Cisco 200-301 CCNA Practice Exam
Prepare for the Cisco Certified Network Associate exam (200-301) — Cisco's flagship associate credential and the gateway to its enterprise networking track — with scenario-based, source-cited practice questions across all six domains: network fundamentals, network access, IP connectivity, IP services, security fundamentals, and automation and programmability. Reflects the February 2026 refresh, including AI, cloud, and automation topics. Includes Learn mode and full timed Exam mode.
Start 24-hour free trial →200-301 CCNA exam at a glance
- Vendor
- Cisco
- Exam code
- 200-301
- Certification
- Cisco Certified Network Associate (CCNA)
- Level
- Associate
- Format
- Approx. 100–120 questions; multiple choice, drag-and-drop, and simlet/testlet simulation items
- Duration
- 120 minutes
- Passing score
- Cisco does not publish a fixed passing score for CCNA; results are scaled and reported with a domain-level breakdown
- Cost (USD)
- $300 (plus applicable tax; regional pricing varies)
- Current version
- Refreshed February 3, 2026 (code unchanged; added AI, cloud, and automation emphasis)
- Prerequisites
- None. Cisco recommends about one year of hands-on networking experience
- Delivery
- Pearson VUE test center or online proctored
- Validity
- 3 years; recertify by passing a qualifying exam or earning continuing education credits
Sources: Cisco — CCNA certification · Cisco Learning Network — 200-301 exam topics. Confirm current format, pricing, and passing standard with Cisco before scheduling.
About the 200-301 CCNA certification
The Cisco Certified Network Associate (CCNA) validates foundational networking skills — configuring, operating, and troubleshooting enterprise networks — and is the single associate-level exam that opens Cisco's enterprise track toward CCNP and CCIE. The 200-301 exam is broad: you are expected to configure and verify VLANs, trunking, inter-VLAN routing, static routes, OSPF, DHCP, NAT, ACLs, and SSH, read a routing table, subnet quickly, and diagnose failures by layer. Since the February 2020 overhaul it has been a single comprehensive exam rather than a set of specialization tracks.
Cisco refreshed 200-301 on February 3, 2026 (the code stayed the same), deepening automation and adding modern topics such as generative AI, machine learning in network operations, and cloud network management — a shift Cisco frames as moving from "network configurator" toward "network operator." If you are studying from pre-2024 materials you will be missing the automation and AI content now tested. The exam is heavily scenario- and simulation-based; you will configure and verify on simulated devices, not just answer trivia. For the fundamentals behind these topics, see the networking study guides in the Learning Hub.
200-301 CCNA exam domains and weights
Cisco publishes six domains with the official weightings below (they sum to 100%). IP Connectivity is the single largest domain — weak subnetting, routing-table reading, OSPF, and IPv6 compound here — so weight your study accordingly. The smaller 10% domains (IP Services, Automation) still carry reliable points for a little focused practice.
Routing concepts, the routing table and route selection, static routing, single-area OSPFv2, IPv4 and IPv6 addressing and subnetting, and first-hop redundancy concepts.
Network components and topologies, cabling and interfaces, the TCP/IP and OSI models, IPv4/IPv6 addressing, wireless principles, virtualization, and switching concepts.
VLANs and trunking, inter-switch connectivity, EtherChannel, spanning tree basics, and wireless LAN configuration and management access.
Security concepts and threats, device hardening, access control lists, Layer 2 security features, wireless security (WPA2/WPA3, 802.1X), and AAA concepts.
NAT, NTP, DHCP and DNS roles, SNMP, syslog, QoS concepts, SSH, and TFTP/FTP for network operations.
Automation impact on network management, controller-based and software-defined architectures, REST APIs, configuration management (Ansible, Terraform) concepts, JSON, and — new in the 2026 refresh — AI/ML and cloud network management topics.
Source: Cisco Learning Network — 200-301 CCNA exam topics. Weights are Cisco's published percentages and sum to 100%. Domains are shown largest-weight first; Cisco lists Network Fundamentals as Domain 1.
