Cisco CCNA
Cisco
Complete guide to passing the Cisco CCNA exam on your first attempt.
$330
~60%
3 years
Global
Cisco
$65k-$100k
Are you ready for Cisco CCNA?
Loading quiz...
Complete Overview
The CCNA is Cisco's associate-level networking certification, earned by passing a single 120-minute exam called Implementing and Administering Cisco Solutions (200-301 CCNA) v1.1, which Cisco prices at US$300 or the equivalent in Cisco Learning Credits. It is taken by help desk technicians moving into networking, junior network administrators, Cisco Networking Academy students, and career changers who want a vendor credential that hiring managers recognise without explanation. Cisco lists exactly two exam languages for 200-301: English and Japanese. Delivery is through Pearson VUE, either at a physical test centre or from home through OnVUE online proctoring.
The blueprint has six sections with published weights that add to 100 percent: Network Fundamentals 20 percent, Network Access 20 percent, IP Connectivity 25 percent, IP Services 10 percent, Security Fundamentals 15 percent, and Automation and Programmability 10 percent. Cisco publishes the full sub-topic list as a public PDF, down to the level of individual verbs, so you can tell the difference between an objective that says describe and one that says configure and verify. That distinction matters more than any study guide chapter order, because configure and verify objectives are the ones that turn up as command-line simulation items.
Two numbers that candidates expect are not available anywhere, because Cisco chooses not to release them. Cisco's exam policy page states that it does not publish exam passing scores in advance, since questions and cut scores change between deliveries. Cisco also does not publish an item count for 200-301, and it does not publish a pass rate. Any site quoting 825 out of 1000, or 100 to 120 questions, or a 60 percent pass rate is repeating folklore rather than a Cisco source. What Cisco does commit to is the report you get at the end: a score report with a performance breakout by exam section, which Cisco states also shows the passing score for that exam. So the cut score is disclosed after you sit, not before. The 48-hour figure repeated on many CCNA pages is Cisco's policy for lab and practical exams, not for written exams; for a written exam Cisco emails the next steps within 24 hours of a pass.
The certification is valid for three years. Cisco lets you renew by earning 30 Continuing Education credits, by passing any current associate-level exam, or by passing a higher-level exam, so the renewal path does not force you back through 200-301 a second time. Timing matters right now for a specific reason. Cisco has announced that the last day to test on 200-301 v1.1 is 2 February 2027, and the first day to test on CCNA v2.0 is 3 February 2027. If your study plan lands you after that date, you are preparing for a different blueprint, one Cisco describes as adding practical assessments, more troubleshooting tasks, and security and AI content threaded through the other sections.
The hard part of CCNA is not the reading. It is that Cisco tests configuration and verification, and the exam gives you no reference material, no command list, and no way back to a question once you have moved past it. Candidates who study from video alone and never open a lab tend to discover this in the first ten minutes.
Why Get Cisco CCNA Certified?
One exam covers the whole certification: 200-301 v1.1 runs 120 minutes and costs US$300, with no second required paper.
Cisco publishes the full blueprint with weights that sum to 100 percent, so 25 percent of your effort maps directly to IP Connectivity.
The credential is valid for three years and renews with 30 Continuing Education credits rather than a repeat sitting.
OnVUE online proctored delivery means you can test from home in most countries, with China, Cuba, Iran, North Korea, Sudan and Slovenia excluded per Pearson VUE.
CCNA is the qualifying exam behind the CCNP Enterprise track, and Cisco counts an associate-level pass as 30 CE credits toward recertifying other Cisco certifications.
US Bureau of Labor Statistics data for May 2024 puts the median wage for network and computer systems administrators at $96,800, with the top 10 percent above $150,320.
The exam is offered in English and Japanese only, so the item wording you practise against in English is the wording you will see.
Exam Format & Structure
Duration
120 minutes
Questions
Cisco does not publish the number of items on 200-301. The on-screen counter shows your own total at the start of the exam.
Passing Score
Not published in advance. Cisco's exam policy states passing scores are set by statistical analysis and are subject to change without notice. You do see the number afterwards: Cisco states the score report issued at the end of the session shows a score for each exam section and the passing score for that exam.
Question Types
- Multiple choice, single correct answer
- Multiple choice, multiple correct answers with the number required stated in the stem
- Drag and drop matching
- Command-line simulation items on a simulated Cisco IOS device
- Scenario items built on a topology diagram and show command output
Delivery Method
Pearson VUE test centre, or OnVUE online proctored from home or office. Pearson VUE states all written proctored Cisco exams can be taken online except 400-007, the CCDE written exam.
How scoring works
Score scale
Cisco reports a numeric score with a per-section performance breakout. It does not publish the scale endpoints for 200-301, and the frequently cited 300 to 1000 range is not sourced to a current Cisco document.
