Cisco CCNA (200-301)
exam objectives

69 practice questions in this domain

• 1.1Explain the role and function of network components (routers, L2/L3 switches, next-generation firewalls and IPS, access points, controllers, endpoints, servers, PoE)
• 1.10Verify IP parameters for Client OS (Windows, Mac OS, Linux)
• 1.11Describe wireless principles (nonoverlapping Wi-Fi channels, SSID, RF, encryption)
• 1.12Explain virtualization fundamentals (server virtualization, containers, and VRFs)
• 1.13Describe switching concepts (MAC learning and aging, frame switching, frame flooding, MAC address table)
• 1.2Describe characteristics of network topology architectures (two-tier, three-tier, spine-leaf, WAN, SOHO, on-premises and cloud)
• 1.3Compare physical interface and cabling types (single-mode fiber, multimode fiber, copper; Ethernet shared media and point-to-point)
• 1.4Identify interface and cable issues (collisions, errors, mismatch duplex, and/or speed)
• 1.5Compare TCP to UDP
• 1.6Configure and verify IPv4 addressing and subnetting
• 1.7Describe private IPv4 addressing
• 1.8Configure and verify IPv6 addressing and prefix
• 1.9Describe IPv6 address types (unicast global/unique local/link local, anycast, multicast, modified EUI-64)

70 practice questions in this domain

• 2.1Configure and verify VLANs (normal range) spanning multiple switches (access ports data/voice, default VLAN, InterVLAN connectivity)
• 2.2Configure and verify interswitch connectivity (trunk ports, 802.1Q, native VLAN)
• 2.3Configure and verify Layer 2 discovery protocols (Cisco Discovery Protocol and LLDP)
• 2.4Configure and verify (Layer 2/Layer 3) EtherChannel (LACP)
• 2.5Interpret basic operations of Rapid PVST+ Spanning Tree Protocol (root port, root bridge, port names, port states/roles, PortFast, root guard, loop guard, BPDU filter, BPDU guard)
• 2.6Describe Cisco Wireless Architectures and AP modes
• 2.7Describe physical infrastructure connections of WLAN components (AP, WLC, access/trunk ports, and LAG)
• 2.8Describe network device management access (Telnet, SSH, HTTP, HTTPS, console, TACACS+/RADIUS, and cloud managed)
• 2.9Interpret the wireless LAN GUI configuration for client connectivity (WLAN creation, security settings, QoS profiles, advanced settings)

85 practice questions in this domain

• 3.1Interpret the components of routing table (routing protocol code, prefix, network mask, next hop, administrative distance, metric, gateway of last resort)
• 3.2Determine how a router makes a forwarding decision by default (longest prefix match, administrative distance, routing protocol metric)
• 3.3Configure and verify IPv4 and IPv6 static routing (default route, network route, host route, floating static)
• 3.4Configure and verify single area OSPFv2 (neighbor adjacencies, point-to-point, broadcast DR/BDR selection, router ID)
• 3.5Describe the purpose, functions, and concepts of first hop redundancy protocols

35 practice questions in this domain

• 4.1Configure and verify inside source NAT using static and pools
• 4.2Configure and verify NTP operating in a client and server mode
• 4.3Explain the role of DHCP and DNS within the network
• 4.4Explain the function of SNMP in network operations
• 4.5Describe the use of syslog features, including facilities and severity levels
• 4.6Configure and verify DHCP client and relay
• 4.7Explain the forwarding per-hop behavior (PHB) for QoS such as classification, marking, queuing, congestion, policing, and shaping
• 4.8Configure network devices for remote access using SSH
• 4.9Describe the capabilities and functions of TFTP/FTP in the network

52 practice questions in this domain

• 5.1Define key security concepts (threats, vulnerabilities, exploits, and mitigation techniques)
• 5.10Configure and verify WLAN within the GUI using WPA2 PSK
• 5.2Describe security program elements (user awareness, training, and physical access control)
• 5.3Configure and verify device access control using local passwords
• 5.4Describe security password policy elements (management, complexity, password alternatives incl. MFA, certificates, biometrics)
• 5.5Describe IPsec remote access and site-to-site VPNs
• 5.6Configure and verify access control lists
• 5.7Configure and verify Layer 2 security features (DHCP snooping, dynamic ARP inspection, and port security)
• 5.8Compare authentication, authorization, and accounting concepts
• 5.9Describe wireless security protocols (WPA, WPA2, and WPA3)

34 practice questions in this domain

• 6.1Explain how automation impacts network management
• 6.2Compare traditional networks with controller-based networking
• 6.3Describe controller-based, software defined architecture (overlay, underlay, and fabric; separation of control/data plane; northbound and southbound APIs)
• 6.4Explain AI (generative and predictive) and machine learning in network operations
• 6.5Describe characteristics of REST-based APIs (authentication types, CRUD, HTTP verbs, and data encoding)
• 6.6Recognize the capabilities of configuration management mechanisms such as Ansible and Terraform
• 6.7Recognize components of JSON-encoded data