Who 200-301 CCNA is for
CCNA is the benchmark associate networking credential and a common first Cisco certification:
- Network engineers and administrators validating core routing, switching, and troubleshooting skills.
- Help-desk and support technicians moving into network roles.
- Systems administrators who manage infrastructure and want formal networking depth.
- Students and career changers entering networking, using CCNA as the gateway to CCNP and beyond.
There are no formal prerequisites, though Cisco recommends about a year of hands-on networking experience. CCNA pairs naturally with an entry security credential such as the CCST Cybersecurity (100-160), and it is the foundation for the professional-level CCNP track. For the roles CCNA supports and where they lead, see the network engineer career paths in the Career Hub.
What this 200-301 CCNA practice exam delivers
Learn mode
Get the correct answer, the reasoning, why each wrong option is wrong, and a link to authoritative Cisco material right after each question — ideal for the "what do you check first?" troubleshooting scenarios CCNA favors.
Exam mode
Rehearse on a 120-minute timer against full-length question sets that mirror the real 200-301 format, so you build the pacing to handle simlets and heavier scenario items without running out of time.
Source-linked explanations
Every answer points to authoritative Cisco material — the CCNA exam topics and certification pages — so you learn the concept and can verify it, not just memorize a letter.
Score by domain
Results break down across the six CCNA domains, so practice tells you exactly which area — connectivity, access, fundamentals, security, services, or automation — to sharpen next.
Sample 200-301 CCNA practice questions
Ten free questions across the six CCNA domains, with full explanations and links to authoritative Cisco references. The complete bank is available with the 24-hour trial.
A remote worker cannot access internal company resources over the VPN. Which troubleshooting step comes first?
- Verify the user's credentials and VPN configuration
- Restart the company's firewall
- Reset the user's password
- Replace the VPN server
Show answer & explanation
Correct: A — Verify credentials and VPN configuration. Start with the quick, non-disruptive check: confirm the user's credentials and client/VPN settings before touching shared infrastructure.
Why not the others: restarting the firewall (B) disrupts everyone and is premature; resetting the password (C) assumes a cause you have not confirmed; and replacing the VPN server (D) is a drastic last resort.
Source: Cisco — CCNA security fundamentals topics →You are implementing VLANs on a new switch. What must be configured to allow communication between different VLANs?
- Assign static IPs to each device
- Enable DHCP snooping
- Trunking on uplink ports and a Layer 3 device for inter-VLAN routing
- Increase switch port speed
Show answer & explanation
Correct: C — Trunking plus a Layer 3 device for inter-VLAN routing. VLANs are separate broadcast domains; traffic between them must be routed by a Layer 3 switch or router, and trunk links carry the tagged VLANs.
Why not the others: static IPs (A) do not enable routing between subnets; DHCP snooping (B) is a security feature, not a routing mechanism; and port speed (D) is unrelated to inter-VLAN traffic.
Source: Cisco — CCNA network access topics →A user can't reach a server by hostname but can reach it by IP address. What is the most likely cause?
- DNS resolution issue
- Server is offline
- Incorrect subnet mask
- Port security violation
Show answer & explanation
Correct: A — DNS resolution issue. If IP works but the name does not, name-to-address resolution is failing — a DNS problem. The path and the host are clearly reachable.
Why not the others: an offline server (B) would fail by IP too; a wrong subnet mask (C) or a port-security violation (D) would break connectivity regardless of whether you used a name or an address.
Source: Cisco — CCNA IP services topics → Further reading: PowerKram — DNS & name resolution →A switch port is showing frequent CRC errors. What is the first thing to check?
- Increase switch memory
- Replace or reseat the cable
- Disable spanning tree
- Assign a static MAC address
Show answer & explanation
Correct: B — Replace or reseat the cable. CRC errors point to a physical-layer problem — a damaged or loose cable, connector, or interference. Check the cable first.
Why not the others: switch memory (A) does not cause CRC errors; disabling spanning tree (C) risks loops and is unrelated; and a static MAC (D) has nothing to do with frame errors.
Source: Cisco — CCNA network fundamentals topics →A router has a misconfigured default gateway. What is the potential impact?