Score needed to pass
Not published in advance. Cisco states passing scores are subject to change and may vary from exam to exam without notice, and discloses the figure only on the score report handed to you at the end of the session.
When results arrive
A score report is issued at the end of the session. Cisco states it shows a score for each exam section and the passing score for that exam, so you learn the cut score after you sit rather than before. Within 24 hours of passing, Cisco emails the instructions for claiming the certification. The 48-hour figure widely quoted for CCNA results is Cisco's policy for lab and practical exams, not for written exams like 200-301. Scores may be revised after testing if misconduct, scoring inaccuracies or aberrant response patterns are found.
How the scale is built
Cisco sets passing scores by statistical analysis rather than a fixed percentage, and scores are scaled so that different exam forms are comparable. Scoring is compensatory across the six sections: strength in IP Connectivity can offset weakness in Automation, since Cisco reports one overall result rather than a per-section pass requirement. No published Cisco policy describes a penalty for wrong answers, so leave nothing blank.
Pacing and time budget
Not published by Cisco. Read your own total from the on-screen counter on the first item and divide 120 minutes by it. questions in 120 minutes gives you Calculate it in the first 30 seconds. If your counter shows 100 items, that is 1 minute 12 seconds each; if it shows 120, that is 1 minute exactly. per question.
Minute 10
About 8 percent of your item total, and you should already know your per-item budget from the counter
Minute 30
About 25 percent of your item total, with any simulation encountered so far fully completed rather than partially configured
Minute 60
About 50 percent of your item total, the halfway marker that tells you whether to speed up on multiple choice
Minute 90
About 75 percent of your item total, leaving 30 minutes for the tail where simulations often cluster
Minute 115
Everything, with the last five minutes spent verifying the final simulation rather than rereading multiple choice you can no longer change
| At this point | You should have answered |
|---|---|
| Minute 10 | About 8 percent of your item total, and you should already know your per-item budget from the counter |
| Minute 30 | About 25 percent of your item total, with any simulation encountered so far fully completed rather than partially configured |
| Minute 60 | About 50 percent of your item total, the halfway marker that tells you whether to speed up on multiple choice |
| Minute 90 | About 75 percent of your item total, leaving 30 minutes for the tail where simulations often cluster |
| Minute 115 | Everything, with the last five minutes spent verifying the final simulation rather than rereading multiple choice you can no longer change |
- You cannot return to a previous item, so a slow decision is permanent spend. Give any multiple choice item 90 seconds maximum, then commit and move.
- Simulations are the time sink. A single command-line item asking you to configure VLANs, a trunk and interVLAN routing can absorb eight minutes, so bank time on the short items early.
- Subnetting is where minutes vanish invisibly. Getting each subnetting calculation under 20 seconds in practice buys back several minutes across a full exam.
- The digital whiteboard costs time to open and use. Decide before exam day which calculations are worth writing down and which you will do mentally.
- Do not budget for a break. The 120 minutes is continuous, and in OnVUE delivery leaving the webcam view without proctor permission can end the session.
Where the marks are
IP connectivity: routing tables, static routing, single-area OSPFv2
25%
Cisco asks you to read a routing table field by field, apply longest prefix match then administrative distance then metric, and diagnose why an OSPF adjacency did not form.
Network fundamentals: IPv4 and IPv6 addressing, subnetting, switching concepts
20%
Subnetting arithmetic appears inside items across other sections too, and Cisco explicitly tests IPv6 address types, modified EUI-64 and client-side IP verification on Windows, macOS and Linux.
Network access: VLANs, trunking, EtherChannel, Rapid PVST+, WLC GUI
20%
This section carries the most configure and verify verbs, so it produces simulations: VLAN and trunk builds, LACP bundles, and interpreting a wireless controller GUI page.
Security fundamentals: ACLs, port security, DHCP snooping, DAI, AAA, WPA3
15%
Cisco asks for ACL construction and placement, and for Layer 2 hardening features by name and behaviour, including which attack each of DHCP snooping and dynamic ARP inspection stops.
IP services: NAT, DHCP client and relay, NTP, syslog, SNMP, QoS, SSH
10%
Inside source NAT with static entries and pools is configure and verify, as are NTP, DHCP relay and SSH, so a small section produces a disproportionate number of command-line items.
