermediate credential. For anyone pursuing a career in network engineering, systems administration, or IT infrastructure, the CCNA is both a knowledge standard and a hiring signal. At any point in a networking career — from help desk to network engineer — the CCNA opens doors.

But it's not a soft certification. The CCNA 200-301 exam tests a broad range of networking concepts across nearly every layer of the OSI model, from physical connections to network automation and security. This guide covers everything you need to pass in 2026.

Key Facts

• Exam code: 200-301 CCNA
• Questions: 90–100 (multiple choice, drag-and-drop, lab simulations)
• Duration: 120 minutes
• Passing score: 825/1000
• Cost: approximately $330 USD (Pearson VUE; verify at cisco.com)
• Validity: 3 years (renew by exam or Continuing Education)
• Prerequisites: None official, but basic IT knowledge recommended

Table of Contents

1. What the CCNA Certifies
2. Exam Structure & Format
3. The Six Exam Domains
4. Lab Simulation Questions — Critical Preparation
5. Study Tools Overview
6. A 6-Month Study Schedule
7. Hands-On Lab Strategy
8. Practice Exam Strategy
9. Exam Day Logistics
10. After You Pass: Career Next Steps
11. FAQ

1. What the CCNA Certifies

The CCNA certifies that you have foundational networking knowledge and can:

• Configure and troubleshoot routers, switches, and basic network devices
• Implement IPv4 and IPv6 addressing and subnetting
• Configure routing protocols (OSPF) and understand routing decisions
• Configure VLANs, STP, and Layer 2 switching
• Implement basic network security (ACLs, DHCP snooping, port security)
• Understand and configure DHCP, DNS, and NAT
• Work with WAN technologies and wireless networking
• Understand network automation, programmability, and REST APIs at a foundational level

This is a broad set of competencies. The CCNA does not make you an expert in any single area — it certifies that you have working knowledge across the full networking stack.

2. Exam Structure & Format

| Feature | Details | |---|---| | Exam code | 200-301 CCNA | | Questions | 90–100 | | Duration | 120 minutes | | Passing score | 825/1000 | | Exam types | MCQ, drag-and-drop, lab simulation | | Calculator | Not provided (not needed) | | Reference materials | None permitted | | Testing | Pearson VUE (in-person or online proctored) |

Question Types

Multiple Choice (MCQ): Single or multiple select. Single correct answer or "select all that apply" variants. The majority of questions.

Drag-and-Drop: Match networking concepts, configurations, or protocol behaviors by dragging them to correct positions. Tested on OSI model, protocol suites, configuration order, and similar organizational knowledge.

Lab Simulations (Sims): The most important question type. You're presented with a simulated network topology (routers, switches, hosts) and asked to configure devices, troubleshoot a connectivity issue, or verify a specific behavior. Sims require you to type actual IOS commands into a simulated terminal.

Lab sims carry higher point weight per question than MCQs and cannot be answered correctly with theoretical knowledge alone — you must know the actual IOS command syntax.

3. The Six Exam Domains

Cisco publishes the official exam topics, organized into six domains with percentage weights:

| Domain | Weight | |---|---| | Network Fundamentals | 20% | | Network Access | 20% | | IP Connectivity | 25% | | IP Services | 10% | | Security Fundamentals | 15% | | Automation and Programmability | 10% |

Domain 1: Network Fundamentals (20%)

OSI model (all 7 layers, protocols at each layer), TCP/IP model, Ethernet (CSMA/CD, duplex, speed), cabling types, IPv4 addressing (classful, CIDR, subnetting), IPv6 addressing and types, ARP, DNS, DHCP at a conceptual level, TCP vs. UDP (characteristics, use cases), common ports (HTTP 80, HTTPS 443, SSH 22, Telnet 23, FTP 20/21, DNS 53, DHCP 67/68, SNMP 161).

High-yield subtopics: IPv4 subnetting is the most tested mathematical concept in the CCNA. Master it completely — binary/decimal conversion, CIDR notation, subnet calculation, host counts, usable ranges.

