Cisco · 2026 Edition

200-301 Study Guide — How to Pass CCNA

A complete preparation guide written by Cisco-certified engineers. Covers the exam format, all 9 blueprint domains, a week-by-week study plan, and proven tips for passing first time.

3–5 months

Prep time

Intermediate

Difficulty

1367

Exam questions

825/1000

Pass mark

200-301 Exam at a Glance

Exam code

200-301

Full name

CCNA

Vendor

Cisco

Duration

120 minutes

Questions

~1367 items

Passing score

825 / 1000 (scaled)

Domains covered

9 blueprint domains

Recommended experience

1+ year of networking exposure or equivalent self-study

Typical prep time

3–5 months

Why Earn the 200-301?

The CCNA is the baseline credential for networking careers globally — required or preferred at thousands of employers and the gateway to CCNP-level roles.

Job roles this opens

Network EngineerNetwork AdministratorSystems EngineerIT Support Specialist

200-301 Exam Domains

Official Cisco blueprint weights — study time should roughly match these percentages.

10%IP Services
15%Security Fundamentals
10%Automation and Programmability
20%Network Fundamentals
20%Network Access
25%IP Connectivity
10%IP Services
15%Security Fundamentals
10%Automation and Programmability

Detailed domain breakdown with subtopics →

200-301 Study Plan

Month 1

Network Fundamentals & IP Connectivity

Tip: Master subnetting before moving on — it appears in multiple domains.

Month 2

Network Access (VLANs, STP, EtherChannel)

Tip: Draw STP topology diagrams by hand to internalise port states.

Month 3

IP Services & Security Fundamentals

Tip: Understand NAT types and ACL placement rules — they generate exam traps.

Month 4+

Automation, Weak Domains & Mock Exams

Tip: Use JT Exams domain analytics to target your lowest-accuracy areas.

200-301 Exam Tips

Subnetting is tested across multiple question types — master it completely before sitting the exam.

STP port states (Blocking, Listening, Learning, Forwarding) are a perennial exam topic with deliberate distractors.

CDP vs LLDP, NTP, DHCP relay — know the operational differences, not just definitions.

The Automation & Programmability domain (10%) is often under-studied. Don't skip it.

Book your exam date before you feel ready — candidates with a fixed deadline pass at higher rates.

Ready to practice 200-301?

Apply everything in this guide with adaptive practice questions, AI explanations, and domain analytics.

200-301 concept guides

Deep-dive explanations of the key topics tested on 200-301 — with exam key points and common misconceptions.

Spanning Tree Protocol

Plug two switches together with two cables and watch your network die.

IPv4 Subnetting

Subnetting is the skill that separates people who understand networking from people who just use it.

OSPF

Static routes break the moment a link goes down and nobody updates the config.

VLANs & Trunking

Without VLANs, every device on a switch is in the same broadcast domain.

Access Control Lists

An access control list is the gatekeeper on a router interface.

OSI & TCP/IP Models

Every time you load a webpage, seven invisible layers of technology coordinate to make it happen and most people could not name three of them.

Ethernet & Switching

Ethernet is the technology that connects almost every wired device in the world.

IPv6

IPv4 has roughly 4.

Static Routing & AD

Before a router can forward a packet somewhere, it needs to know how to get there.

NAT & PAT

Your home router gives your laptop a private IP address like 192.

DHCP & DNS

Two protocols make modern networks usable without any configuration from end users.

FHRP / HSRP

Devices on a network are configured with one default gateway address.

Wireless 802.11

Wi-Fi looks simple from the user side.

Layer 2 Security

Firewalls and intrusion detection systems protect the perimeter, but your switch infrastructure has its own set of vulnerabilities that operate entirely at Layer 2, below where most perimeter defenses look.

EtherChannel / LACP

Connect two switches with two cables and Spanning Tree will block one of them to prevent a loop.

Network Automation

Configuring a hundred switches one SSH session at a time does not scale.

NTP, SNMP & Syslog

Some of the most important things a network does happen in the background, invisible to users until they break.

Network Components

The CCNA 200-301 exam opens with network components — the physical and logical building blocks of every enterprise network.

Network Topologies

Network topology is the physical and logical layout of how devices connect.

Network Cabling

Physical layer knowledge is foundational for the CCNA 200-301 exam.

IPv6 Address Types

IPv6 address types appear throughout the CCNA 200-301 exam — in routing, neighbor discovery, and troubleshooting questions.

IP Verification Commands

Verifying IP address configuration on end hosts is a basic but exam-tested CCNA skill.

Virtualization & VRF

Virtualization appears on the CCNA 200-301 exam from two angles: compute virtualization (virtual machines and containers that run software) and network virtualization (VRFs that partition routing tables).

VLAN Types

VLANs are one of the most heavily tested topics on the CCNA 200-301 exam.

Inter-VLAN Routing

VLANs separate broadcast domains, but they also isolate devices in different VLANs from each other.

Wireless Architecture

Wireless LAN architecture is a significant topic area on CCNA 200-301 exam.

WLAN Configuration

The CCNA 200-301 exam tests your ability to configure and verify a WLAN using the Wireless LAN Controller GUI.

Device Management

Managing network devices securely is a core CCNA 200-301 topic.

Routing Table

The routing table is the decision engine of every router.

OSPF Detail

OSPF is the most heavily tested routing protocol on CCNA 200-301.

NAT Types

Network Address Translation (NAT) is how almost every private network connects to the internet.

IPsec VPN

VPNs (Virtual Private Networks) create encrypted tunnels over untrusted networks like the internet.

AAA Framework

AAA — Authentication, Authorization, and Accounting — is the security framework that controls who can access network devices, what they can do, and tracks what they did.

Wireless Security (WPA)

Wireless security is a required topic on CCNA 200-301.

TCP vs UDP

TCP and UDP are the two transport layer protocols that virtually all application traffic uses.

QoS Fundamentals

Quality of Service (QoS) is how networks prioritize traffic to ensure time-sensitive applications like voice and video receive the bandwidth and low latency they need, even when the network is congested.

Security Fundamentals

Security fundamentals form 15% of the CCNA 200-301 exam.

TFTP & FTP

TFTP and FTP are the two file transfer protocols used to manage Cisco IOS images, configuration files, and other network device files.

Related Study Guides