Automation and programmability: REST, JSON, controllers, AI in network operations
10%
Every objective here is describe, explain, compare or recognise, so it is the cheapest section to secure: read JSON structures, map CRUD to HTTP verbs, and define overlay, underlay and fabric.
| Topic | Weight | Why it scores |
|---|---|---|
| IP connectivity: routing tables, static routing, single-area OSPFv2 | 25% | Cisco asks you to read a routing table field by field, apply longest prefix match then administrative distance then metric, and diagnose why an OSPF adjacency did not form. |
| Network fundamentals: IPv4 and IPv6 addressing, subnetting, switching concepts | 20% | Subnetting arithmetic appears inside items across other sections too, and Cisco explicitly tests IPv6 address types, modified EUI-64 and client-side IP verification on Windows, macOS and Linux. |
| Network access: VLANs, trunking, EtherChannel, Rapid PVST+, WLC GUI | 20% | This section carries the most configure and verify verbs, so it produces simulations: VLAN and trunk builds, LACP bundles, and interpreting a wireless controller GUI page. |
| Security fundamentals: ACLs, port security, DHCP snooping, DAI, AAA, WPA3 | 15% | Cisco asks for ACL construction and placement, and for Layer 2 hardening features by name and behaviour, including which attack each of DHCP snooping and dynamic ARP inspection stops. |
| IP services: NAT, DHCP client and relay, NTP, syslog, SNMP, QoS, SSH | 10% | Inside source NAT with static entries and pools is configure and verify, as are NTP, DHCP relay and SSH, so a small section produces a disproportionate number of command-line items. |
| Automation and programmability: REST, JSON, controllers, AI in network operations | 10% | Every objective here is describe, explain, compare or recognise, so it is the cheapest section to secure: read JSON structures, map CRUD to HTTP verbs, and define overlay, underlay and fabric. |
The numbers
120 minutes
Exam duration
Source: Cisco, 200-301 CCNA exam page, cisco.com
US$300, or payable with Cisco Learning Credits
List price
Source: Cisco, 200-301 CCNA exam page, cisco.com
20 / 20 / 25 / 10 / 15 / 10 percent across the six sections
Published section weights
Source: Cisco, CCNA Exam v1.1 (200-301) exam topics PDF, learningcontent.cisco.com
2 February 2027, with CCNA v2.0 first testable on 3 February 2027
Last day to test on v1.1
Source: Cisco Learning blog, Stay on Track: Get Certified Before the CCNA Refresh, 1 July 2026
30 Continuing Education credits, or pass a current associate-level or higher exam, within three years
Recertification requirement
Source: Cisco recertification policy, cisco.com
Score report at the end of the session, showing a per-section score and the passing score for that exam; email with next steps within 24 hours of passing
Result availability
Source: Cisco certification exams page, cisco.com
If you fail
Wait before retaking
Five calendar days, beginning the day after the failed attempt, before you may sit the same written exam again.
Attempt limit
Cisco publishes no cap on failed attempts for written exams. Separately, once you pass, you must wait a minimum of 180 days before taking the same exam with an identical exam number.
Retake fee
Full price each time. Cisco lists 200-301 at US$300 plus applicable local taxes, and there is no reduced retake rate. Cisco sells Exam Safeguard and Exam Safeguard Plus bundles that include a second attempt if you want to prepay for that risk.
Cisco will not reimburse travel or logistics costs under any circumstances. Discount vouchers obtained from anyone other than Pearson VUE are not guaranteed by Cisco or Pearson VUE, and using a fraudulent voucher can bring sanctions up to a lifetime testing ban and nullification of previous certifications. If you fail close to February 2027, count the five-day wait plus scheduling availability against the 2 February 2027 v1.1 cut-off before assuming a retake fits.
Exam Domains & Topics
Routing table interpretation, forwarding decisions, static routing for IPv4 and IPv6, single-area OSPFv2, and first hop redundancy concepts.
Key Topics to Master:
- Interpret routing table components: protocol code, prefix, network mask, next hop, administrative distance, metric, gateway of last resort
- Determine how a router forwards by default using longest prefix match, then administrative distance, then protocol metric
- Configure and verify IPv4 and IPv6 static routing including default, network, host and floating static routes
- Configure and verify single area OSPFv2: neighbour adjacencies, point-to-point and broadcast networks, DR and BDR election, router ID
- Describe the purpose, functions and concepts of first hop redundancy protocols
Device roles, topology architectures, cabling, IPv4 and IPv6 addressing, wireless principles, virtualisation, and switching concepts.
Key Topics to Master:
- Role and function of routers, Layer 2 and Layer 3 switches, next-generation firewalls and IPS, access points, controllers, endpoints, servers and PoE
- Two-tier, three-tier, spine-leaf, WAN, SOHO, and on-premises versus cloud topology characteristics
- Single-mode fibre, multimode fibre and copper, plus Ethernet shared media and point-to-point connections
- Identify interface and cable issues: collisions, errors, duplex mismatch, speed mismatch
- Configure and verify IPv4 addressing and subnetting, private IPv4 ranges, IPv6 addressing and prefixes, and IPv6 address types including modified EUI-64
- Verify IP parameters on Windows, macOS and Linux clients
- Wireless principles: nonoverlapping Wi-Fi channels, SSID, RF, encryption
- Switching concepts: MAC learning and aging, frame switching, frame flooding, the MAC address table
VLANs, trunking, discovery protocols, EtherChannel, Rapid PVST+, wireless architectures, and device management access.
Key Topics to Master:
- Configure and verify normal-range VLANs spanning multiple switches, access ports for data and voice, default VLAN, interVLAN connectivity
- Configure and verify interswitch connectivity: trunk ports, 802.1Q, native VLAN
- Configure and verify Cisco Discovery Protocol and LLDP
- Configure and verify Layer 2 and Layer 3 EtherChannel using LACP
- Interpret Rapid PVST+ operation: root bridge and root port, port states and roles, PortFast, root guard, loop guard, BPDU filter, BPDU guard
- Describe Cisco wireless architectures and AP modes, and the physical connections between AP, WLC, access and trunk ports, and LAG
- Describe device management access: Telnet, SSH, HTTP, HTTPS, console, TACACS+ and RADIUS, cloud managed
- Interpret wireless LAN GUI configuration for client connectivity, including WLAN creation, security settings, QoS profiles and advanced settings
Security concepts and program elements, device access control, ACLs, Layer 2 hardening, AAA, and wireless security.
Key Topics to Master:
- Define threats, vulnerabilities, exploits and mitigation techniques
- Describe security program elements: user awareness, training, physical access control
- Configure and verify device access control using local passwords
- Password policy elements: management, complexity, and alternatives such as multifactor authentication, certificates and biometrics
- Describe IPsec remote access and site-to-site VPNs
- Configure and verify access control lists
- Configure and verify DHCP snooping, dynamic ARP inspection and port security
- Compare authentication, authorization and accounting
- Describe WPA, WPA2 and WPA3, and configure a WLAN in the GUI using WPA2 PSK
NAT, NTP, DHCP and DNS roles, SNMP, syslog, QoS per-hop behaviour, SSH remote access, and file transfer protocols.
Key Topics to Master:
- Configure and verify inside source NAT using static entries and pools
- Configure and verify NTP in client and server mode
- Explain the role of DHCP and DNS, and configure and verify DHCP client and relay
- Explain the function of SNMP in network operations
- Describe syslog features including facilities and severity levels
- Explain QoS per-hop behaviour: classification, marking, queuing, congestion, policing, shaping
- Configure network devices for remote access using SSH
- Describe the capabilities and functions of TFTP and FTP
Automation impact, controller-based and software-defined architecture, AI and machine learning in network operations, REST APIs, configuration management, and JSON.
Key Topics to Master:
- Explain how automation changes network management
- Compare traditional networks with controller-based networking
- Describe controller-based software-defined architecture: overlay, underlay, fabric, separation of control and data plane, northbound and southbound APIs
- Explain generative and predictive AI and machine learning in network operations, an objective Cisco added in the v1.1 blueprint
- Describe REST-based API characteristics: authentication types, CRUD, HTTP verbs, data encoding
- Recognise the capabilities of Ansible and Terraform
- Recognise components of JSON-encoded data
Recommended Study Plan
- 1Download the 200-301 CCNA v1.1 exam topics PDF from learningcontent.cisco.com and highlight every objective that begins with configure and verify
- 2Install Cisco Packet Tracer from the Cisco Networking Academy site and build a two-switch, two-router topology you will reuse all course
- 3Read Wendell Odom CCNA 200-301 Official Cert Guide Volume 1 chapters on networking models and Ethernet LANs
- 4Practise console access, hostname, enable secret, line vty, and show running-config until you can do them without notes
- 5Book a target exam date before 2 February 2027, the last test day for v1.1, so the deadline is real
- 1Learn the powers of two to 2^10 and the block sizes 128, 64, 32, 16, 8, 4, 2 cold
- 2Work 30 subnetting questions a day using subnettingpractice.com or the Odom appendix drills, timing each set
- 3Practise finding network address, broadcast address, first and last host, and usable host count from a given IP and mask
- 4Do VLSM allocation exercises where a /24 is split into unequal subnets
- 5Target under 20 seconds per subnetting question by the end of the week
- 1Learn IPv6 shortening rules and reverse them: expand shortened addresses back to full form
- 2Memorise the ranges behind each address type: global unicast 2000::/3, unique local fc00::/7, link local fe80::/10, multicast ff00::/8
- 3Work through modified EUI-64 by hand, including the flipped seventh bit and the inserted fffe
- 4Configure dual-stack addressing in Packet Tracer and verify with show ipv6 interface brief and ping
- 5Verify IP parameters from Windows ipconfig, macOS and Linux ip addr output, which is an explicit v1.1 objective
- 1Study MAC learning, aging, frame flooding and the MAC address table, then prove each one in Packet Tracer with show mac address-table
