Cisco Certified Network Associate (CCNA) 200-301
Complete 200-301 course
Original lessons cover every published objective, followed by domain reviews and focused deep dives. Free to read, no account needed.
Coverage was checked against the published 200-301 objectives. View the official blueprint. Lesson wording, exercises, and questions are original ExamOps material.
1.0 Network Fundamentals
20%Build a precise model of devices, media, addressing, transport, wireless behavior, virtualization, and Ethernet switching.
- 1.1Objective 1.1 — Explain network component roles50 min
- 1.2Objective 1.2 — Compare network topology architectures45 min
- 1.3Objective 1.3 — Compare interfaces and cabling45 min
- 1.4Objective 1.4 — Diagnose interface and cable faults40 min
- 1.5Objective 1.5 — Compare TCP and UDP35 min
- 1.6Objective 1.6 — Configure IPv4 addressing and subnetting70 min
- 1.7Objective 1.7 — Describe private IPv4 addressing30 min
- 1.8Objective 1.8 — Configure IPv6 addressing and prefixes55 min
- 1.9Objective 1.9 — Distinguish IPv6 address types50 min
- 1.10Objective 1.10 — Verify client IP parameters35 min
- 1.11Objective 1.11 — Explain foundational wireless behavior45 min
- 1.12Objective 1.12 — Explain virtualization fundamentals45 min
- 1.13Objective 1.13 — Explain Ethernet switching behavior50 min
2.0 Network Access
20%Configure resilient switched access, discovery, aggregation, spanning tree, wireless infrastructure, and secure management paths.
- 2.1Objective 2.1 — Configure VLANs across switches60 min
- 2.2Objective 2.2 — Configure 802.1Q trunks50 min
- 2.3Objective 2.3 — Use Layer 2 discovery protocols35 min
- 2.4Objective 2.4 — Configure LACP EtherChannel55 min
- 2.5Objective 2.5 — Interpret Rapid PVST+ operation65 min
- 2.6Objective 2.6 — Describe wireless architectures and AP modes45 min
- 2.7Objective 2.7 — Map WLAN infrastructure connections45 min
- 2.8Objective 2.8 — Compare network management access45 min
- 2.9Objective 2.9 — Interpret WLAN GUI settings50 min
3.0 IP Connectivity
25%Interpret forwarding state, select routes deterministically, configure static reachability and OSPFv2, and explain first-hop resilience.
4.0 IP Services
10%Operate address translation, time, name and address assignment, monitoring, logging, QoS, secure access, and file transfer services.
- 4.1Objective 4.1 — Configure inside-source NAT60 min
- 4.2Objective 4.2 — Configure NTP clients and servers45 min
- 4.3Objective 4.3 — Explain DHCP and DNS roles40 min
- 4.4Objective 4.4 — Explain SNMP operations40 min
- 4.5Objective 4.5 — Interpret syslog facilities and severities40 min
- 4.6Objective 4.6 — Configure DHCP clients and relay45 min
- 4.7Objective 4.7 — Explain QoS per-hop behavior50 min
- 4.8Objective 4.8 — Configure secure SSH access50 min
- 4.9Objective 4.9 — Describe TFTP and FTP capabilities35 min
5.0 Security Fundamentals
15%Apply layered controls to users, devices, traffic, switched access, VPNs, AAA, and wireless networks.
- 5.1Objective 5.1 — Relate threats, vulnerabilities, exploits, and mitigations45 min
- 5.2Objective 5.2 — Explain security program elements40 min
- 5.3Objective 5.3 — Configure local device access control50 min
- 5.4Objective 5.4 — Explain strong authentication policy40 min
- 5.5Objective 5.5 — Explain IPsec VPN models45 min
- 5.6Objective 5.6 — Configure IPv4 access control lists70 min
- 5.7Objective 5.7 — Configure Layer 2 security controls65 min
- 5.8Objective 5.8 — Compare AAA functions40 min
- 5.9Objective 5.9 — Compare WPA generations40 min
- 5.10Objective 5.10 — Configure a WPA2-PSK WLAN45 min
6.0 Automation and Programmability
10%Reason about automation, controllers, software-defined fabrics, AI-assisted operations, APIs, infrastructure as code, and JSON data.
- 6.1Objective 6.1 — Explain automation impacts40 min
- 6.2Objective 6.2 — Compare traditional and controller-based networks45 min
- 6.3Objective 6.3 — Explain software-defined architecture55 min
- 6.4Objective 6.4 — Explain AI and machine learning in operations45 min
- 6.5Objective 6.5 — Describe REST API characteristics55 min
- 6.6Objective 6.6 — Compare Ansible and Terraform capabilities45 min
- 6.7Objective 6.7 — Interpret JSON data45 min
Domain reviews and focused guides
Use these after the objective lessons to consolidate a domain or explore a focused topic.
- CCNA 200-301 v1.1: an evidence-led study strategy
Cisco's CCNA asks whether a learner can reason across the basic life of an enterprise network: connect devices, divide broadcast domains, route… - Network fundamentals: from media to forwarding
Network fundamentals are most useful when they form one model rather than a collection of definitions. A frame crosses a physical medium, a switch… - Network access: segmentation without accidental isolation
The access layer turns physical ports and radio associations into deliberate broadcast domains. Most failures in this domain are consistency failures:… - IP connectivity: deterministic route selection
Routing feels complex when several decisions are blended together. A router first needs candidate routes in its table. It then chooses the most… - IP services: the dependencies behind reachability
An interface can route packets correctly while users still report that “the network is down.” Supporting services assign addresses, resolve names,… - Security fundamentals: controls that reinforce one another
Network security is not one feature applied at the perimeter. It is a chain of identity, authorization, segmentation, traffic policy, endpoint trust,… - Automation and programmability: controlled intent at network scale
Automation is valuable because networks contain repeated intent: interface standards, routing policy, access control, software versions, and…
Practice and apply this objective
A free ExamOps account includes guided hands-on labs plus 10 practice questions per day shared across live tracks, with a written explanation on every question. No card required.
Start practicing free