Cisco Certified Network Associate CCNA (200-301) Practice Exam

The Cisco Certified Network Associate (CCNA) 200-301 certification validates your foundational knowledge and skills in networking. Earning this globally recognized credential demonstrates your ability to install, configure, operate, and troubleshoot basic network infrastructure. This makes you a valuable asset for any organization relying on a robust and secure network.

Who Should Take This Exam?

• IT Support Specialists
• Network Technicians
• Help Desk Professionals
• Anyone New to Networking

Are There Prerequisites?

There are no formal prerequisites for taking the CCNA 200-301 exam. However, a basic understanding of computers and interest in networking would be beneficial.

Roles and Responsibilities

With a CCNA certification, you might qualify for roles such as:

• Network Administrator: Installing, configuring, and maintaining network devices like routers and switches.
• Network Support Specialist: Providing technical support for network users and troubleshooting network issues.
• Network Technician: Assisting with network installation, configuration, and troubleshooting tasks.
• Junior Network Engineer: Supporting network operations under the supervision of experienced network engineers.

Exam Pattern 

• Exam Name: Cisco Certified Network Associate
• Exam Code: 200-301
• Length of Time:  120 Minutes
• Registration Fee: $300 USD
• Exam Language English, Japanese

Course Structure

Cisco Certified Network Associate CCNA (200-301) covers the following topics- 

1. Network Fundamentals 20%

• 1.1 Explain the role and function of network components
• 1.2 Describe the characteristics of network topology architectures
• 1.3 Compare physical interface and cabling types
• 1.4 Identify interface and cable issues (collisions, errors, mismatch duplex, and/or speed)
• 1.5 Compare TCP to UDP
• 1.6 Configure and verify IPv4 addressing and subnetting
• 1.7 Describe the need for private IPv4 addressing
• 1.8 Configure and verify IPv6 addressing and prefix
• 1.9 Compare IPv6 address types
• 1.10 Verify IP parameters for Client OS (Windows, Mac OS, Linux)
• 1.11 Describe wireless principles
• 1.12 Explain virtualization fundamentals (virtual machines)
• 1.13 Describe switching concepts

2. Network Access 20%

• 2.1 Configure and verify VLANs (normal range) spanning multiple switches
• 2.2 Configure and verify Interswitch connectivity
• 2.3 Configure and verify Layer 2 discovery protocols (Cisco Discovery Protocol and LLDP)
• 2.4 Configure and verify (Layer 2/Layer 3) EtherChannel (LACP)
• 2.5 Describe the need for and basic operations of Rapid PVST+ Spanning Tree Protocol and identify basic operations 
• 2.6 Compare Cisco Wireless Architectures and AP modes
• 2.7 Describe physical infrastructure connections of WLAN components (AP, WLC, access/trunk ports, and LAG)
• 2.8 Describe AP and WLC management access connections (Telnet, SSH, HTTP, HTTPS, console, and TACACS+/RADIUS)
• 2.9 Configure the components of a wireless LAN access for client connectivity using GUI only such as WLAN creation, security settings, QoS profiles, and advanced WLAN settings

3. IP Connectivity 25%

• 3.1 Interpret the components of the routing table
• 3.2 Determine how a router makes a forwarding decision by default
• 3.2.c Routing protocol metric
• 3.3 Configure and verify IPv4 and IPv6 static routing
• 3.4 Configure and verify single area OSPFv2
• 3.5 Describe the purpose of first-hop redundancy protocol

4. IP Services 10%

• 4.1 Configure and verify inside source NAT using static and pools 2019 Cisco Systems, Inc. This document is Cisco Public. 
• 4.2 Configure and verify NTP operating in a client and server mode
• 4.3 Explain the role of DHCP and DNS within the network
• 4.4 Explain the function of SNMP in network operations
• 4.5 Describe the use of syslog features including facilities and levels
• 4.6 Configure and verify DHCP client and relay
• 4.7 Explain the forwarding per-hop behavior (PHB) for QoS such as classification, marking, queuing, congestion, policing, shaping
• 4.8 Configure network devices for remote access using SSH
• 4.9 Describe the capabilities and function of TFTP/FTP in the network

5. Security Fundamentals 15%

• 5.1 Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques)
• 5.2 Describe security program elements (user awareness, training, and physical access control)
• 5.3 Configure device access control using local passwords
• 5.4 Describe security password policies elements, such as management, complexity, and password alternatives (multifactor authentication, certificates, and biometrics)
• 5.5 Describe remote access and site-to-site VPNs
• 5.6 Configure and verify access control lists
• 5.7 Configure Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security)
• 5.8 Differentiate authentication, authorization, and accounting concepts
• 5.9 Describe wireless security protocols (WPA, WPA2, and WPA3)
• 5.10 Configure WLAN using WPA2 PSK using the GUI

6. Automation and Programmability 10%

• 6.1 Explain how automation impacts network management
• 6.2 Compare traditional networks with controller-based networking
• 6.3 Describe controller-based and software-defined architectures (overlay, underlay, and fabric)
• 6.4 Compare traditional campus device management with Cisco DNA Center enabled device management
• 6.5 Describe characteristics of REST-based APIs (CRUD, HTTP verbs, and data encoding)
• 6.6 Recognize the capabilities of configuration management mechanisms Puppet, Chef, and Ansible
• 6.7 Interpret JSON encoded data