Cisco CCNA (200-301) Study Guide: All Six Domains, Where the Points Are
Last updated October 24, 2026
CCNA is Cisco's broadest associate-level certification, and the single 200-301 exam covers everything from cabling basics to automation and controller-based networking in one sitting — there's no splitting it into two exams the way CompTIA does with A+. That breadth is exactly what makes it hard to scope a study plan for. Below is every domain in the current blueprint, the skills that quietly decide pass or fail, and where candidates lose points they didn't expect to.
The six domains and their weight
- IP Connectivity (25%) — the single largest domain. Routing concepts, route selection, OSPFv2 configuration and verification.
- Network Fundamentals (20%) — devices, topologies, cabling, IPv4/IPv6 addressing and subnetting.
- Network Access (20%) — VLANs, trunking, spanning tree, EtherChannel, and wireless architecture.
- Security Fundamentals (15%) — security concepts, access control lists, device hardening, and wireless security.
- IP Services (10%) — NAT, NTP, DHCP, DNS, SNMP, and QoS concepts.
- Automation and Programmability (10%) — the newest major addition to CCNA: REST APIs, JSON data formats, and controller-based networking concepts.
IP Connectivity and Network Fundamentals together make up 45% of the exam, and both lean heavily on IPv4 addressing math — which is why subnetting fluency matters more than any single topic on this list.
Network Fundamentals: the subnetting skill that has to be automatic
Cisco expects you to find a network address, a broadcast address, or a usable host range from a given IP and prefix length (like 192.168.5.130/26) in well under a minute, by calculation rather than by guessing or counting in your head one address at a time. The exam doesn't give you a subnet calculator, and slow subnetting is the single biggest reason candidates run out of time before finishing all 100-ish questions.
Drill these cold before anything else in this domain:
- Converting a prefix length (/24, /26, /27, /30) to a dotted-decimal subnet mask and back.
- Finding the block size for a given prefix (a /26 is blocks of 64, a /27 is blocks of 32, and so on).
- Given any host address and mask, finding its network address, broadcast address, and usable host range without writing out every address in the block.
IP Connectivity: routing logic beyond "it just works"
This domain tests two related skills: picking the right route when more than one exists, and understanding OSPF well enough to configure and verify basic single-area adjacencies. Two rules decide almost every "which route wins" question on the exam:
- Longest prefix match wins first. A /25 route is always preferred over a /24 or /16 covering the same destination, regardless of which protocol learned it.
- Administrative distance decides between sources at equal prefix length. A static route (AD 1) beats an OSPF route (AD 110) covering the identical prefix — the exam uses this to catch candidates who assume "dynamic beats static" by default.
On the OSPF side, know the Designated Router/Backup Designated Router election on multiaccess (Ethernet) segments, and be comfortable reading the output of neighbor and adjacency verification commands — configuration questions on this exam are frequently paired with "now verify it worked" follow-ups.
Network Access: VLANs, trunking, and spanning tree
This domain is where switching lives. The exam separates access-port behavior (a single VLAN, untagged to the end device, tagged internally by the switch) from trunk-port behavior (multiple VLANs, typically 802.1Q-tagged between switches) constantly, and candidates who blur the two lose points on what should be straightforward questions. Spanning Tree Protocol concepts (root bridge election, port roles, BPDU Guard) and EtherChannel basics round out the domain.
Security Fundamentals: ACLs are the center of gravity
Access control lists carry a disproportionate share of this domain's questions. The exam tests standard ACLs (source address only) against extended ACLs (source, destination, protocol, and port) and expects you to read a line like access-list 101 permit tcp 192.168.1.0 0.0.0.255 host 10.10.10.10 eq 80 and know exactly what it does and doesn't match — including the implicit deny that closes every ACL. Beyond ACLs, expect core security vocabulary (vulnerability vs. exploit vs. threat vs. mitigation) and basic device-hardening and wireless-security concepts.
IP Services and Automation: the smaller domains that still cost points
IP Services (NAT, DHCP, DNS, NTP, SNMP) and Automation and Programmability (REST API methods, JSON structure, controller-based networking) are only 10% each, but candidates often under-study them precisely because they're small — and then lose easy points on questions that only required recognizing that NTP synchronizes time or that an HTTP GET request retrieves a resource rather than changes one. Automation in particular is the newest content on the exam and the area most under-covered by older study material, since Cisco added it as CCNA shifted toward reflecting real modern network-operations work.
How long should you study
Candidates with some networking background (help desk, Network+, or hands-on exposure to switches and routers) typically need eight to twelve weeks of focused study. Candidates coming in without that foundation often need three to four months, since CCNA assumes comfort with binary/IPv4 math and basic networking vocabulary that takes time to build if you're starting from zero.
Where candidates lose points
- Subnetting too slowly. If you have to count addresses one at a time instead of calculating block sizes directly, you'll run out of time before the exam runs out of questions.
- Confusing administrative distance with metric. AD picks the route source; metric only matters for comparing routes within the same source. Mixing the two up is one of the most common wrong answers on IP Connectivity questions.
- Treating standard and extended ACLs as interchangeable. A standard ACL can only match source address — if a question needs a destination, protocol, or port match, a standard ACL is never the right answer, no matter how the wording is dressed up.
- Skimming Automation and Programmability because it's only 10%. It's unfamiliar territory for candidates with a traditional networking background, and unfamiliar territory under time pressure costs more points than its exam weight suggests.
Why full-rationale practice questions help
CCNA's wrong answers are rarely absurd — a question about route selection will offer a plausible-sounding distractor about metrics when the real answer turns on administrative distance, or vice versa. Practicing with a rationale that explains why each of the other three options is wrong, not just which letter is correct, is what turns "I recognized the right answer" into "I understand why the others fail" — the difference that matters when the real exam phrases the same concept a different way.
Cisco CCNA Exam v1.1 (200-301) - 900 Full Rationale Questions & Answers — $29.99, instant PDF download with full rationale on every answer.
View the practice questions →If you're deciding between CCNA and a CompTIA path
CCNA goes deeper into Cisco-specific configuration and verification than CompTIA's Network+, while Network+ is vendor-neutral and a common prerequisite step for candidates newer to networking: