How to Pass the CCNA (200-301): Complete Study Guide

The Cisco Certified Network Associate (CCNA 200-301) certification is the gold standard for entry-level networking professionals. It validates your ability to install, configure, operate, and troubleshoot medium-sized routed and switched networks. Whether you're breaking into IT, moving from help desk to networking, or formalizing hands-on experience, this Cisco CCNA 200-301 study guide covers everything you need to pass.

What Is the CCNA 200-301?

The CCNA 200-301 replaced all previous CCNA tracks (Routing & Switching, Security, Wireless, etc.) in 2020. It's now a single, consolidated exam that covers a broad foundation of networking knowledge. The exam consists of 100–120 questions (multiple-choice, drag-and-drop, simulations, and testlets) with a 120-minute time limit. The passing score varies but is typically around 825 out of 1000.

This exam is designed for candidates who have a solid grasp of networking fundamentals — typically 6–12 months of hands-on experience with Cisco devices or network administration. You don't need to be a CCIE, but you should be comfortable reading routing tables, subnetting quickly, and troubleshooting basic connectivity issues.

The 6 Exam Domains (With Weightings)

The CCNA 200-301 is organized into six domains. Understanding these weightings is the first step to building an efficient study plan.

1. Network Fundamentals — 20%

The foundation everything else builds on. You need to know:

• OSI and TCP/IP models — layer functions, encapsulation/de-encapsulation, protocol data units (PDUs)
• IPv4 and IPv6 addressing — subnetting, VLSM, CIDR notation, address types (unicast, broadcast, multicast)
• Ethernet — MAC addresses, frame structure, CSMA/CD, switch forwarding behavior
• Cabling — straight-through vs. crossover vs. rollover, fiber types (single-mode vs. multi-mode)
• Network topologies — star, mesh, bus, ring, hybrid
• Cisco device basics — boot process, configuration files (running-config vs. startup-config), CLI modes

Key trap: Subnetting questions appear throughout the exam, not just in this domain. You need to be able to subnet in your head — no calculator. Practice until you can find the network address, broadcast address, and valid host range in under 30 seconds. Binary math during the exam wastes precious time.

2. Network Access — 20%

This domain covers switching, VLANs, and wireless fundamentals:

• VLANs and trunking — 802.1Q tagging, native VLAN, access vs. trunk ports, DTP
• STP (Spanning Tree Protocol) — Root Bridge election, port states (blocking, listening, learning, forwarding, disabled), PortFast, BPDU Guard
• EtherChannel — LACP vs. PAgP, load-balancing methods
• CDP and LLDP — discovering directly connected Cisco neighbors
• Wireless LANs — SSID, BSSID, WLAN controllers (Cisco WLC), access point modes (autonomous vs. lightweight), WPA2/3, RF channels

Key trap: STP convergence and the port state machine are frequent exam topics. Many candidates memorize the states but can't apply them to troubleshooting scenarios. Expect questions where a switch with PortFast disabled and BPDU Guard disabled connects to another switch, and you need to predict the port state during convergence.

3. IP Connectivity — 25%

The largest domain — routing is core to the CCNA:

• Static routing — directly connected vs. floating static routes, next-hop vs. exit interface
• OSPFv2 — neighbor states (down, init, 2-way, exstart, exchange, loading, full), DR/BDR election, network types, cost calculation, default route propagation
• IPv6 routing — OSPFv3, SLAAC, DHCPv6 (stateless vs. stateful)
• Routing principles — longest prefix match, administrative distance, routing protocol metrics
• First Hop Redundancy Protocols — HSRP, VRRP, GLBP (HSRP is most tested)

Key trap: OSPF neighbor establishment is heavily tested. A common question presents a "show ip ospf neighbor" output showing a stuck state (like 2-way or exstart) and asks you to diagnose the cause — mismatched MTU, dead timers, area IDs, or authentication are the usual culprits.