- Loss of connectivity to external networks
- Duplicate MAC addresses
- VLAN hopping attacks
- Faster routing performance
Show answer & explanation
Correct: A — Loss of connectivity to external networks. The default gateway (or default route) is the path for traffic destined outside the local network; if it is wrong, off-subnet and internet destinations become unreachable.
Why not the others: duplicate MACs (B) are a Layer 2 issue; VLAN hopping (C) is a switching attack; and a misconfiguration never yields "faster" routing (D).
Source: Cisco — CCNA IP connectivity topics → Further reading: PowerKram — routing & default gateways →A network administrator needs to restrict web browsing for certain users. What is a common way to do this?
- Increase switch bandwidth
- Enable port aggregation
- Configure access control lists (ACLs)
- Deploy IPv6
Show answer & explanation
Correct: C — Configure ACLs. Access control lists filter traffic by source, destination, protocol, and port, so they are the standard tool to permit or deny specific access such as web browsing.
Why not the others: more bandwidth (A) and port aggregation (B) affect throughput, not access policy; and deploying IPv6 (D) is an addressing change, not an access control.
Source: Cisco — CCNA security fundamentals topics → Further reading: PowerKram — access control lists →A user reports intermittent connectivity on their desktop. What is the first step in troubleshooting?
- Replace the desktop
- Reboot the core switch
- Replace the VPN server
- Check the physical network cable and port
Show answer & explanation
Correct: D — Check the physical cable and port. Intermittent connectivity for a single desktop most often traces to a physical-layer fault — a loose or damaged cable or a flaky port. Start at Layer 1.
Why not the others: replacing the desktop (A) is drastic before diagnosis; rebooting the core switch (B) would disrupt everyone for a single-user symptom; and the VPN server (C) is unrelated to a local desktop's intermittent link.
Source: Cisco — CCNA network fundamentals topics →A company wants to segment guest Wi-Fi from the internal network. What should be implemented?
- VLANs for network segmentation
- Increase firewall throughput
- Deploy more access points
- Enable port security
Show answer & explanation
Correct: A — VLANs for network segmentation. Placing guest Wi-Fi on its own VLAN (and subnet) isolates it from internal traffic at Layer 2, so guest devices cannot reach internal resources; ACLs or a firewall policy then control any allowed paths.
Why not the others: more firewall throughput (B) and more access points (C) address capacity, not isolation; and port security (D) limits MAC addresses per switch port but does not segment the guest network.
Source: Cisco — CCNA network access topics → Further reading: PowerKram — network segmentation with VLANs →A switch stack loses synchronization between members. What is an appropriate initial troubleshooting step?
- Replace all stack members
- Check the stack cables and reseat if necessary
- Update all switch firmware
- Disable all interfaces
Show answer & explanation
Correct: B — Check and reseat the stack cables. Loss of stack synchronization is commonly a stacking-cable or connection fault; inspecting and reseating the cables is the low-risk first step.
Why not the others: replacing all members (A) is drastic before diagnosis; a firmware update (C) may be warranted later but is premature; and disabling all interfaces (D) causes an outage without addressing the cause.
Source: Cisco — CCNA network access topics →An IT team wants high availability for their internet connection. What should be implemented?
- Upgrade all switches to Layer 3
- Deploy additional DHCP servers
- Increase wireless signal strength
- Dual ISPs with automatic failover
Show answer & explanation
Correct: D — Dual ISPs with automatic failover. Redundant internet links from two providers with automatic failover remove the single point of failure at the WAN edge, keeping connectivity if one ISP drops.
Why not the others: Layer 3 switches (A), extra DHCP servers (B), and stronger Wi-Fi (C) improve LAN capabilities but none provides internet-link redundancy.
Source: Cisco — CCNA IP connectivity topics → Further reading: PowerKram — network engineer career paths →Keep going: Learning & Career resources
CCNA is the foundation of Cisco's enterprise track and a strong resume anchor on its own. Both PowerKram hubs back your next step.