- 2Configure normal-range VLANs across two switches, access ports with data and voice VLANs, and 802.1Q trunks
- 3Break a trunk deliberately with a native VLAN mismatch and read the log message it produces
- 4Configure CDP and LLDP and read show cdp neighbors detail and show lldp neighbors output
- 5Watch the VLAN and trunking sections of Jeremy McDowell's Jeremy's IT Lab CCNA series on YouTube and repeat each bundled lab
- 1Configure Layer 2 and Layer 3 EtherChannel with LACP, then verify with show etherchannel summary and read the flag letters
- 2Create a channel mismatch on purpose and interpret the resulting suspended state
- 3Work through Rapid PVST+ root bridge election by bridge priority then MAC address, on paper first and in the lab second
- 4Identify root port, designated port and alternate port on a three-switch triangle without running the simulation
- 5Configure PortFast, BPDU guard, root guard and loop guard and describe which failure each one prevents
- 1Study Cisco wireless architectures and AP modes, and the physical connections between AP, WLC, access ports, trunk ports and LAG
- 2Walk the wireless LAN controller GUI in Packet Tracer and create a WLAN with WPA2 PSK, since v1.1 tests GUI interpretation, not CLI, for WLC
- 3Set QoS profiles and advanced settings in the WLC GUI and note where each control lives on the page
- 4Compare Telnet, SSH, HTTP, HTTPS, console, TACACS+, RADIUS and cloud-managed access for device management
- 5Review nonoverlapping Wi-Fi channels 1, 6 and 11 in the 2.4 GHz band and why they were chosen
- 1Read a full show ip route output and name every field: protocol code, prefix, mask, next hop, administrative distance, metric, gateway of last resort
- 2Practise longest prefix match on tables where two routes both cover the destination
- 3Memorise default administrative distances for connected, static, EIGRP, OSPF and RIP
- 4Configure IPv4 and IPv6 default routes, network routes, host routes and floating static routes
- 5Kill the primary path in Packet Tracer and confirm the floating static installs
- 1Configure single-area OSPFv2 with network statements and with interface-level ospf commands
- 2Verify with show ip ospf neighbor, show ip ospf interface brief and show ip protocols and know what each column means
- 3Force a router ID and explain the default selection order: manual, highest loopback, highest active interface
- 4Break adjacency on purpose with mismatched hello and dead timers, area IDs, subnet masks and authentication, then diagnose each from output
- 5Work DR and BDR election on a broadcast segment by priority then router ID
- 1Configure inside source NAT with static mappings and with pools, and verify using show ip nat translations
- 2Configure NTP client and server mode and confirm synchronisation with show ntp status
- 3Configure a DHCP pool, then a DHCP relay with ip helper-address, and trace a DORA exchange in simulation mode
- 4Read syslog messages and map the severity number to its name from 0 emergency to 7 debugging
- 5Configure SSH with a domain name, RSA keys, local user and transport input ssh, then disable Telnet
- 1Write standard and extended numbered ACLs and named ACLs, and place each one where it belongs relative to the traffic
- 2Test an ACL that blocks one host from one service while permitting everything else, then read show access-lists hit counts
- 3Configure port security with maximum, sticky learning and violation modes, and trigger each violation mode
- 4Configure DHCP snooping trusted and untrusted ports, then dynamic ARP inspection on top of the snooping binding table
- 5Compare authentication, authorization and accounting, and compare WPA, WPA2 and WPA3
- 1Read JSON documents and identify objects, arrays, keys, strings, numbers and booleans on sight
- 2Map the CRUD operations to HTTP verbs GET, POST, PUT, PATCH and DELETE, and learn common REST response codes
- 3Compare traditional device-by-device management with controller-based networking, and define overlay, underlay and fabric
- 4Study the v1.1 objective on generative and predictive AI and machine learning in network operations, which older study guides written for v1.0 do not contain
- 5Compare Ansible and Terraform at the level Cisco asks for: what each tool does, not how to write playbooks
- 1Sit two full-length timed Boson ExSim-Max for 200-301 practice exams on separate days and review every explanation, including for items you answered correctly
- 2Rebuild from a blank configuration every lab you failed in review, without looking at notes
- 3Run the Pearson VUE OnVUE system test and practise on the OnVUE digital whiteboard, because no physical paper or whiteboard is allowed online
- 4Re-drill subnetting for 20 minutes a day so speed does not decay
- 5Confirm your two forms of ID, both signed, one government-issued photo ID, are current and match your Pearson VUE profile name exactly
Ready to pass Cisco CCNA?
Get 500+ practice questions, video walkthroughs, and a pass guarantee.
