The current 200-301 CCNA exam is still version 1.1 as of October 3, 2026. Cisco has already published the future v2.0 topics, but the live v1.1 exam remains available through February 2, 2027; v2.0 begins testing on February 3, 2027. That distinction matters because candidates preparing now should study the objectives they will actually be tested on rather than blending two blueprints.
CCNA v1.1 remains a 120-minute associate-level exam covering six domains: Network Fundamentals, Network Access, IP Connectivity, IP Services, Security Fundamentals, and Automation and Programmability. The weighting is 20%, 20%, 25%, 10%, 15%, and 10% respectively. Cisco’s 2024 v1.1 refresh added limited coverage of generative AI, machine learning, cloud-managed networking, and Terraform while preserving the certification’s core routing-and-switching foundation.
The blueprint is broad, but it is not shallow everywhere. Candidates are expected to configure and verify many core tasks, interpret outputs, and understand why technologies behave as they do. Cisco itself emphasizes hands-on lab work because the exam is meant to validate operational networking skill rather than textbook recognition alone.
Network Fundamentals provides the addressing and packet-flow vocabulary for everything else
The 20% Network Fundamentals domain covers the role of routers, Layer 2 and Layer 3 switches, firewalls, access points, controllers, endpoints, servers, and power-over-Ethernet; topology characteristics; physical media; interface problems; TCP and UDP; IPv4 and IPv6 addressing; wireless principles; virtualization; and basic switching concepts.
IPv4 subnetting is particularly important because later routing, VLAN, ACL, and troubleshooting questions assume that you can determine network boundaries quickly. A focused refresher on IPv4 subnetting is useful if address calculations still interrupt your reasoning.
Do not treat this domain as an introductory warm-up. If you cannot explain how an endpoint decides whether a destination is local, what the default gateway does, or how a switch learns and forwards frames, later configuration tasks become memorization instead of networking.
Network Access turns Layer 2 concepts into usable campus connectivity
The 20% Network Access domain covers VLANs, access and trunk links, interswitch connectivity, CDP and LLDP, EtherChannel, Rapid PVST+, wireless architectures, management access, WLAN configuration, and related switch behavior. This is where many candidates first need to move from ‘I know what a VLAN is’ to ‘I can verify why traffic is or is not crossing the intended path.’
Spanning Tree and EtherChannel deserve relationship-based study. STP protects the topology from Layer 2 loops; EtherChannel bundles links while participating in the Layer 2 topology as a logical interface. VLAN and trunk configuration determines which broadcast domains traverse which links. Learn the combined behavior rather than one command family at a time.
Wireless objectives should also be connected to the wired network. An access point does not eliminate VLANs, IP addressing, gateways, security, or upstream switching; it adds radio and controller considerations to the same end-to-end path.
IP Connectivity is the heaviest domain because routing decisions are central to the job
At 25%, IP Connectivity is the largest domain. Candidates need to interpret routing tables, understand how routers choose paths, configure and verify IPv4 and IPv6 static routing, and configure and verify single-area OSPFv2. First-hop redundancy concepts are also part of the current blueprint.
The key skill is route selection, not merely route configuration. You should be able to look at multiple route sources and determine which entry a router will use for a destination based on longest-prefix match, administrative distance, and metric where appropriate. That logic is the foundation for many troubleshooting questions.
The natural progression after CCNA into enterprise routing is reflected by CCNP Enterprise, but do not rush ahead. CCNA expects you to own the fundamentals of static routes, OSPF, and forwarding before advanced enterprise topics add complexity.
IP Services covers the network functions that make basic connectivity useful
IP Services is 10% of the exam but touches daily administration: NAT, NTP, DHCP, DNS, SNMP, syslog, QoS concepts, and SSH. These services often appear in scenarios because a network can have correct routing and still fail to provide a usable application experience when a supporting service is misconfigured.
DNS is a good example. Users can report that ‘the network is down’ when IP connectivity is healthy but name resolution is not. Understanding DNS resolution helps separate reachability problems from service-layer problems.
NAT and DHCP also reinforce packet-flow thinking. DHCP depends on broadcast and relay behavior; NAT changes addressing at a boundary. Learn what the device sees before and after each function rather than memorizing isolated commands.