Domain 2: Network Access (20%)

VLANs (creation, membership, inter-VLAN routing via Router-on-a-Stick and Layer 3 switching), 802.1Q trunking, DTP, STP/RSTP (port states, roles, topology changes, PortFast, BPDU Guard), EtherChannel (LACP, PAgP, static), wireless (802.11 standards — a/b/g/n/ac/ax, BSS, ESS, channel selection, WPA2/WPA3).

High-yield subtopics: STP port roles (root, designated, alternate, backup) and states (blocking, listening, learning, forwarding, disabled) are consistently tested. VLAN configuration commands and trunk commands appear in lab simulations.

Domain 3: IP Connectivity (25%)

IPv4 routing (routing table logic, longest-prefix match, administrative distance, static routes — including summary, default, and floating routes), OSPF (single-area, OSPFv2 and OSPFv3, DR/BDR election, OSPF neighbor states, OSPF cost), first-hop redundancy protocols (HSRP, VRRP, GLBP concepts).

High-yield subtopics: IP Connectivity is the highest-weight domain. OSPF is heavily tested — neighbor states, DR/BDR election rules, cost calculation (reference bandwidth / interface bandwidth), and OSPF configuration commands appear in both MCQ and lab simulation formats.

Domain 4: IP Services (10%)

NAT (static, dynamic, PAT/overload) and troubleshooting, DHCP (server configuration, relay agent [ip helper-address]), NTP (stratum levels, configuration), SNMP, syslog, TFTP/FTP for file transfer, QoS concepts (DSCP markings, queuing strategies), SSH vs. Telnet configuration.

High-yield subtopics: NAT configuration (particularly PAT) and ip helper-address for DHCP relay are the most frequently tested IP Services topics.

Domain 5: Security Fundamentals (15%)

Security threats (DoS, DDoS, spoofing, phishing, social engineering, malware types), AAA (authentication, authorization, accounting), RADIUS vs. TACACS+, ACLs (standard, extended, named — their placement, configuration, and troubleshooting), port security (configuration, violation modes — protect, restrict, shutdown), DHCP snooping, dynamic ARP inspection (DAI), 802.1X, VPN concepts (site-to-site, remote access, SSL vs. IPsec).

High-yield subtopics: ACL configuration is consistently in lab simulations. Know the syntax for both standard (permit/deny host or network) and extended ACLs (permit/deny [protocol] [source] [destination] [port]). Placement rules: standard ACLs near destination, extended near source.

Domain 6: Automation and Programmability (10%)

Network automation concepts, traditional vs. controller-based networking, SDN (Software-Defined Networking), Cisco DNA Center, Cisco SD-Access, REST APIs (HTTP methods: GET, POST, PUT, DELETE, PATCH), JSON and XML data formats, Python basics for network automation, Ansible and Puppet concepts.

High-yield subtopics: REST API concepts (HTTP methods and their purposes, JSON format) and the distinction between northbound and southbound APIs in SDN architecture are tested most consistently.

4. Lab Simulation Questions — Critical Preparation

Lab simulations (sims) are where most candidates lose points they shouldn't lose. The problem is simple: you can know how to configure a router conceptually but freeze up in a sim when you can't remember the exact command syntax.

Sim Question Types You'll See

VLAN and Trunk Configuration: Create VLANs on a switch, assign ports to VLANs, configure trunk ports.

OSPF Configuration: Configure OSPF on multiple routers, set the router-id, configure network statements.

Router Static Route: Add a static route to fix connectivity between two networks.

ACL Configuration: Write an ACL that permits or denies specific traffic, apply it to an interface.

Switch Port Security: Configure maximum MAC addresses, violation mode, and sticky learning.

NAT/PAT Configuration: Configure inside/outside NAT interfaces and PAT overload.

How to Prepare for Sims

1. Practice in Packet Tracer (free from Cisco Networking Academy): Build topologies and practice all configuration tasks in a lab environment.

2. Know the most common commands cold: Practice typing them until they're muscle memory. A sim doesn't test whether you know a concept — it tests whether your hands know the commands.