4. IP Services — 10%

Small domain, but don't skip it — these are easy points:

• NAT/PAT — static NAT, dynamic NAT, PAT (overload), inside global/local vs. outside global/local terminology
• NTP — stratum levels, client/server operation, authentication
• DNS and DHCP — DHCP relay (ip helper-address), DNS resolution on routers
• SNMP — v1, v2c, v3 (security levels), MIB, OIDs, traps vs. polls
• Syslog — severity levels (0–7), logging destinations
• QoS basics — classification, marking (DSCP, CoS), queuing (FIFO, WFQ), trust boundaries

Key trap: NAT terminology trips up many candidates. Remember: "inside local" is the private IP before translation, "inside global" is the public IP after translation, "outside local" is how the destination sees the source, and "outside global" is the destination's real IP. Practice mapping these four terms to actual traffic flows.

5. Security Fundamentals — 15%

Security is increasingly important in the CCNA 200-301:

• Access control lists (ACLs) — standard vs. extended, named vs. numbered, implicit deny, placement best practices
• DHCP snooping — trusted vs. untrusted ports, DHCP binding database
• Dynamic ARP Inspection (DAI) — ARP validation, DHCP snooping dependency
• Port security — sticky MAC addresses, violation modes (shutdown, restrict, protect), aging
• Device hardening — disabling unused services, password encryption (service password-encryption), SSH vs. Telnet, login banner, AAA
• VPN basics — IPsec, site-to-site vs. remote access, IKE phases

Key trap: ACL order matters. The exam will give you an ACL with multiple entries and ask which traffic is permitted or denied. Remember: ACLs are processed top-down, first match wins, and there's an implicit deny at the end. A broad permit any entry placed before specific deny entries will shadow the denies entirely.

6. Automation and Programmability — 10%

This is the newest domain and often overlooked by candidates studying older materials:

• SDN architecture — control plane vs. data plane vs. management plane, Cisco DNA Center, northbound vs. southbound APIs
• REST APIs — HTTP methods (GET, POST, PUT, DELETE), JSON/XML payloads, RESTCONF vs. NETCONF
• Configuration management — Ansible, Chef, Puppet (high-level understanding)
• Chef vs. Puppet vs. Ansible — pull vs. push model (Chef and Puppet use pull agents, Ansible uses push over SSH)
• JSON, YAML, and XML — basic syntax, key-value pairs, arrays, nested structures
• Python for network automation — paramiko, netmiko, NetDevOps basics
• Controller-based vs. traditional networking — differences in SD-Access, SD-WAN, and campus fabric architectures

Key trap: Many candidates focus exclusively on routing and switching and skip automation. With 10% of the exam weight, skipping it means you start at 90% max. The exam tests conceptual understanding — you don't need to write Python code, but you do need to understand what REST APIs are, how JSON is structured, and the difference between NETCONF and RESTCONF.

The One Skill You Cannot Afford to Skip: Subnetting

Subnetting is the most important skill for the CCNA. It's tested implicitly in almost every domain — routing, OSPF configuration, ACL placement, VLAN sizing, NAT, and troubleshooting questions all assume you can subnet fluently.

Here's what you need to be able to do in under 30 seconds:

• Given 10.1.0.0/19, find the subnet mask, number of subnets, hosts per subnet, and the 3rd usable subnet's network address and broadcast address
• Given 192.168.1.50/27, find the network address, broadcast address, and valid host range
• Given 172.16.10.5 255.255.254.0, find which subnet this address belongs to
• Given a requirement for 500 hosts per subnet, calculate the smallest prefix length and mask
• Summarization: Given four networks (10.1.0.0/24, 10.1.1.0/24, 10.1.2.0/24, 10.1.3.0/24), find the smallest summarizing prefix

Don't rely on subnet calculators — you won't have one in the exam. Practice using the "magic number" method (256 − subnet octet = block size) until it's automatic. If you can subnet in your sleep, you've already cleared the hardest part of the exam.

