CCNA Syllabus: Sections and Question Counts

Last verified: 11 November 2026. This is an independent guide; it is not affiliated with Cisco or any government body. Exam details can change, so check the exam page at Cisco before relying on any figure.

How the questions are split

The full mock exam on this site (60 questions in 120 minutes) is split across the sections according to the exam specification from Cisco.

The two largest sections are IP Connectivity and Network Fundamentals: together 27 of the 60 questions (45%). Start with them, then take the rest in order of size.

Notes on this split

• Supplementary question practice; also practise device configuration and troubleshooting in a lab.
• This material targets200-301 v1.1. Cisco schedules v2.0 testing from3 February2027; check your booked exam version.

Topics in each section

Network Fundamentals (12 questions)

• Device roles and PoE
• Campus, WAN and cloud architectures
• Copper, fiber and interface types
• Interface and cabling faults
• TCP and UDP behavior
• IPv4 prefixes and subnet planning
• Private IPv4 space
• IPv6 configuration and prefixes
• IPv6 address classes and EUI-64
• Client IP parameters
• RF, SSID and wireless principles
• VMs, containers and VRFs
• MAC learning and forwarding

Network Access (12 questions)

• Access, voice and inter-VLAN links
• Trunks and 802.1Q
• CDP and LLDP discovery
• Layer2 and Layer3 LACP bundles
• Rapid PVST+ and protection features
• Wireless architectures and AP modes
• AP and WLC physical connections
• Device management and AAA access
• Wireless GUI and client connection

IP Connectivity (15 questions)

• Routing table fields
• Route selection and forwarding
• IPv4 and IPv6 static routes
• Single-area OSPFv2
• First-hop redundancy

IP Services (6 questions)

• Inside-source NAT
• NTP client and server
• DHCP and DNS roles
• SNMP operations
• Syslog facilities and severity
• DHCP client and relay
• QoS per-hop treatment
• SSH remote configuration
• TFTP and FTP transfer

Security Fundamentals (9 questions)

• Threat, flaw, exploitation and mitigation
• Awareness and physical protection
• Local device credentials
• Password policy and alternatives
• IPsec VPN concepts
• ACL configuration and evaluation
• Layer2 access security
• Authentication, authorization and accounting
• Wireless security methods
• WPA2-Personal GUI settings

Automation and Programmability (6 questions)

• Automation workflow and impact
• Traditional and controller-based networks
• Overlay, underlay and operational planes
• AI and ML in operations
• REST, HTTP and API credentials
• Ansible and Terraform capabilities
• Reading JSON data

How to use this split

Start with the 10 free questions, no sign-up: your score comes back split by section, so you see the weakest one. Then spread your study days according to the table above, as laid out in the study plan.