““Great practice questions for strengthening my core networking concepts.””
Michael R
Network Engineer
Cisco folded three separate credentials, ICND1, ICND2, and the old composite exam, into a single 200 301 exam back in February 2020. That merger is the reason so many candidates get tripped up today: a lot of study material still floating around online was written for the old two exam track and quietly skips content that's now mandatory, especially security fundamentals and automation. If you're prepping from a five year old PDF, you're studying for an exam that no longer exists.
The 200 301 blueprint is organized into six domains, and Cisco publishes the official weighting for each:
Network Fundamentals (20%): IPv4/IPv6 addressing, cabling types, device roles, and basic network topology architectures.
Network Access (20%): VLANs, trunking, EtherChannel, spanning tree (PVST+ and Rapid PVST+), and wireless architecture concepts.
IP Connectivity (25%): Routing table interpretation, static routing, OSPFv2 configuration and troubleshooting, and first hop redundancy concepts.
IP Services (10%): NAT, NTP, DHCP, DNS, SNMP, and QoS concepts at a conceptual level.
Security Fundamentals (15%): Security concepts, AAA, wireless security, access control lists, and Layer 2 security tools like DHCP snooping and port security.
Automation and Programmability (10%): JSON data structures, REST APIs, controller based networking, and how automation tools differ from traditional CLI management.
IP Connectivity carries the single largest share of the exam, which surprises candidates who assume switching or security dominates because those topics get more buzz in study forums.
The CCNA draws a wider mix of people than most IT certifications. A large share are help desk or NOC technicians trying to move into a network engineering role, since CCNA is often the credential hiring managers use as a baseline filter for junior network positions. Another common group is career changers coming from unrelated fields who picked networking specifically because CCNA has no prerequisite, unlike Cisco's higher level tracks. You'll also find working network admins who've been doing the job for years but never held a formal certification, taking the exam because a new employer or a government contract requires it on paper.
The official CCNA 200-301 exam runs 120 minutes and typically includes somewhere between 90 and 110 items, though Cisco doesn't commit to an exact number since it varies by version. Question types include standard multiple choice, drag and drop matching, fill in the blank, and simlets or testlets where you're given a small topology and multiple questions about it. A subset of items are simulation based, asking you to configure a device through a simulated CLI rather than just answer a question about one, and these are the ones that eat your clock the fastest if you haven't practiced actual syntax.
One format detail that catches people off guard: once you submit an answer and move forward, you generally cannot go back and revise it. There's no reviewing your whole exam at the end the way some other certification exams allow. That changes how you should pace yourself, since second guessing early questions costs you time you can't recover later for the harder simulations.
Cisco doesn't publish the passing score as a fixed number. It's reported on a scaled range and can shift slightly between exam versions, so don't fixate on hitting an exact score in practice, hitting consistent accuracy across all six domains matters more than optimizing for one number.
Don't just drill multiple choice questions in isolation. Because a real chunk of the exam is simulation based, practicing only recognition style questions leaves a gap. Pair question sets with actual hands on time in Packet Tracer, since Cisco's own simulation questions use command syntax and output formatting that closely mirrors it. When you get a subnetting question wrong, don't just check the right answer, time yourself redoing similar problems until you can do VLSM math in under 30 seconds per question, because slow subnetting is one of the most common reasons candidates run out of time before finishing the exam.
Also track your accuracy by domain, not just overall score. A candidate scoring 85% overall who is weak specifically in Security Fundamentals or Automation and Programmability can still fail, because those newer domains are exactly where outdated study habits leave gaps.
The most frequent one is underpreparing for Automation and Programmability. It's only 10% of the blueprint, but many candidates studying from CLI heavy backgrounds skip it entirely or treat it as an afterthought, then get blindsided by JSON parsing questions or REST API concept questions they've never seen before.
A second common mistake is confusing OSPF and EIGRP behavior, particularly metric calculation and how each protocol selects a best path, a holdover from candidates studying material that blends both protocols without being precise about which one the exam actually tests in depth (OSPF is the routing protocol Cisco emphasizes on 200 301, not EIGRP).
Third, candidates consistently misjudge spanning tree port states and the difference between PVST+ behavior and Rapid PVST+ convergence timing. It sounds like a small detail until it shows up in a scenario question with a topology diagram and costs you the whole item.
Finally, running out of time on simulations is extremely common because candidates practice multiple choice questions almost exclusively and then hit a live simulated CLI environment on exam day for the first time under pressure.
Build your subnetting speed separately from everything else, it's a foundational skill that shows up embedded inside routing, NAT, and troubleshooting questions even when the question itself isn't labeled as a subnetting question. Spend real time in a simulated CLI environment configuring VLANs, trunks, and OSPF from scratch rather than only reading about the commands, since the exam's simlets expect you to type real syntax, not recognize it in a list. When you study NAT, don't just memorize the difference between static, dynamic, and PAT, practice reading a running configuration and identifying which type is already configured, since that's closer to how the exam actually presents it. And don't leave the automation domain for the last weekend before your exam date. It's a small percentage of the blueprint, but it's dense with unfamiliar concepts (JSON structure, API basics, controller based architecture) if you've spent your career purely in CLI networking.
Work through the domain by domain practice sets below, and pay attention to where you're guessing versus where you actually know the material cold. If Security Fundamentals or Automation and Programmability come back as your weakest domains, that's not unusual, it's exactly where most CCNA candidates lose points, and it's fixable with a few focused study sessions before you book your exam date.
Last updated on Sep, 7 2026