Hands-On Lab Practice: Packet Tracer vs. GNS3 vs. EVE-NG

The CCNA includes simulation questions where you configure actual Cisco devices in a virtual environment. You cannot pass without hands-on practice. Here's what to use:

Tool	Best For	Key Tradeoffs
Cisco Packet Tracer	Beginners, CCNA only	Free, easy setup, but lacks advanced features and real IOS output
GNS3	Intermediate, wants real IOS	Free, uses real Cisco IOS images, more realistic, steeper learning curve
EVE-NG	Advanced labs, multiple simultaneous sessions	Web-based, powerful, resource-heavy, community edition is free

Recommendation: Start with Packet Tracer for CCNA fundamentals — it covers 95% of what you need and has zero configuration overhead. Move to GNS3 or EVE-NG if you want to practice with real IOS output or explore beyond the CCNA scope.

Build these labs before exam day:

1. Basic VLAN + trunking — two switches, inter-VLAN routing on a router-on-a-stick
2. OSPF multi-area — three routers, area 0 and area 1, verify neighbor states and LSDB
3. NAT/PAT — internal network accessing the internet through a border router
4. STP manipulation — four switches, manually elect the Root Bridge, enable PortFast on access ports
5. ACLs — extended ACL blocking specific traffic between VLANs, verify with show commands
6. DHCP + DHCP snooping — router as DHCP server, enable snooping on switches
7. HSRP — two routers providing gateway redundancy for a subnet

Recommended Study Approach: 12–16 Weeks

Most successful candidates study for 3 to 4 months at 1–2 hours per day. Here's a week-by-week roadmap:

Weeks 1–2: Network Fundamentals

• Study the OSI and TCP/IP models thoroughly — know each layer by name and function
• Master binary and hexadecimal conversion
• Start subnetting drills — do 10–15 problems every single day until it's automatic
• Understand cabling, Ethernet frame structure, and basic switch operation

Weeks 3–5: Switching and VLANs

• Set up Packet Tracer and build your first network with two switches and a router
• Configure VLANs, trunk ports, and inter-VLAN routing
• Study STP in depth — configure PortFast and BPDU Guard on access ports
• Learn EtherChannel, CDP/LLDP, and basic wireless concepts

Weeks 6–8: Routing and OSPF

• Configure static and default routes — understand administrative distance and floating static routes
• Set up OSPFv2 in a single area, then multi-area — verify with show ip ospf neighbor, show ip protocols, show ip route ospf
• Introduce OSPF cost manipulation
• Study IPv6 routing — configure OSPFv3 and SLAAC

Weeks 9–11: IP Services, Security, and Automation

• Configure NAT/PAT on a border router
• Set up ACLs — standard and extended, proper placement
• Enable DHCP snooping, DAI, and port security on switches
• Hardening a router — disable unused services, enable SSH, configure AAA
• Study automation fundamentals — JSON/YAML, REST APIs, SDN architecture, Ansible basics

Weeks 12–14: Review and Mock Exams

• Take full-length CCNA practice test questions. Use Certeli's CCNA exam questions for real exam-style practice
• Identify weak domains and revisit those topics
• Do timed lab simulations — you need to be fast with Cisco CLI
• Review subnetting drills (still doing these daily, right?)

Weeks 15–16: Exam Readiness

• Take multiple full-length mocks under timed conditions
• Analyze wrong answers and build a targeted review plan
• Re-read the official exam topics list — check each topic off
• Review automation and programmability — the domain most candidates leave points on the table

Common Question Trap Types

The CCNA 200-301 is designed to test real understanding, not memorization. Watch for these traps:

Simulation Questions

You'll be dropped into a CLI environment with a topology and asked to troubleshoot or configure. The trick: the issue is often something simple like a mismatched VLAN, an incorrect default gateway, or a port in the wrong mode. Use show commands methodically — show ip interface brief, show vlan brief, show interfaces trunk, show ip route — before changing anything.

