Cisco Certified Network Associate (CCNA 200-301): What's Actually Tested

The Cisco Certified Network Associate (CCNA 200-301) is the single most recognized entry credential in networking. The exam is $300, runs 120 minutes, has roughly 100 questions, and requires about 825 out of 1000 to pass. Most candidates need 10 to 16 weeks of focused study. The questions mix multiple choice with drag-and-drop and live router/switch simulations, so pure memorization does not cut it. If you already configure Cisco gear at work, you can pass in a couple of months. If you are new to networking, budget the full 16 weeks and spend real time in a lab.

The 90-second answer

Take CCNA 200-301 if you want a networking career and you are willing to learn subnetting, routing, and switching by actually configuring devices. It is the credential that gets your resume past the filter for network technician, NOC, help desk, and junior network engineer roles. No single cert is more widely requested in networking job postings.

Skip CCNA 200-301 if you have zero interest in command-line device configuration or you are chasing cloud or security roles that do not touch Cisco gear. If you only want to validate general IT fundamentals, CompTIA Network+ is a gentler, vendor-neutral starting point. Going straight to CCNA with no networking exposure usually ends in a failed first attempt and another $300.

What does the CCNA 200-301 actually test?

CCNA 200-301 covers six domains. The blueprint has been stable since the exam consolidated to a single test in 2020, with minor refreshes. Every question maps to one of these.

Domain	Weight	What it covers
Network Fundamentals	20%	OSI/TCP-IP models, cabling, IPv4/IPv6 addressing, subnetting, switches vs routers
Network Access	20%	VLANs, trunking, EtherChannel, STP, wireless LAN concepts, WLC config
IP Connectivity	25%	Routing tables, static routing, OSPFv2, default gateways, FHRP basics
IP Services	10%	DHCP, DNS, NAT, NTP, SNMP, syslog, QoS concepts
Security Fundamentals	15%	Access control, port security, ACLs, VPN concepts, WPA, layer 2 threats
Automation and Programmability	10%	REST APIs, JSON, controller-based networking, Ansible/Puppet/Chef concepts, SDN

The exam rewards hands-on muscle memory. A simulation question may drop you into a router CLI and ask you to configure OSPF or fix a VLAN trunk, then grade your actual configuration. Subnetting shows up everywhere, and you have to do it fast and in your head, because there is no calculator.

If you have heard "CCNA is the cert that finally makes subnetting click," that is because the exam forces it.

How hard is the CCNA 200-301?

CCNA 200-301 is a difficulty 3.5 out of 5. Harder than CompTIA Network+, much easier than CCNP Enterprise (ENCOR 350-401). Cisco does not publish a pass rate, but community surveys put first-time pass rates in the 60% to 70% range for people who studied at least 10 weeks and did real labs.

The hard parts are specific:

• Subnetting under time pressure, including VLSM, with no calculator
• Live simulation questions that grade your actual device configuration, not a multiple-choice guess
• The breadth: six domains spanning switching, routing, services, security, and automation, so you cannot specialize your way through
• No back button. Cisco exams do not let you flag and return to questions, so a simulation you get stuck on burns time you cannot recover

People who fail CCNA usually fail on pacing and subnetting speed, not on concepts they never saw. The simulation questions early in the exam are the classic trap.

The most common failure pattern looks like this: candidate watches an entire video course, never racks up real CLI hours, walks in, hits an OSPF simulation at question 12, spends 18 minutes on it, then rushes the rest and runs out of time. Final result: fail. Build CLI fluency in week 4, not week 12, and drill subnetting until you can do a /26 split in under 30 seconds.

How long should you study for CCNA 200-301?

Cisco lists no formal prerequisites, but recommends roughly one year of networking experience. That assumption is baked into the question difficulty. For actual study time:

• With 1+ year hands-on networking experience: 8 to 10 weeks at 8 to 12 hours per week
• With CompTIA Network+ or some IT background: 12 to 14 weeks at 8 to 12 hours per week
• Brand new to networking: 16 to 20 weeks, and consider Network+ first to build vocabulary
• Switching from another vendor (Juniper, Aruba): 8 to 10 weeks, mostly to learn Cisco IOS syntax and the CCNA blueprint's edges

The biggest waste of study time is watching videos without touching a CLI. Build a lab. Cisco Packet Tracer is free and covers most of the blueprint; GNS3 or EVE-NG with real IOS images go further. Configure VLANs and trunks, stand up OSPF between three routers, break STP on purpose and fix it. That hands-on work is what makes simulation questions painless.

A realistic week-by-week pace for a 12-week plan looks like:

1. Week 1: OSI/TCP-IP models, cabling, switch vs router basics
2. Week 2: IPv4 addressing and subnetting (start drilling now)
3. Week 3: VLSM, IPv6 addressing, subnetting speed drills
4. Week 4: Switch configuration, VLANs, access vs trunk ports
5. Week 5: Spanning Tree Protocol, EtherChannel, port security
6. Week 6: Static routing, routing tables, default gateways
7. Week 7: OSPFv2 single-area, neighbor adjacencies, troubleshooting
8. Week 8: Wireless LAN concepts, WLC configuration, AP modes
9. Week 9: IP services (DHCP, DNS, NAT, NTP, SNMP, syslog)
10. Week 10: Security (ACLs, VPN concepts, layer 2 threats, WPA)
11. Week 11: Automation and programmability (REST, JSON, SDN, Ansible)
12. Week 12: Full timed practice exams, simulation drills, subnetting speed

Most failures trace back to skipping the subnetting reps in weeks 2 and 3. Subnetting touches Network Fundamentals, IP Connectivity, and IP Services, which together are well over half the exam.

