CCNA Concepts and Topics for Certification
Introduction
The Cisco Certified Network Associate (CCNA) certification validates foundational
networking knowledge and skills. This document outlines the key concepts and
topics covered in the CCNA 200-301 exam, organized by domain, with subtopics
and fundamental concepts for each.
1 Network Fundamentals (20%)
This domain covers the foundational concepts of networking, including archi-
tectures, protocols, and physical components.
• Network Components
– Fundamentals: Routers, switches, access points, firewalls, endpoints
(PCs, servers).
– Subtopics: Functions of network devices, network topologies (star, mesh,
hybrid), physical interfaces (Ethernet, fiber).
• Network Topologies and Models
– Fundamentals: OSI model, TCP/IP model, layered architecture.
– Subtopics: Layer functions (e.g., Layer 2 vs. Layer 3), encapsulation,
network segmentation.
• Network Protocols
– Fundamentals: TCP, UDP, IP, ICMP, ARP.
– Subtopics: Protocol operations, packet structure, troubleshooting with
protocols (e.g., ping, traceroute).
• IP Addressing
– Fundamentals: IPv4 and IPv6 addressing, subnetting, CIDR.
– Subtopics: Address classes, private vs. public IPs, VLSM, IPv6 address
types (unicast, multicast, anycast).
• Cabling and Media
– Fundamentals: Copper (UTP, STP), fiber optics, wireless standards.
1
– Subtopics: TIA/EIA standards, cable categories (Cat5e, Cat6), Ethernet
standards (10/100/1000Base-T).
2 IP Connectivity (25%)
This domain focuses on IP routing, including how devices communicate across
networks.
• Routing Concepts
– Fundamentals: Routing tables, static vs. dynamic routing, default gate-
way.
– Subtopics: Routing protocols (RIP, OSPF, EIGRP), route selection, ad-
ministrative distance.
• Configure and Verify IPv4/IPv6 Routing
– Fundamentals: Static routing configuration, dynamic routing setup.
– Subtopics: OSPF configuration (single-area), EIGRP basics, IPv6 routing
considerations.
• Inter-VLAN Routing
– Fundamentals: VLANs, trunking, Layer 3 switching.
– Subtopics: Router-on-a-stick, SVI (Switched Virtual Interface), VLAN
tagging (802.1Q).
• Troubleshooting Connectivity
– Fundamentals: Diagnosing routing issues, IP reachability.
– Subtopics: Tools (ping, traceroute, debug), common issues (misconfig-
ured routes, ACLs).
3 Security Fundamentals (15%)
This domain covers basic network security principles and configurations.
• Security Concepts
– Fundamentals: CIA triad (Confidentiality, Integrity, Availability), threats
(malware, DDoS).
– Subtopics: Attack types, mitigation strategies, security best practices.
• Access Control
– Fundamentals: Access control lists (ACLs), authentication, authoriza-
tion.
– Subtopics: Standard vs. extended ACLs, named ACLs, applying ACLs
(inbound/outbound).
2
• VPN and Wireless Security
– Fundamentals: VPN types (site-to-site, remote access), wireless encryp-
tion.
– Subtopics: IPsec, SSL VPN, WPA2/WPA3, SSID security.
• Device Security
– Fundamentals: Securing network devices, password management.
– Subtopics: SSH configuration, disabling unused services, local authen-
tication.
4 Network Access (20%)
This domain focuses on configuring and verifying Layer 2 technologies and net-
work access.
• VLAN Configuration
– Fundamentals: Virtual LANs, VLAN benefits, VLAN tagging.
– Subtopics: VLAN creation, trunk vs. access ports, DTP (Dynamic Trunk-
ing Protocol).
• Spanning Tree Protocol (STP)
– Fundamentals: Loop prevention, STP operation, root bridge.
– Subtopics: STP variants (PVST, RSTP), port states, BPDUs.
• EtherChannel
– Fundamentals: Link aggregation, bandwidth increase.
– Subtopics: LACP, PAgP, EtherChannel configuration.
• Wireless LANs
– Fundamentals: Wireless standards (802.11a/b/g/n/ac/ax), AP modes.
– Subtopics: SSID configuration, wireless security, lightweight vs. au-
tonomous APs.
5 IP Services (10%)
This domain covers services that enhance network functionality.
• NAT (Network Address Translation)
– Fundamentals: Address translation, conserving IP addresses.
– Subtopics: Static NAT, dynamic NAT, PAT (Port Address Translation).
• DHCP (Dynamic Host Configuration Protocol)
– Fundamentals: Automatic IP assignment, DHCP process (DORA).
3
– Subtopics: DHCP server configuration, DHCP relay, troubleshooting
DHCP.
• DNS (Domain Name System)
– Fundamentals: Name resolution, DNS hierarchy.
– Subtopics: DNS record types (A, AAAA, CNAME), DNS troubleshooting.
• NTP (Network Time Protocol)
– Fundamentals: Time synchronization, NTP hierarchy.
– Subtopics: NTP server/client configuration, stratum levels.
6 Automation and Programmability (10%)
This domain introduces network automation and programmability concepts.
• Automation Concepts
– Fundamentals: Benefits of automation, SDN (Software-Defined Network-
ing).
– Subtopics: Controller-based architectures, northbound/southbound APIs.
• Programmability
– Fundamentals: APIs (REST, NETCONF), data formats (JSON, XML).
– Subtopics: REST API usage, YANG models, scripting basics (Python).
• Configuration Management
– Fundamentals: Automation tools (Ansible, Puppet), version control.
– Subtopics: Infrastructure as Code (IaC), managing configurations with
scripts.
7 Conclusion
Mastering these topics prepares candidates for the CCNA 200-301 exam. Focus on
hands-on practice with Cisco devices (via Packet Tracer or physical labs), under-
stand theoretical concepts, and apply troubleshooting skills. For further details,
refer to Cisco’s official resources at [Link]