"Choose Three" Testlets

The exam uses multi-select questions where you need to pick the correct three out of six options. These test breadth — if you only know two things about a topic, you'll miss the third. Know three facts about every major protocol.

Troubleshooting Without Config Access

Some questions show partial show output and ask what's wrong. You need to interpret show ip ospf neighbor to identify a stuck state, or show interfaces to spot CRC errors or duplex mismatches. Practice reading real router output during lab time.

Drag-and-Drop Ordering

Questions asking you to order steps (e.g., the TCP three-way handshake, OSPF neighbor states, frame encapsulation). Know the exact sequence — not just the concepts.

"Best" vs. "Correct" Questions

The exam often asks for the "best" solution, not just a correct one. Multiple answers might work, but one is more appropriate based on cost, simplicity, scalability, or security. Always read the scenario's constraints carefully.

Why Mock Exams Matter

There's a reason every successful CCNA candidate emphasizes practice tests. The exam doesn't just test your networking knowledge — it tests your ability to apply concepts under time pressure. Here's what makes mock exams essential:

• Question pattern recognition: After 500+ practice questions, you start recognizing common topologies, anti-patterns, and recurring CLI output formats
• Time management: 120 minutes for 100–120 questions means roughly 60–72 seconds per question. Simulation questions take longer, so you must be fast on multiple-choice
• Identifying weak domains: If you're scoring 85% on Network Access but 60% on IP Connectivity, you know exactly where to focus your last weeks
• Building confidence: Walking in knowing you've passed full-length mocks at 85%+ changes everything

Try our CCNA practice test questions at certeli.com/exam/ccna for realistic practice that mirrors the actual exam format, difficulty, and domain distribution.

Additional Resources

• Cisco Press CCNA 200-301 Official Cert Guide (Volume 1 & 2) by Wendell Odom — The definitive textbook, widely considered mandatory reading
• Cisco Packet Tracer — Free from Cisco Networking Academy, essential for lab practice
• Jeremy's IT Lab on YouTube — Excellent free CCNA course with labs and flashcards
• Boson ExSim — Gold-standard practice exams with detailed explanations (worth the investment)
• Anki flashcards — Use Jeremy's IT Lab Anki deck or build your own for spaced repetition
• r/ccna on Reddit — Active community for study strategies, resource recommendations, and exam experience reports
• Cisco DevNet Sandbox — Free access to real Cisco devices for automation practice

Final Tips

• Subnet every single day — even after you master it, stay sharp. A missed subnetting question can be the difference between passing and failing
• Lab everything — reading about OSPF and configuring OSPF are completely different. If you haven't typed a command, you haven't learned it
• Don't skip automation — 10% of the exam is free points if you study it. Understand REST APIs, JSON/YAML structure, and the difference between controller-based and traditional networking
• Learn your show commands — show running-config, show ip interface brief, show vlan brief, show interfaces trunk, show ip route, show ip protocols, show ip ospf neighbor, show interfaces, show mac address-table, show spanning-tree, show cdp neighbors, show port-security — know what each one outputs and when to use it
• Read each question twice — the exam embeds critical constraints in scenario descriptions. A single word like "routed" vs. "switched" or "IPv4" vs. "IPv6" can change the answer
• Use the flag feature — if you're stuck on a simulation, flag it and come back. Don't let one question eat 15 minutes
• Memorize port numbers — SSH (22), Telnet (23), HTTP (80), HTTPS (443), DNS (53), DHCP (67/68), SNMP (161/162), NTP (123), FTP (20/21), TFTP (69)
• Schedule the exam — having a fixed date creates accountability. The CCNA 200-301 is available at Pearson VUE test centers or online proctored

---

Ready to test your knowledge? Start practicing with real CCNA practice test questions and CCNA exam prep materials at certeli.com/exam/ccna. Our platform simulates the actual exam with detailed explanations for every answer — so you learn as you practice.

Good luck with your CCNA journey!