200-301 CCNA Cisco Certified Network Associate Test 2026
200-301 CCNA Cisco Certified Network Associate Test 2026 Certification Practice Test 2026CCNA Exam (CCNA 200-301) is a 120-minute exam associated with the CCNA certification. This exam tests a candidate's knowledge and skills related to network fundamentals, network access, IP connectivity, IP services, security fundamentals, and automation and programmability.1.0 Network Fundamentals1.1 Explain the role and function of network components1.1.a Routers1.1.b Layer 2 and Layer 3 switches1.1.c Next-generation firewalls and IPS1.1.d Access points1.1.e Controllers1.1.f Endpoints1.1.g Servers1.1.h PoE1.2 Describe characteristics of network topology architectures1.2.a Two-tier1.2.b Three-tier1.2.c Spine-leaf1.2.d WAN1.2.e Small office/home office (SOHO)1.2.f On-premises and cloud1.3 Compare physical interface and cabling types1.3.a Single-mode fiber, multimode fiber, copper1.3.b Connections (Ethernet shared media and point-to-point)1.4 Identify interface and cable issues (collisions, errors, mismatch duplex, and/or speed)1.5 Compare TCP to UDP1.6 Configure and verify IPv4 addressing and subnetting1.7 Describe private IPv4 addressing1.8 Configure and verify IPv6 addressing and prefix1.9 Describe IPv6 address types1.9.a Unicast (global, unique local, and link local)1.9.b Anycast1.9.c Multicast1.9.d Modified EUI 641.10 Verify IP parameters for Client OS (Windows, Mac OS, Linux)1.11 Describe wireless principles1.11.a Nonoverlapping Wi-Fi channels1.11.b SSID1.11.c RF1.11.d Encryption1.12 Explain virtualization fundamentals (server virtualization, containers, and VRFs)1.13 Describe switching concepts1.13.a MAC learning and aging1.13.b Frame switching1.13.c Frame flooding1.13.d MAC address table2.0 Network Access2.1 Configure and verify VLANs (normal range) spanning multiple switches2.1.a Access ports (data and voice)2.1.b Default VLAN2.1.c InterVLAN connectivity2.2 Configure and verify interswitch connectivity2.2.a Trunk ports2.2.b 802.1Q2.2.c Native VLAN2.3 Configure and verify Layer 2 discovery protocols (Cisco Discovery Protocol and LLDP)2.4 Configure and verify (Layer 2/Layer 3) EtherChannel (LACP)2.5 Interpret basic operations of Rapid PVST+ Spanning Tree Protocol2.5.a Root port, root bridge (primary/secondary), and other port names2.5.b Port states and roles2.5.c PortFast2.5.d Root guard, loop guard, BPDU filter, and BPDU guard2.6 Describe Cisco Wireless Architectures and AP modes2.7 Describe physical infrastructure connections of WLAN components (AP, WLC, access/trunk ports, and LAG)2.8 Describe network device management access (Telnet, SSH, HTTP, HTTPS, console, TACACS+/RADIUS, and cloud managed)2.9 Interpret the wireless LAN GUI configuration for client connectivity, such as WLAN creation, security settings, QoS profiles, and advanced settings3.0 IP Connectivity3.1 Interpret the components of routing table3.1.a Routing protocol code3.1.b Prefix3.1.c Network mask3.1.d Next hop3.1.e Administrative distance3.1.f Metric3.1.g Gateway of last resort3.2 Determine how a router makes a forwarding decision by default3.2.a Longest prefix match3.2.b Administrative distance3.2.c Routing protocol metric3.3 Configure and verify IPv4 and IPv6 static routing3.3.a Default route3.3.b Network route3.3.c Host route3.3.d Floating static3.4 Configure and verify single area OSPFv23.4.a Neighbor adjacencies3.4.b Point-to-point3.4.c Broadcast (DR/BDR selection)3.4.d Router ID3.5 Describe the purpose, functions, and concepts of first hop redundancy protocols4.0 IP Services4.1 Configure and verify inside source NAT using static and pools4.2 Configure and verify NTP operating in a client and server mode4.3 Explain the role of DHCP and DNS within the network4.4 Explain the function of SNMP in network operations4.5 Describe the use of syslog features, including facilities and severity levels4.6 Configure and verify DHCP client and relay4.7 Explain the forwarding per-hop behavior (PHB) for QoS such as classification, marking, queuing, congestion, policing, and shaping4.8 Configure network devices for remote access using SSH4.9 Describe the capabilities and functions of TFTP/FTP in the network2024 Cisco Systems, Inc. This document is Cisco Public. Page 44.4 Explain the function of SNMP in network operations4.5 Describe the use of syslog features, including facilities and severity levels4.6 Configure and verify DHCP client and relay4.7 Explain the forwarding per-hop behavior (PHB) for QoS such as classification, marking,queuing, congestion, policing, and shaping4.8 Configure network devices for remote access using SSH4.9 Describe the capabilities and functions of TFTP/FTP in the network5.0 Security Fundamentals5.1 Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques)5.2 Describe security program elements (user awareness, training, and physical access control)5.3 Configure and verify device access control using local passwords5.4 Describe security password policy elements, such as management, complexity, and password alternatives (multifactor authentication, certificates, and biometrics)5.5 Describe IPsec remote access and site-to-site VPNs5.6 Configure and verify access control lists5.7 Configure and verify Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security)5.8 Compare authentication, authorization, and accounting concepts5.9 Describe wireless security protocols (WPA, WPA2, and WPA3)5.10 Configure and verify WLAN within the GUI using WPA2 PSK6.0 Automation and Programmability6.1 Explain how automation impacts network management6.2 Compare traditional networks with controller-based networking6.3 Describe controller-based, software defined architecture (overlay, underlay, and fabric)6.3.a Separation of control plane and data plane6.3.b Northbound and Southbound APIs6.4 Explain AI (generative and predictive) and machine learning in network operations6.5 Describe characteristics of REST-based APIs (authentication types, CRUD, HTTP verbs, and data encoding)6.6 Recognize the capabilities of configuration management mechanisms such as Ansible and Terraform6.7 Recognize components of JSON-encoded data