Best Study Resources
200-301 CCNA v1.1 exam topics PDF (Cisco)
Official blueprintThe authoritative objective list at learningcontent.cisco.com, with the six section weights and every sub-objective. It is the only document that tells you whether an objective is describe, interpret, or configure and verify.
Free
Cisco Packet Tracer
Lab simulatorCisco's own simulator. It covers switching, routing, NAT, DHCP, ACLs and the WLC GUI at the depth 200-301 asks for, and its simulation mode lets you step through a frame hop by hop.
Free with a Cisco Networking Academy account
Cisco Modeling Labs Free tier
Virtual labRuns real IOS-XE images rather than a simulation, so command output matches production behaviour. Useful once Packet Tracer starts hiding details you want to see.
Free tier available from Cisco
CCNA 200-301 Official Cert Guide, Volumes 1 and 2, Wendell Odom
BookThe Cisco Press text mapped chapter by chapter to the blueprint, with end-of-chapter review, memory tables and a Pearson Test Prep question bank.
Roughly US$50 to US$60 per volume from Cisco Press
Jeremy's IT Lab CCNA course, Jeremy McDowell
Video courseA complete free video series with matched Packet Tracer lab files and Anki flashcard decks. Covers the v1.1 additions rather than stopping at the 2020 blueprint.
Free on YouTube
Boson ExSim-Max for Cisco 200-301
Practice exam engineTimed practice exams with detailed answer explanations that cite the reasoning rather than only the correct letter. Widely used as a readiness gate before booking.
Listed at US$99 by Boson
Cisco U. CCNA practice exam
Official practice examCisco's own readiness check, written by the vendor that writes the live exam. Cisco also sells Exam Safeguard and Exam Safeguard Plus bundles that include a second exam attempt.
Paid, sold through Cisco U.
Cisco Learning Network CCNA community
Community and study groupCisco-hosted forums, study groups and the CCNA Prep series, plus official answers from Cisco staff on policy questions like retakes and ID rules.
Free
Pearson VUE OnVUE system test and whiteboard practice
Tooling checkRuns a bandwidth and webcam check on the exact machine you will test on, and lets you practise the digital whiteboard before exam day rather than during it.
Free
Common Mistakes to Avoid
Studying to a passing score that Cisco does not publish in advance
Cisco does not publish passing scores ahead of the exam; you only see the cut score on the report at the end. Aiming at a rumoured 825 out of 1000 tells you nothing. Use section-level readiness instead: consistently strong performance across all six blueprint sections in timed practice.
Treating the OSPF objective as though multi-area is on the exam
The v1.1 objective is configure and verify single area OSPFv2 only. Time spent on multi-area, virtual links, LSA types or OSPFv3 configuration is time not spent on adjacency troubleshooting, which is what 200-301 actually asks.
Learning the WLC through the CLI
Objective 2.9 says interpret the wireless LAN GUI configuration, and objective 5.10 says configure and verify WLAN within the GUI using WPA2 PSK. Practise clicking through the controller GUI in Packet Tracer, since screenshots of GUI pages appear in items.
Using a study guide written for the 2020 v1.0 blueprint
Cisco added objectives in v1.1, including generative and predictive AI and machine learning in network operations, and Terraform alongside Ansible. Check the copyright page and match the material against the current PDF before trusting it.
Assuming you can flag items and come back
Cisco exams do not let you review or change a previous answer once you move forward. Decide on each item before you advance, and never leave one blank intending to return.
Planning to write subnetting work on scratch paper during an online exam
Cisco's online proctoring rules ban scratch paper, physical pens and pencils, and erasable whiteboards. Only the OnVUE digital whiteboard is available. Practise binary maths in that tool, or book a test centre instead.
Reading the automation section but never opening a JSON document
Objective 6.7 asks you to recognise components of JSON-encoded data, which means reading nested braces and brackets under time pressure. Ten minutes a day parsing real JSON output is enough, and it protects a full 10 percent section.
Failing to distinguish administrative distance from metric
Administrative distance chooses between routing sources; metric chooses between routes learned from the same source. Objective 3.2 tests the order explicitly: longest prefix match first, then administrative distance, then metric.
Booking the exam after February 2027 without checking the version
Cisco has stated the last test day for 200-301 v1.1 is 2 February 2027 and CCNA v2.0 goes live 3 February 2027. If your date falls after that, your blueprint, your book and your practice bank are all for a retired version.
Exam Day Tips
- 1
Bring two forms of identification. Cisco requires both to carry your signature and one to be a government-issued photo ID, and the name must match your Pearson VUE profile.
- 2
Expect a digital photo and digital signature capture at test centre check-in. Your score report is printed with that photo.
- 3
Take nothing into the room. Cisco's policy bans notes, documentation, watches, laptops, keyboards, pagers, PDAs and mobile phones, and you may not remove anything either.