Security Fundamentals makes basic protection part of ordinary network administration
The 15% Security Fundamentals domain covers security concepts, threat categories, password and local access protection, AAA concepts, Layer 2 security features, ACLs, wireless security, and security program elements. CCNA does not turn candidates into security specialists, but it expects network administrators to understand the controls that protect the infrastructure they configure.
ACL questions become easier when you treat them as traffic classification and policy rather than syntax. Identify source, destination, protocol, direction, interface, and order of evaluation. Port security, DHCP snooping, and dynamic ARP inspection should also be connected to the attacks or mistakes they are intended to reduce.
Security fundamentals are strongest when studied through packet flow: what traffic exists, where the control sees it, and what decision the control makes.
Automation and Programmability is small by weight but important to the modern blueprint
The final 10% covers automation impact, controller-based networking, APIs, data formats, configuration-management mechanisms, and the v1.1 additions around AI and machine learning in network operations. Cisco removed Puppet and Chef from the v1.1 comparison and retained Ansible while adding Terraform.
A useful conceptual comparison is Ansible and Terraform for infrastructure automation. CCNA does not require deep tool mastery, but candidates should understand that modern network operations increasingly use structured APIs, controllers, and declarative automation rather than only device-by-device CLI work.
The newer CCNA Automation track goes much deeper into software and automation skills. For 200-301, the goal is to understand the operational role of programmability and how automation changes network management.
The current v1.1 AI coverage is limited and should not displace core networking study
Cisco added generative AI and machine learning to v1.1, but described the refresh as minor and said the new topics represented less than 10% of total exam content. Candidates should know the high-level role of predictive and generative AI in network operations and how cloud-managed networking fits modern administration.
Do not let AI headlines distort the study plan. Addressing, switching, routing, services, security, and troubleshooting remain the center of the live exam. The strongest preparation still includes repeated configuration and verification work on routers, switches, and wireless concepts.
The future v2.0 blueprint increases practical and AI-related emphasis, but that is a February 2027 change. Unless your test date is on or after February 3, study v1.1 as the governing objective set.
Hands-on work should mirror the verbs in the objectives
Pay attention to Cisco’s verbs: explain, describe, configure, verify, interpret, compare. If an objective says configure and verify, reading is not enough. Build it in Packet Tracer, CML, or suitable lab equipment. If it says interpret, practice from show-command output and diagrams. If it says compare, be able to explain the operational difference between the options.
A general CCNA networking fundamentals article can support review, but the official objective verbs should decide what kind of practice you do. A candidate who can explain OSPF but has never verified a neighbor or route is underprepared for the practical intent of the exam.
Deliberately break labs. Remove a VLAN from a trunk, change a subnet mask, alter a static route, create an ACL ordering error, or misconfigure a default gateway. Fixing the network teaches relationships that perfect configurations hide.
Read the blueprint as one end-to-end network
The current CCNA certification is broad because real enterprise connectivity crosses all six domains. An endpoint uses physical and Layer 2 access, receives IP configuration, reaches a gateway, follows routed paths, depends on services such as DNS and DHCP, crosses security controls, and is increasingly managed through automated or controller-based systems.
That breadth is also why CCNA remains a foundational credential inside the larger Cisco certification portfolio. It creates the operating model needed before professional-level specializations become useful.
The domain weights should influence practice volume as well as reading time. A candidate who spends several evenings memorizing automation terminology but only one session on route selection has inverted the blueprint. A more defensible plan gives the 25% IP Connectivity domain the greatest number of routing and troubleshooting repetitions, gives both 20% domains substantial lab time, and uses the smaller service and automation domains to connect those core behaviors to real operations.
Cisco’s current exam page also lists no formal prerequisite. That does not mean prerequisite knowledge is unnecessary; it means the exam itself is the gate. Candidates coming from outside networking should therefore create their own prerequisite layer around binary arithmetic, basic operating-system networking, and command-line comfort before expecting the six-domain blueprint to feel coherent.
For candidates testing before February 3, 2027, the most important scope decision is simple: use v1.1 as the exam contract, note v2.0 only as a future transition, and spend the majority of preparation time building and troubleshooting the network behaviors that remain central today.