Deep dive: the 2026 refresh, exam format, study path, and where CCNA leads
The February 2026 refresh
Cisco refreshed the 200-301 exam effective February 3, 2026, keeping the same code and the six-domain structure but deepening automation and adding modern content: generative AI fundamentals, machine learning in network operations, and cloud network management. This continues the direction set by the August 2024 v1.1 update (which first added AI/ML, cloud, and expanded REST API, JSON, and configuration-management topics). The practical takeaway: study materials written before mid-2024 are missing tested content, so use current resources. Cisco — CCNA certification →
Exam format and scoring
The 200-301 exam runs 120 minutes with roughly 100–120 questions in mixed formats: multiple choice, drag-and-drop, and simlets/testlets (simulated network scenarios with one or more questions). Cisco does not publish a fixed passing score for CCNA; your result is scaled and comes with a domain-level breakdown. Note that CCNA does not let you skip a question and return to it later, so answer each item before moving on. Read the 200-301 format guide →
Realistic study path
Most candidates need roughly 200–300 hours (about three to five months at a steady pace). The exam is passed by converting the blueprint into repeatable network decisions, not by reading it: build, break, verify, and review in a lab (Cisco Packet Tracer, CML, or GNS3/EVE-NG). Master subnetting early — it underpins the largest domain and is where candidates most often struggle — then drill VLANs and trunking, static routing and OSPF, DHCP and NAT, ACLs, and SSH. Do not ignore the 10% Automation domain: REST methods, reading simple JSON, and controller-based concepts are compact, reliable points. Rehearse in Learn mode, then run full 120-minute simulations in Exam mode. Read the CCNA study plan →
Where CCNA leads
CCNA is the gateway to Cisco's professional track: the CCNP Enterprise (a core exam plus a concentration) is the natural next step, and it also underpins security, data center, and service-provider paths. As an associate credential it maps to roles such as network engineer, network administrator, and systems engineer. It pairs well with an entry security credential like the CCST Cybersecurity (100-160). See more Cisco exams →
Cost, scheduling, and recertification
The exam costs $300 USD (plus applicable tax; regional pricing varies) and is delivered at a Pearson VUE test center or online with a proctor. The CCNA certification is valid for three years; you recertify by passing a qualifying Cisco exam or by earning Continuing Education credits before it expires. Confirm current pricing and policies on Cisco's site before booking. Career Hub — network engineer roles →
Frequently asked questions
Did the CCNA 200-301 exam change in 2026?
Yes. Cisco refreshed the 200-301 exam effective February 3, 2026, keeping the same exam code and the six-domain structure while deepening automation and adding generative AI, machine learning, and cloud network management topics. It is a refreshed version of the same active exam, not a retirement, so materials updated for the current blueprint are what you need.
What format is the 200-301 CCNA exam?
120 minutes with roughly 100 to 120 questions in mixed formats: multiple choice, drag-and-drop, and simlets/testlets (simulated network scenarios). Cisco does not publish a fixed passing score; results are scaled with a domain-level breakdown. You cannot skip a question and return to it later.
What are the 200-301 CCNA domains and weights?
Six domains: Network Fundamentals (20%), Network Access (20%), IP Connectivity (25%, the largest), IP Services (10%), Security Fundamentals (15%), and Automation and Programmability (10%). IP Connectivity is the heaviest, so subnetting, routing, and OSPF deserve the most study time.
How much does the CCNA exam cost, and are there prerequisites?
$300 USD plus applicable tax (regional pricing varies). There are no formal prerequisites, though Cisco recommends about one year of hands-on networking experience. The certification is valid for three years.
What should I pursue after CCNA?
CCNA is the gateway to Cisco's professional track — CCNP Enterprise (a core exam plus a concentration) is the natural next step. Many candidates also pair CCNA with an entry security credential such as the CCST Cybersecurity (100-160).
Start your free 24-hour 200-301 CCNA practice trial
Full access to hundreds of CCNA questions, both study modes, source-linked explanations, and score-by-domain. No credit card required.
Start free trial →Cisco 200-301 CCNA Network Associate Practice Exam
Previous users
Very satisfied with PowerKram
Satisfied users
Would reccomend PowerKram to friends
Passed Exam
Using PowerKram and content designed by experts
Highly Satisfied
with question quality and exam engine features