- 4
If you test online, clear the desk completely. Cisco's OnVUE rules prohibit scratch paper, physical pens or pencils, and erasable whiteboards; only the built-in digital whiteboard is permitted.
- 5
Open the digital whiteboard on the first item, not the twentieth. If your connection drops mid-exam, Pearson VUE wipes the whiteboard clean, so do not park anything in it you cannot recreate.
- 6
Check availability before booking online. OnVUE is not offered in China, Cuba, Iran, North Korea, Sudan or Slovenia, and greeter and proctor support are only in English and Japanese.
- 7
Answer every item. Nothing in Cisco's published policy describes a penalty for a wrong answer, and an unanswered item cannot score.
- 8
Read simulation item requirements to the end before typing a single command. You cannot return to the item after moving on, so a half-read requirement is a lost item.
- 9
Save configurations inside a simulation when the task asks for persistence, and verify with a show command instead of assuming the command took.
- 10
Read your score report before leaving. It carries a section-level performance breakout, which is the only diagnostic you get if you have to retake.
Career Paths & Salary Ranges
Computer network support specialist
Front-line network troubleshooting, ticket resolution and site support. The first role most people move into directly after CCNA, and the one where the exam's show-command fluency pays back immediately.
$46,010 to $124,470, median $73,340 (US Bureau of Labor Statistics, May 2024)
Network and computer systems administrator
Day-to-day operation of switches, routers, wireless controllers and VPNs. CCNA maps closely onto this job description, particularly VLANs, routing, NAT, DHCP and ACLs.
$60,320 to $150,320, median $96,800 (US Bureau of Labor Statistics, May 2024)
Information security analyst
Monitoring and hardening the network layer. The 15 percent Security Fundamentals section, especially ACLs, DHCP snooping, dynamic ARP inspection and AAA, is the bridge into this work.
$69,660 and up, median $124,910 (US Bureau of Labor Statistics, May 2024)
Computer network architect
Designing LAN, WAN and campus topologies. Usually reached after CCNP-level study and several years of operations, with CCNA as the qualifying step into the Cisco professional track.
$79,520 to $198,030, median $130,390 (US Bureau of Labor Statistics, May 2024)
Computer and information systems manager
Running infrastructure teams and budgets. CCNA rarely gets you here on its own, but it is common as the earliest technical credential in the career histories of people who arrive.
$104,450 and up, median $171,200 (US Bureau of Labor Statistics, May 2024)
Prerequisites & Requirements
- None. Cisco sets no formal prerequisite for 200-301 and no prior certification is required.
- Cisco applies age requirements and policies concerning minors under its Certification and Confidentiality Agreement, so candidates below the stated age need parental or guardian consent.
- You must accept the Cisco Certification and Confidentiality Agreement at registration and again before the exam starts. Refusing it ends the exam and forfeits the full fee.
- Residents of Cuba, Iran, North Korea, Syria, Crimea, Donetsk, Luhansk, Belarus and Russia are prohibited from testing under Cisco's embargoed countries policy.
- A Cisco Networking Academy student must have their Networking Academy ID in their Pearson VUE profile or the academy voucher will not work and results may not count toward certification.
- Practically, budget for a lab. Packet Tracer is free with a Networking Academy account and covers the blueprint; no physical hardware purchase is required.
Frequently Asked Questions
What is the passing score for CCNA?
Cisco does not publish it in advance. The exam policy page states that passing scores are set by statistical analysis, are subject to change, and are not published because questions and passing scores vary from exam to exam without notice. You do learn the figure afterwards, because Cisco states the score report issued at the end of the session shows the passing score for that exam alongside your per-section scores. The widely repeated 825 out of 1000 figure has no current Cisco source behind it.
How many questions are on the 200-301 exam?
Cisco does not publish a question count. The exam is fixed at 120 minutes and the on-screen counter shows your own total once you begin. Ranges quoted on third-party sites are estimates from candidate reports, not vendor figures.
How much does the CCNA exam cost?
Cisco lists the 200-301 price as US$300, or payment with Cisco Learning Credits. Local taxes are added on top and vary by country, so the amount charged at checkout in your region can exceed the list price. Cisco does not publish separate regional list prices for this exam.
How long do I have to wait to retake CCNA if I fail?
Five calendar days, beginning the day after the failed attempt. Cisco applies this waiting period to written exams. There is no published cap on the total number of failed attempts, but each attempt costs a full fee.
Can I retake the exam after I pass it?
Not immediately. Once passed, a candidate must wait a minimum of 180 days before taking the same exam with an identical exam number. This matters if you were planning to resit 200-301 for recertification credits.
What happens if I fail?
