Cisco CCNA — Certified Network Associate Guide

The CCNA is the most widely recognized networking certification in the world. It validates your ability to install, configure, operate, and troubleshoot medium-sized routed and switched networks.

Exam Overview

Detail	Value
Exam Code	200-301
Provider	Cisco
Questions	100–120 (multiple choice, drag-drop, simulations)
Length	120 minutes
Passing Score	Variable (approx 820–850/1000)
Validity	3 years
Price	~$300 USD

Domain Breakdown

Domain	Weight
Network Fundamentals	20%
Network Access	20%
IP Connectivity	25%
IP Services	10%
Security Fundamentals	15%
Automation and Programmability	10%

Domain Deep Dives

Network Fundamentals (20%)

OSI and TCP/IP Models — Compare layers, encapsulation, de-encapsulation, PDU names
IPv4/IPv6 Addressing — Subnetting, VLSM, CIDR notation, binary/hex conversion, address types (unicast, broadcast, multicast, anycast)
Ethernet Technologies — Switching, MAC addresses, frame format, CSMA/CD, auto-MDIX
Network Topologies — Star, mesh, hybrid, bus, ring
Cabling Types — UTP/STP (Cat5e, Cat6, Cat6a), fiber (single-mode, multi-mode), coaxial, console cables, PoE
TCP/UDP — Port numbers, three-way handshake, windowing, flow control

Network Access (20%)

VLANs and Trunking — 802.1Q, native VLAN, DTP, VLAN ranges, VLAN tagging
STP (Spanning Tree Protocol) — Root bridge, port states (blocking, listening, learning, forwarding), PVST+, RSTP, PortFast, BPDUguard
EtherChannel — PAgP (Cisco proprietary) vs LACP (IEEE 802.3ad), load balancing
Wireless LANs — SSID, BSSID, channels, frequencies (2.4 GHz, 5 GHz, 6 GHz), WLAN standards (WiFi 4/5/6/6E), CAPWAP, autonomous vs lightweight AP

IP Connectivity (25%)

Routing Fundamentals — Static vs dynamic routing, administrative distance, routing table lookup
OSPFv2 — Link-state routing, areas (backbone area 0, standard, stub, totally stubby, NSSA), neighbor states, DR/BDR election, network types, cost metric
Inter-VLAN Routing — Router-on-a-stick, Layer 3 switch (SVI), routed ports
IPv6 Routing — OSPFv3, neighbor discovery, SLAAC, DHCPv6

IP Services (10%)

DHCP — DHCP operations, DHCP relay (ip helper-address), DHCP snooping
DNS — DNS resolution, DNS lookup, DNS caching
NTP — Stratum levels, client/server, symmetric active, authentication
SNMP — SNMPv1/v2c/v3, MIB, OIDs, traps vs informs, syslog
QoS — Classification, marking (DSCP, CoS), queuing, shaping, policing, trust boundary
NAT — Static NAT, dynamic NAT, PAT (overloading), port forwarding

Security Fundamentals (15%)

ACLs — Standard (source IP), Extended (source/dest IP + port), Named, placement best practices, sequence numbers
Security Best Practices — Password hardening, SSH vs Telnet, login banner, AAA, port security, DHCP snooping, DAI
VPNs — IPsec, site-to-site, remote access, TLS/DTLS
Firewall Concepts — Stateful vs stateless, zone-based firewall, DMZ
Mitigation Techniques — ACL filtering, storm control, BPDUguard, root guard

Automation and Programmability (10%)

SDN Architectures — Cisco DNA Center, SD-Access, overlay/underlay, VXLAN
Controller-Based vs Traditional — Northbound/southbound APIs, intent-based networking
REST APIs — HTTP methods (GET, POST, PUT, DELETE), JSON/XML, status codes
Configuration Management — Ansible, Puppet, Chef, Terraform, Cisco DNA Center
JSON/YAML — Data serialization formats for automation

Key Commands to Master

# Basic Configuration
enable
configure terminal
hostname R1
interface gigabitethernet 0/0
 ip address 192.168.1.1 255.255.255.0
 no shutdown

# VLAN Configuration
vlan 10
 name Sales
interface gigabitethernet 0/1
 switchport mode access
 switchport access vlan 10

# Routing
ip route 0.0.0.0 0.0.0.0 10.0.0.1  # default route
router ospf 1
 network 10.0.0.0 0.255.255.255 area 0

# ACLs
access-list 100 permit tcp 10.0.0.0 0.255.255.255 any eq 80

# Security
ip domain-name example.com
crypto key generate rsa
line vty 0 15
 transport input ssh
 login local

Study Tips

Master subnetting — Binary conversion, VLSM, summarization. Practice until it's second nature
Use Packet Tracer or GNS3 — Hands-on labs are essential for CCNA success
Know show commands — show running-config, show interfaces, show ip route, show vlan, show spanning-tree
Understand STP deeply — Port states, root bridge election, convergence, variants (PVST+, RSTP, MST)
Practice subnetting questions daily — "How many subnets? How many hosts? What is the subnet address?"

Practice Questions

Test your knowledge with our CCNA practice questions — 50+ questions covering all exam domains.

Start Practice →

Career Impact

CCNA opens doors to networking roles:

Network Administrator — $65k–$90k
Network Engineer — $80k–$110k
NOC Engineer — $55k–$75k
Systems Engineer — $75k–$100k

Next: CCNP Enterprise or CCNP Security

Cisco CCNA Exam Guide (200-301)