3. Use show commands to verify: Always verify your configuration with show commands (show ip ospf neighbor, show vlan brief, show ip route, show access-lists). Sims often have points for correct output, not just correct commands.

4. Practice troubleshooting, not just configuration: Some sims ask you to identify and fix a problem. Know the systematic troubleshooting approach: verify from Layer 1 up.

5. Study Tools Overview

| Resource | Format | Best For | |---|---|---| | Neil Anderson (CBT Nuggets) | Video | Video-first learners | | Jeremy's IT Lab (YouTube) | Video + Packet Tracer | Free comprehensive learning | | Cisco Official Cert Guide (OCG) | Book | Reference depth and comprehensive reading | | Boson NetSim | Lab simulation software | Advanced sim practice | | Boson ExSim-Max | Practice exams | Question bank closest to real exam | | Packet Tracer | Free lab tool | All hands-on practice | | GNS3 | Advanced lab tool | Candidates wanting real IOS |

The most effective CCNA preparation combines video content (Neil Anderson, Jeremy's IT Lab) with hands-on Packet Tracer labs and quality practice exams (Boson ExSim-Max).

6. A 6-Month Study Schedule

Month 1: Network Fundamentals

Weeks 1–2: OSI model, TCP/IP model, Ethernet, cabling. Know the function of every OSI layer and which protocols operate at each.

Weeks 3–4: IPv4 addressing and subnetting. Do not rush this section. Subnetting is foundational and appears throughout the exam. Practice 30+ subnetting problems per session until you can subnet from scratch in under 2 minutes.

End of Month 1: 30-question MCQ on Network Fundamentals. Target: 70%+.

Month 2: Network Access

Weeks 5–6: VLANs, 802.1Q trunking, DTP. Configure VLANs and trunk ports in Packet Tracer every session.

Weeks 7–8: STP/RSTP (port states, roles, election), EtherChannel, wireless basics.

End of Month 2: 30-question MCQ on Network Access + complete 3 VLAN/STP Packet Tracer labs.

Month 3: IP Connectivity

Weeks 9–10: IPv4 static routing, routing table logic, administrative distance, longest-prefix match.

Weeks 11–12: OSPF — neighbor states, DR/BDR election, cost, single-area OSPFv2 configuration. Practice OSPF configuration in Packet Tracer until the commands are automatic.

End of Month 3: 40-question MCQ on IP Connectivity + 3 OSPF configuration labs.

Month 4: IP Services and Security

Weeks 13–14: DHCP, NAT/PAT, NTP, SSH configuration.

Weeks 15–16: ACLs (standard and extended), port security, DHCP snooping, DAI. Configure and apply ACLs in Packet Tracer — this is critical for lab sims.

End of Month 4: 50-question mixed MCQ. Take first full practice exam. Target: 65%+.

Month 5: Security Continued + Automation

Weeks 17–18: Security threats overview, VPN concepts, AAA, RADIUS vs. TACACS+.

Weeks 19–20: Network automation, SDN, REST APIs, DNA Center, Ansible concepts, JSON format.

End of Month 5: Full practice exam. Target: 72%+.

Month 6: Review and Final Preparation

Weeks 21–22: Weak-area drilling based on practice exam domain analysis. Additional Packet Tracer labs on weak configuration topics.

Weeks 23–24: Full practice exams (2), command reference review, subnetting speed drills.

Scheduling threshold: 78%+ on Boson ExSim-Max (which is harder than the real exam; 78% there typically corresponds to a passing score on the real exam).

7. Hands-On Lab Strategy

Lab practice is the single most differentiating preparation activity for the CCNA. Candidates who do extensive hands-on work pass at dramatically higher rates than those who only read and watch videos.

Packet Tracer vs. GNS3

| Tool | Cost | Use Case | |---|---|---| | Packet Tracer | Free (Cisco NetAcad) | All CCNA-level labs; sufficient for 95% of candidates | | GNS3 | Free (requires IOS images) | Candidates who want real IOS experience; advanced configs | | Boson NetSim | ~$99–$149 | Exam-like sim practice; same interface as real CCNA sims |

For most CCNA candidates, Packet Tracer is sufficient. Use GNS3 only if you want to practice advanced features that Packet Tracer doesn't support well.