You receive a score report with a performance breakout by exam section, which shows where you were weak without revealing individual items. Your certification status does not change, the fee is not refunded, and you may book again after five calendar days.
When do I get my result?
You see a score report at the end of the exam session, showing a score for each exam section and the passing score for that exam. Within 24 hours of passing, Cisco emails the instructions for completing your certification, and the Cisco certification tracking system holds the official record. The 48-hour figure often quoted for CCNA is Cisco's stated turnaround for lab and practical exams, not written exams. Cisco warns that a score may be revised after testing if there is evidence of misconduct, scoring inaccuracy or aberrant response patterns.
How long is CCNA valid, and how do I renew it?
Three years. Cisco's recertification policy gives associate holders three routes: earn 30 Continuing Education credits, pass any current associate-level exam, or pass a higher-level exam. Credits come from eligible Cisco instructor-led training, e-learning, Cisco Live sessions and other approved activities.
How many CE credits is each activity worth?
Cisco publishes a qualifying options table. Passing an associate-level exam is worth 30 CE credits, a professional-level concentration exam 40, and a professional-level core exam 80. Training activities carry their own listed credit values on the Cisco Continuing Education pages.
What identification do I need?
Two forms, both bearing your signature, with at least one a government-issued photo ID. Pearson VUE also captures a digital photo and digital signature during admission, and prints the photo on your score report.
What are the rules for taking CCNA online?
OnVUE proctoring watches you through your webcam for the full 120 minutes. Scratch paper, physical pens and pencils, and erasable whiteboards are all prohibited; Pearson VUE provides a digital whiteboard instead. OnVUE is unavailable in China, Cuba, Iran, North Korea, Sudan and Slovenia, and greeter, proctor and software support exist only in English and Japanese.
Can I use a calculator or any reference material?
No. Cisco's policy is that candidates bring nothing into the exam room and take nothing out, including notes, documentation and electronic devices. There is no command reference, no subnetting table and no calculator. Binary arithmetic has to be done in your head or on the digital whiteboard.
Can I go back and change an answer?
No. Cisco exams move forward only. Once you submit an item and advance, it is closed, which is why marking an item to revisit later is not a workable strategy on this exam.
How do I request testing accommodations?
Accommodations are arranged through Pearson VUE before you book, not at the test centre on the day. Contact Pearson VUE customer service for the Cisco programme and submit the required documentation, then schedule once the accommodation is approved on your account.
Which languages is the exam offered in?
Two: English and Japanese. If you test online, note separately that OnVUE greeter and proctor support are also only available in English and Japanese, so a Japanese-language exam and English-language proctoring are the two combinations on offer.
What is the CCNA pass rate?
Cisco does not publish one. No official first-attempt or overall pass rate exists for 200-301, and percentages circulating on training-provider blogs are not sourced to Cisco. Judge readiness from your own timed practice performance across all six blueprint sections instead.
Should I take v1.1 now or wait for CCNA v2.0?
Cisco's own guidance is to take v1.1 now. The last test day for 200-301 v1.1 is 2 February 2027 and v2.0 goes live 3 February 2027. Cisco describes v2.0 as a change in depth and approach, with practical assessments, more troubleshooting, and security and AI woven through, rather than a replacement of the fundamentals.
Is CCNA harder than CompTIA Network+?
They test different things. Network+ is vendor-neutral and stops at concepts and terminology; CCNA requires configuring and verifying Cisco IOS from memory, with no command reference available. CCNA also carries a three-year validity and a 30 CE credit renewal, while Network+ renewals run on CompTIA's own continuing education programme.
What comes after CCNA?
The CCNP Enterprise track is the direct next step, built around a core exam plus a concentration exam. CCNA also feeds the security, collaboration, data centre, service provider and DevNet professional tracks. Passing any professional-level core exam is worth 80 CE credits, which covers associate recertification several times over.
How long does preparation usually take?
The plan on this page runs 12 weeks at 10 to 18 hours a week, roughly 150 to 180 hours. Cisco does not publish a recommended study time. Candidates already working on enterprise switches and routers typically need less; those starting from no networking exposure should expect to extend the addressing and routing weeks.
Success Stories
“Jeremy's IT Lab on YouTube was my primary resource - completely free and incredibly thorough. Combined with Boson exams for the final month, I passed with a strong score.”
Robert Chen
Network Engineer, Tech Company
“Coming from help desk, CCNA was challenging but transformative. The hands-on Packet Tracer practice was essential. Now earning $25k more than my previous role.”
Amanda Foster
Network Administrator, Healthcare
“Don't skip the automation section - it's actually interesting and the future of networking. CCNA opened doors to cloud networking roles I didn't know existed.”
Khalid Ahmed
Cloud Network Engineer
Pass Cisco CCNA, Guaranteed
94% pass rate on first attempt
One-time • Lifetime access