Exam objectives200-301

Cisco CCNA exam objectives

The published blueprint is the contract: the exam can only test what is on this list. Domains carry their official weightings, and objectives with a practice page link straight to questions written for that objective.

Titles and weightings from the official objectives. Cisco exam page

Network Fundamentals

20% of exam

Network Access

20% of exam

IP Connectivity

25% of exam

IP Services

10% of exam
  • 4.1 4.1 Configure and verify inside source NAT using static and pools.In the bank

  • 4.2 4.2 Configure and verify NTP operating in a client and server mode.In the bank

  • 4.3 4.3 Explain the role of DHCP and DNS within the network.In the bank

  • 4.4 4.4 Explain the function of SNMP in network operations.

  • 4.5 4.5 Describe the use of syslog features, including facilities and severity levels.In the bank

  • 4.6 4.6 Configure and verify DHCP client and relay.In the bank

  • 4.7 4.7 Explain the forwarding per-hop behavior (PHB) for QoS such as classification, marking, queuing, congestion, policing, and shaping.In the bank

  • 4.8 4.8 Configure network devices for remote access using SSH.In the bank

  • 4.9 4.9 Describe the capabilities and functions of TFTP/FTP in the network.

Security Fundamentals

15% of exam
  • 5.1 5.1 Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques).

  • 5.2 5.2 Describe security program elements (user awareness, training, and physical access control).

  • 5.3 5.3 Configure and verify device access control using local passwords.In the bank

  • 5.4 5.4 Describe security password policy elements, such as management, complexity, and password alternatives (multifactor authentication, certificates, and biometrics).In the bank

  • 5.5 5.5 Describe IPsec remote access and site-to-site VPNs.In the bank

  • 5.6 5.6 Configure and verify access control lists.Practice
  • 5.7 5.7 Configure and verify Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security).Practice
  • 5.8 5.8 Compare authentication, authorization, and accounting concepts.In the bank

  • 5.9 5.9 Describe wireless security protocols (WPA, WPA2, and WPA3).In the bank

  • 5.10 5.10 Configure and verify WLAN within the GUI using WPA2 PSK.

Automation and Programmability

10% of exam
  • 6.1 6.1 Explain how automation impacts network management.

  • 6.2 6.2 Compare traditional networks with controller-based networking.In the bank

  • 6.3 6.3 Describe controller-based, software defined architecture (overlay, underlay, and fabric).In the bank

  • 6.4 6.4 Explain AI (generative and predictive) and machine learning in network operations.

  • 6.5 6.5 Describe characteristics of REST-based APIs (authentication types, CRUD, HTTP verbs, and data encoding).In the bank

  • 6.6 6.6 Recognize the capabilities of configuration management mechanisms such as Ansible and Terraform.In the bank

  • 6.7 6.7 Recognize components of JSON-encoded data.In the bank

Objectives marked Practice open a page of original questions written for that objective, each with a full explanation cited to Cisco documentation.

Keep reading

Every guide and cost breakdown, by vendor