The Complete CCNA 200-301 Study Guide: Every Topic, Linked
The CCNA is Cisco’s associate-level certification and the single most recognized entry credential in networking. The current exam, 200-301 CCNA v1.1 (refreshed August 2024), is one 120-minute test covering six domains, from how a frame crosses a switch to how you automate a network with Python and REST APIs. The blueprint is broad but shallow — it rewards understanding the why of each technology far more than memorizing command syntax — and the hardest part for most candidates is simply seeing the whole thing at once and knowing which topics they have actually internalized versus merely read. This post is that map. Every exam domain below lists its topics, each linked to a full deep-dive post on this blog, so you can navigate the entire CCNA body of knowledge from one page. Where a topic is still being written, it is marked as such rather than linked. Treat this as the index; treat each linked post as the chapter.
How the exam is structured
The 200-301 is a single exam — there are no separate written/lab components at the associate level — typically 100–120 questions in 120 minutes, mixing multiple choice, drag-and-drop, and a handful of simulation/simlet items. There is no formal prerequisite. The six domains and their official weightings:
| # | Domain | Weight |
|---|---|---|
| 1.0 | Network Fundamentals | 20% |
| 2.0 | Network Access | 20% |
| 3.0 | IP Connectivity | 25% |
| 4.0 | IP Services | 10% |
| 5.0 | Security Fundamentals | 15% |
| 6.0 | Automation and Programmability | 10% |
IP Connectivity (routing) is the single heaviest domain at 25%, and together with Network Fundamentals and Network Access it means roughly two-thirds of the exam is core addressing, switching, and routing. Security is a meaningful 15%, and automation — the most modern and, for many traditional network engineers, the least familiar material — is 10%.
What changed in v1.1
The August 2024 v1.1 refresh did not overhaul the structure; the six domains and weights are unchanged. It modernized the edges:
- Added explicit mention of AI/ML and generative AI in the context of network operations.
- Expanded cloud network management and the role of controllers / dashboards.
- Tightened language around automation, APIs, and data formats (JSON) in domain 6.0.
- Refreshed wireless and security wording to match current best practice (WPA3, etc.).
If you studied for the older v1.0, the deltas are small and concentrated in domains 1.0 (cloud/AI framing) and 6.0 (automation). The fundamentals — subnetting, STP, OSPF, NAT, ACLs — are unchanged.
Domain 1.0 — Network Fundamentals (20%)
The foundation: how networks are modeled, addressed, and physically built. Subnetting lives here and is worth more practice than any other single skill on the exam.
| Exam topic | Covered in |
|---|---|
| Roles of network components; the OSI & TCP/IP models | The OSI and TCP/IP Models in Practice |
| IPv4 addressing and subnetting | IPv4 Addressing and Subnetting |
| Subnetting past the octet boundary (VLSM by hand) | Subnetting Beyond the Octet Boundary |
| IPv6 addressing and address types | IPv6 Basics and Why It Matters · IPv6 Practical Guide |
| Wireless principles (RF, bands, channels) | Wireless Networking Fundamentals |
| Switching/interface concepts, cabling, connectivity verification | Ethernet and Switching Fundamentals · Traceroute, Ping, and the Troubleshooting Toolkit |
Domain 2.0 — Network Access (20%)
Layer 2: how switches build the LAN, segment it with VLANs, carry multiple VLANs over trunks, prevent loops with spanning tree, bundle links, and connect wireless clients.
| Exam topic | Covered in |
|---|---|
| Ethernet, MAC learning, the CAM table, frame forwarding | Ethernet and Switching Fundamentals |
| VLANs, access vs trunk ports, 802.1Q, inter-VLAN routing | VLANs and Trunking · Network Segmentation with VLANs |
| Spanning Tree Protocol (STP/RSTP), PortFast, BPDU Guard | Spanning Tree Protocol |
| EtherChannel (LACP) link aggregation | Queued — see the future topics list |
| Cisco Discovery Protocol (CDP) and LLDP | Covered within Ethernet and Switching Fundamentals |
| Wireless: BSS/ESS, APs and WLCs, WPA2/WPA3, WLC configuration | Wireless Networking Fundamentals |
Domain 3.0 — IP Connectivity (25%)
The heaviest domain: how routers choose paths and move packets between networks. Static routing, OSPF, and — new to many candidates — first hop redundancy all live here.
