Select the path of the exam you want to take
Cisco offers two different routes to achieve CCNA certification. You can either take one large full exam or take two smaller exams on two separate dates. One exam option covers all CCNA basics, while option two - exam consists of a 90-minute Preliminary Exam and a 60-minute Networking exam. Both options lead to the same CCNA certification.
Register to take the exam
You must first register with Cisco to write the CCNA test. Registration is done over the phone to an external, independent testing organization, usually either Prometric or VUE. Both of these companies are worldwide, so you should be able to find a test center in your country. Contact information can be found on the Cisco Certification website. You must register at least two days before the desired test date. However, if you have a preference for a test date, you must register in advance to ensure that you can reserve your spot.
Preparing for the exam
Cisco has provided a wide range of exams to prepare for certification. There are CCNA practice test, online forums and study guides that can help you prepare to take the exam. Various independent books and guides are also available online and in popular bookstores.
Pass and pass the exam
Arrive at the test center 30 minutes before your test time and bring two pieces of identification with you, one with a photo and both with your signature. The test is conducted online and interactive. There is an online help available to assist you if you are struggling with the online interface. Most of the questions are multiple choice, some requiring multiple answers and focusing on specific Cisco network commands. A score of at least 85 percent is required to pass the exam and receive official certification, which is valid for three years. If you do not pass, you must wait at least 24 hours before attempting the test again.
Note: The Cisco CCNA 200-301 exam has replaced all old Cisco CCNA exams since February 24, 2020.
CCNA 200-301 Certification Objectives
1.0 Network Fundamentals - 20%
1.1 Explain the role and function of network components
1.1.a Routers
1.1.b Switches L2 and L3
1.1.c NG (Next-generation firewalls) and IPS firewalls
1.1.d Access points
1.1.e Controllers (Cisco DNA Center and WLC)
1.1.f Endpoints
1.1.g Servers
1.2 Describe the characteristics of network architectures and topologies
1.2.a 2 tier
1.2.b 3 third
1.2.c Spine-leaf
1.2.d WAN
1.2.e Small office/home office (SOHO)
1.2.f On-premises (on-premises) and Cloud
1.3 Compare physical interfaces and cable types
1.3.a Single-mode fiber and multimode fiber, copper
1.3.b Connections (Ethernet shared media and point-to-point)
1.3.c Concepts about PoE
1.4 Identify interface and cable problems (collisions, errors, mismatch duplex, and/or speed)
1.5 Comparing TCP to UDP
1.6 Configure and Verify IPv4 Addressing and Subnetting
1.7 Describe the need for private IPv4 addressing
1.8 Configure and Verify IPv6 Addressing and Prefixes
1.9 Compare IPv6 address types
1.9.a Global unicast
1.9.b Unique local
1.9.c Local link
1.9.d Anycast
1.9.e Multicast
1.9.f Modified EUI 64
1.10 Check the IP settings of the client OS (Windows, Mac OS, Linux)
1.11 Describe the principles of wireless networks
1.11.a Nonoverlapping Wi-Fi channels
1.11.b SSID
1.11.c RF
1.11.d Encryption
1.12 Explain the fundamentals of virtualization (virtual machines)
1.13 Describe the concepts of switching
1.13.a MAC learning and aging
1.13.b Frame switching
1.13.c Frame flooding
1.13.d MAC address table
2.0 Access to the Network - 20%
2.1 Configure and verify VLANs (normal range) covering multiple switches
2.1.a Access ports (data and voice)
2.1.b Default VLAN
2.1.c Connectivity
2.2 Configuring and Verifying Interswitch Connectivity
2.2.a Trunk ports
2.2.b 802.1Q
2.2.c Native VLAN
2.3 Configure and Verify Layer 2 Discovery Protocols (Cisco Discovery Protocol and LLDP)
2.4 Configure and verify (Layer 2/Layer 3) EtherChannel (LACP)
2.5 Describe the need for and basic operations of Rapid PVST Spanning Tree Protocol.
2.5.a Root port, root bridge (primary/secondary), and other port names
2.5.b Port states (forwarding/blocking)
2.5.c PortFast advantages
2.6 Comparing Cisco Wireless Architectures and AP modes
2.7 Describe the physical infrastructure connections of the WLAN components (AP, WLC, access/trunk ports, and LAG)
2.8 Describe the connections of the APs and WLC management accesses (Telnet, SSH, HTTP, HTTPS, console, and TACACS /RADIUS).
2.9 Configure wireless LAN access components for client connectivity using a GUI only for WLAN creation, security settings, QoS profiles and advanced WLAN settings
3.0 IP Connectivity - 25%
3.1 Interpreting the components of a routing table
3.1.a Routing protocol code
3.1.b Prefix3.1.c Network mask
3.1.d Next hop
3.1.e Administrative distance
3.1.f Metric
3.1.g Gateway of last resort
3.2 Determining how a router makes a default forwarding decision
3.2.a Longest match
3.2.b Administrative distance
3.2.c Routing protocol metric
3.3 Configure and Verify IPv4 and IPv6 Static Routing
3.3.a Default route
3.3.b Network route
3.3.c Host route
3.3.d Floating static
3.4 Configure and check single area OSPFv2
3.4.a Neighbor adjacencies
3.4.b Point-to-point
3.4.c Broadcast (DR/BDR selection)
3.4.d Router ID
3.5 Describe the purpose of the first hop redundancy protocols
4.0 IP Services - 10%
4.1 Configure and check inside source NAT (static and pools)
4.2 Configure and check NTP in client and server mode
4.3 Explain the role of DHCP and DNS in the network
4.4 Explain the function of SNMP in network operations
4.5 Describe the use of syslog features, including facilities and levels.
4.6 Configure and check DHCP client and relay
4.7 Explain per-hop behavior (PHB) forwarding for QoS as classification, marking, queuing, congestion, policing, shaping, etc.
4.8 Configuring devices for remote access with SSH
4.9 Describe the capabilities of the TFTP/FTP function in a network
5.0 Basic Security - 15%.
5.1 Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques)
5.2 Describe the elements of the security programs (user awareness, training, physical access control)
5.3 Configuring access to devices with passwords
5.4 Describe the elements of security policies such as management, complexity, and alternatives to passwords (multi-factor, certificate-based, and biometric authentication).
5.5 Describe remote access and site-to-site VPNs
5.6 Configure and check the access control lists
5.7 Configuring Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security)
5.8 Distinguishing the concepts of authentication, authorization, and accounting
5.9 Describe wireless security protocols (WPA, WPA2, and WPA3)
5.10 Configuring a WLAN using WPA2 PSK with a GUI
6.0 Automation and Programmability - 10%
6.1 Explain how automation impacts network management
6.2 Comparing traditional networks with the controller-based network
6.3 Describe controller-based and software defined architectures (overlay, underlay, and fabric).
6.3.a Separation of control plane and data plane
6.3.b APIs North-bound and south-bound
6.4 Comparing Traditional Campus Device Management with Device Management with Cisco DNA Center
6.5 Describe the characteristics of REST APIs (CRUD, HTTP verbs, and data encoding)
6.6 Recognize the capabilities of configuration management mechanisms such as Puppet, Chef, and Ansible.
6.7 Interpreting JSON-encoded data