What does the CCNA 200-301 cost?

The exam itself is $300 USD plus any local taxes. Beyond that, total cost depends on your study path:

Component	Range	Notes
Exam fee	$300	One attempt. Retake is another $300, with a 5-day wait after a fail.
Study course	$0 to $150	Jeremy's IT Lab (free on YouTube) or a paid Udemy course at ~$15 on sale
Practice questions	$0 to $60	NerdExam has 1794 CCNA questions if you want a free option
Lab software	$0	Cisco Packet Tracer is free; GNS3 and EVE-NG are free too
Books	$0 to $60	Wendell Odom's Official Cert Guide library is the standard reference
Total realistic spend	$300 to $500	Cheapest viable path: $300 (exam only)

Unlike some vendors, Cisco does not routinely hand out 50% retake vouchers, so a failed attempt costs the full $300 again. That makes the "do not book until your practice scores are solid" rule more important here than on cheaper exams. Cisco does occasionally run promotional pricing or voucher bundles through partners and the Cisco Learning Network Store, so check before you buy.

What salary can you expect after passing?

CCNA is an entry-to-mid credential, so the salary range is wide and depends heavily on the role and your experience. 2026 US data from job boards shows:

• Help desk or NOC technician with CCNA: $50,000 to $70,000
• Network administrator with CCNA: $70,000 to $95,000
• Network engineer with CCNA: $90,000 to $130,000
• Senior network engineer with CCNA plus 3+ years: $120,000 to $150,000, often on the path to CCNP

The cert alone does not deliver the top numbers. CCNA opens the door; the pay jumps come from production experience and, usually, a follow-on cert like CCNP. Where you see CCNA pay $60K, the holder is early-career. Where you see $130K, the holder has years of real network operations behind the cert.

A practical note: CCNA is most valuable as a hiring filter. Many network engineer and NOC postings list it as required or strongly preferred, which means not having it quietly removes you from the pile before a human reads your resume. The salary lift is real but indirect. It comes from getting access to roles you could not apply for without it.

What study resources actually work?

The candidates who pass on the first attempt use a consistent stack:

1. One structured course for breadth. Jeremy's IT Lab on YouTube is the community favorite and completely free; Wendell Odom's Official Cert Guide pair is the gold-standard book set if you prefer reading
2. A lab, used daily. Cisco Packet Tracer (free) covers most of the blueprint. GNS3 or EVE-NG with real IOS images go deeper for OSPF and automation topics
3. A dedicated subnetting drill. subnettingpractice.com or a flashcard app, every day, until a /26 or /28 split is automatic
4. At least 500 practice questions before exam day, including simulation-style questions so the live labs do not surprise you
5. Two full-length timed practice exams in the final two weeks. Treat them like the real thing, no breaks, and score honestly. If you are below 80% on the second one, postpone the real exam

Skip the brain-dump sites that sell "real exam questions." They are against Cisco policy, frequently wrong, and they teach you to recognize answers instead of configure devices, which is exactly what the simulations punish. Reddit's r/ccna has the most current crowd-sourced advice on which resources are working this quarter.

For the practice question portion, NerdExam has 1794 enriched CCNA 200-301 questions with full explanations. Start practicing CCNA 200-301 questions to see the question style before you commit to a study plan. The free question explanations alone show you the reasoning the exam expects, especially for subnetting and routing logic that is hard to absorb from videos.

Who should NOT take CCNA 200-301?

The cert is wrong for these candidates:

You are	Take instead
Brand new to IT entirely	CompTIA Network+ (or A+) first to build fundamentals
Focused on cybersecurity, not networking	CompTIA Security+ or the Cisco CyberOps Associate path
A cloud engineer who never touches Cisco gear	AWS, Azure, or GCP networking certs
An experienced network engineer with CCNP-level skills	Skip CCNA, go straight to CCNP Enterprise (ENCOR 350-401)
Only validating general IT for a help desk role	CompTIA A+ plus Network+ is a cheaper, broader fit

The path matters more than the badge. CCNA is excellent when networking is your career direction. It is a poor use of three months if your role lives in the cloud console and never opens an IOS prompt. Hiring managers do not penalize cloud or security candidates for lacking CCNA; they penalize networking candidates who cannot subnet.

What's next after CCNA 200-301?

Once CCNA is in hand, a few paths open depending on where you want to go:

• Enterprise track: CCNP Enterprise (ENCOR 350-401 plus a concentration exam). The natural follow-on for network engineers, and where the real salary jumps live. Most people do this 12 to 24 months after CCNA.
• Security track: CCNP Security, or pivot toward Cisco CyberOps and CompTIA Security+ if you want to move into a SOC.
• Automation track: Cisco DevNet Associate (200-901). Pairs well with CCNA as networking shifts toward automation and infrastructure-as-code.
• Data center or service provider track: CCNP Data Center or CCNP Service Provider, if your employer runs that kind of environment.

Most people take 12 to 24 months between CCNA and CCNP. Use that window to ship real network operations work. CCNA pays off when a hiring manager sees it next to actual experience, not when it is the only line on your resume. Note that Cisco certifications expire after three years, so plan to recertify or move up to CCNP before then.

Ready to start? Practice with real CCNA 200-301 questions on NerdExam or jump straight into the free per-question explanations. If you are still building fundamentals first, download Cisco Packet Tracer from the Cisco Networking Academy and start configuring before you spend a dollar on the exam.