Essential Lab Exercises

Complete each of these exercises at least twice:

1. Configure VLANs and trunk ports between switches
2. Configure Router-on-a-Stick for inter-VLAN routing
3. Configure OSPF between 3 routers and verify neighbor adjacency
4. Configure static routes and verify reachability
5. Configure standard and extended ACLs and apply to interfaces
6. Configure PAT (NAT overload) and verify translation
7. Configure port security (sticky MAC, violation mode shutdown)
8. Configure SSH on a router
9. Configure DHCP on a router (server and relay)
10. Configure EtherChannel (LACP) between two switches

8. Practice Exam Strategy

Target before scheduling: 78%+ on Boson ExSim-Max consistently.

Why Boson specifically: Boson's questions are considered the closest to the real CCNA exam in difficulty and style. A 78% on Boson suggests readiness; a 70% may be borderline.

Wrong-answer review: For every wrong answer, identify whether you missed a conceptual rule or a specific command/fact. Conceptual errors → re-study the topic. Command errors → lab practice.

Subnetting speed: Practice subnetting problems separately from your main question bank. Being able to subnet quickly reduces time pressure across the entire exam, since subnetting calculations appear in multiple domains.

9. Exam Day Logistics

The CCNA is administered at Pearson VUE testing centers (or via online proctored exam).

Scheduling: Book at least 3 weeks in advance at pearsonvue.com. Rescheduling is possible up to 24 hours before with no fee.

Bring: Two forms of ID. Primary must be government-issued with photo. Secondary must have your name.

Permitted: Nothing personal. Pearson VUE provides a marker board and marker (or scratch paper at some centers) for the exam.

Duration: 120 minutes. Do not spend more than 75 seconds per question — budget extra time for lab simulations (3–5 minutes each).

Score: Delivered immediately on-screen at exam completion.

10. After You Pass: Career Next Steps

CCNA Renewal: Valid for 3 years. Renew by passing any 300-level professional exam (which also earns you a CCNP specialization), or by earning Continuing Education credits through Cisco.

Career Opportunities: Network administrator, network support engineer, systems administrator, NOC (Network Operations Center) engineer, help desk tier 2/3.

Salary Impact: The CCNA credential typically unlocks roles at $55,000–$85,000+ depending on location and experience. Detailed salary data in the CCNA Salary & Career Outcomes post.

CCNP Path: The CCNP Enterprise (or other specialization) is the natural next step. Requires passing one core exam and one concentration exam at the 350-level.

FAQ

Q: Is there a prerequisite for the CCNA? No official prerequisites. However, candidates with no IT background should plan additional study time (add 2–3 months). CompTIA Network+ is sometimes taken first as a gentler introduction.

Q: Can I take the CCNA online instead of at a testing center? Yes. Pearson VUE offers online proctored testing. Requirements include a stable internet connection, a webcam, a cleared desk environment, and no other people in the room. In-person is recommended if you have any concern about your internet stability.

Q: How long are CCNA lab sims? Approximately 5–10 minutes per simulation, depending on complexity. Budget your time accordingly — don't spend 20 minutes on a single sim at the expense of 10 regular questions.

Q: Does the CCNA 200-301 version change? Cisco periodically updates the CCNA exam version. The 200-301 has been stable, but check cisco.com for any announced updates before scheduling.

Q: Is Packet Tracer realistic enough for the real exam's lab sims? Mostly yes. The lab sims on the real CCNA exam use a Cisco-built simulator that behaves similarly to Packet Tracer. The command set and behavior are aligned. Boson NetSim more closely mimics the real exam's interface.

Q: What's the best study order for someone with zero networking background? Start with a conceptual networking primer (CompTIA Network+ material or Jeremy's IT Lab fundamentals), then enter the CCNA content with Network Fundamentals. Don't skip the conceptual foundation.

Q: What score do I need to pass the CCNA? 825/1000. This is a fixed scaled score. Cisco does not publish the percentage of questions you need to answer correctly.