| Exam topic | Covered in |
|---|---|
| Routing table, administrative distance, static & default routes | IPv4 Routing Fundamentals |
| OSPFv2 single-area: DR/BDR, neighbors, cost, passive interfaces | OSPF Single-Area Configuration |
| First Hop Redundancy Protocols (HSRP, VRRP, GLBP) — topic 3.5 | First Hop Redundancy Protocols — HSRP, VRRP, GLBP |
| EIGRP (bonus depth — beyond strict 200-301 scope) | EIGRP Fundamentals |
Domain 4.0 — IP Services (10%)
The protocols that keep a network usable day to day: address translation, automatic addressing, name resolution, time sync, and management/monitoring services.
| Exam topic | Covered in |
|---|---|
| NAT and PAT (inside/outside, local/global, overload) | NAT and PAT on IOS · NAT and Its Role in Networking |
| DHCP (server & relay), DNS, NTP | DHCP, DNS, and NTP on IOS |
| IP address management (IPAM), planning, and tooling | IPAM: IP Address Management |
| SNMP, Syslog, QoS, TFTP/FTP | Covered within DHCP, DNS, and NTP on IOS and Network Automation & Programmability |
Domain 5.0 — Security Fundamentals (15%)
Threats, the access-control toolkit, and Layer 2 hardening. ACLs are the single most testable item here; the Layer 2 protections (port security, DHCP snooping, DAI) are close behind.
| Exam topic | Covered in |
|---|---|
| Security concepts, threats, AAA, device hardening | Network Security Fundamentals |
| Access Control Lists — standard, extended, named | ACLs: Standard, Extended, and Named |
| Layer 2 security: port security, DHCP snooping, DAI, 802.1X | Network Security Fundamentals |
| Wireless security (WPA2/WPA3, PSK vs 802.1X) | Wireless Networking Fundamentals |
Domain 6.0 — Automation and Programmability (10%)
The most modern domain and the one most likely to be unfamiliar to traditional engineers: why automation matters, REST APIs and JSON, configuration management tools, controller-based and intent-based networking, and (new in v1.1) AI/ML in network operations.
| Exam topic | Covered in |
|---|---|
| Automation rationale, REST APIs, JSON, controller-based networking | Network Automation and Programmability |
| Config management (Ansible, etc.), Python for networks, DNA/Catalyst Center | Network Automation and Programmability |
Beyond the blueprint: practical references
These are not separate exam topics, but they are how the knowledge becomes usable in front of a real console — and a couple of them (WAN encapsulation, the IOS command set) overlap directly with exam items:
| Reference | Covered in |
|---|---|
| Essential IOS commands organized by task, with annotated output | Cisco IOS Command Walkthroughs |
| WAN technologies and PPP (leased line, MPLS, PPPoE, PAP/CHAP, SD-WAN) | WAN Technologies and PPP |
| Connectivity troubleshooting: ping, traceroute, and the toolkit | Traceroute, Ping, and the Troubleshooting Toolkit |
A study order that works
The blueprint is not the order you should learn in. A sequence that builds each topic on the last:
1. OSI/TCP-IP model <- the vocabulary everything else uses
2. IPv4 addressing/subnet <- practice until subnetting is reflexive
3. Ethernet & switching <- how the LAN actually moves frames
4. VLANs & trunking <- segmenting the LAN
5. Spanning Tree <- keeping the segmented LAN loop-free
6. EtherChannel <- bundling links (queued)
7. IPv4 routing <- moving between networks
8. OSPF <- dynamic routing
9. FHRP (HSRP/VRRP/GLBP) <- gateway redundancy
10. NAT / DHCP / DNS / NTP <- the services layer
11. ACLs & security <- controlling and hardening
12. Wireless <- the RF side
13. Automation <- the modern, programmable layer
Subnetting (step 2) is the highest-leverage skill: it appears throughout the exam, it is the prerequisite for understanding routing and ACLs, and it is the one thing you can practice to genuine fluency. Do not move past it until you can subnet by hand under time pressure.
Verdict
The CCNA 200-301 is broad but coherent: six domains that build from “how a frame crosses a switch” up to “how you program the whole network.” Roughly two-thirds of the exam — Network Fundamentals, Network Access, and the heavyweight IP Connectivity domain — is core addressing, switching, and routing, so that is where your hours should go, with subnetting as the single highest-return skill. Security at 15% and automation at 10% round it out, and the v1.1 refresh mostly added modern framing (cloud, AI/ML, APIs) rather than changing the fundamentals. Use this page as the index to the whole series, work each linked post until the why is obvious rather than memorized, and treat the one still-queued topic (EtherChannel) as a known gap to fill before exam day. Pass the CCNA and you have not just a certificate but a genuine working model of how networks move packets — which is the part that actually matters on the job.
Comments