Cisco CCNA (200-301) study guide

How to use this guide

What to focus on:

• Using the OSI and TCP/IP models as a troubleshooting tool, not trivia
• IPv4 addressing and subnetting, including VLSM, practised until it is fast
• IPv6 addressing, address types and basic configuration
• Cabling, interfaces, and reading interface state from show output

What to focus on:

• VLANs, access and trunk ports, and inter-VLAN routing
• Spanning Tree Protocol: root election, port roles, and PortFast/BPDU Guard
• EtherChannel with LACP and PAgP
• Wireless fundamentals: WLC architecture, AP modes, and SSID configuration

What to focus on:

• Reading the routing table and predicting path selection
• Administrative distance and metrics when several sources offer a route
• OSPFv2 single-area: neighbour states, DR/BDR election, and common adjacency failures
• Static routing, default routes, and first-hop redundancy with HSRP

What to focus on:

• NAT and PAT configuration and troubleshooting
• DHCP server, client and relay behaviour
• NTP, DNS and syslog in an operational context
• QoS concepts and per-hop behaviour at a conceptual level

What to focus on:

• Access control lists: placement, direction, and implicit deny
• Layer 2 protections: port security, DHCP snooping, dynamic ARP inspection
• AAA concepts, and device-access hardening with SSH
• Wireless security: WPA2/WPA3 and authentication methods

What to focus on:

• Why automation exists: configuration drift, scale, and repeatability
• REST APIs, and reading JSON returned by a network device
• Controller-based networking and Cisco DNA Center concepts
• Comparing configuration-management tools: Ansible, Puppet, Chef

Common mistakes

• ✕Leaving subnetting until late. It underpins addressing, routing and ACL questions, and being slow at it costs you time everywhere else.
• ✕Memorising commands without the resulting state. The exam shows you output and asks what it means, which is the opposite direction.
• ✕Ignoring the implicit deny at the end of every ACL, then getting the traffic-flow questions backwards.
• ✕Treating Automation and Programmability as skippable. It is 10%, the same as IP Services, and candidates leave it unstudied more than any other domain.
• ✕Confusing administrative distance with metric. AD chooses between routing sources; the metric chooses within one.
• ✕Skimming wireless because it feels peripheral. It sits inside Network Access, which is 20% of the exam.

Exam-day tips

• ✓Commit before you move on. Cisco exams do not let you return to a previous question, so flag-and-return is not an option here.
• ✓Pace by the clock, not by question number. You get 120 minutes and Cisco does not publish an item count.
• ✓For configuration questions, read the existing config before the question stem. The answer is usually a conflict already sitting in it.
• ✓Eliminate on the hard constraint first. An option that breaks a stated requirement is removable without evaluating the rest.
• ✓Draw the topology. Two minutes sketching interfaces and subnets prevents most routing mistakes.
• ✓Answer everything. There is no penalty for a wrong answer.

How to know you’re ready

One good practice score can be luck. What counts is scoring at or above the real pass mark (Not published, as Cisco does not release cut scores) across several full-length sets in a row, with no single domain trailing far behind the others. Kwizza tracks your per-domain readiness automatically as you practice.