What is the Syllabus for CCNA Certification Exam?

The CCNA 200-301 syllabus consists of six core domains: Network Fundamentals (20%), Network Access (20%), IP Connectivity (25%), IP Services (10%), Security Fundamentals (15%), and Automation and Programmability (10%). Updated for 2026, the curriculum now includes emerging technologies like Generative AI, Cloud Management, and Machine Learning, alongside traditional routing, switching, and wireless essentials required for modern IT roles.

The Cisco Certified Network Associate (CCNA) certification remains an entry gate for networking professionals, providing a robust foundation in networking principles and practices. With the evolving network technology, the CCNA syllabus is also frequently updated, ensuring that candidates are equipped with the latest skills and knowledge required in the industry.

In this guide, we have provided the updated CCNA Syllabus for 2026, ensuring students do not lack in preparation and get a complete understanding of all CCNA exam topics.

Further, if you are interested in learning about Cisco or networking, our networking courses provide a deep understanding of the fundamentals and advanced concepts of networking.

6 Core Domains in CCNA Exam Syllabus

Join our CCNA Training ClassJoin our online CCNA training class.Enroll Now 

CCNA Syllabus Breakdown

The detailed list of topics of the CCNA exam is explained below, with relevant learning materials:

1. Network Fundamentals (20%)

Covers basic networking concepts, hardware, topologies, and IP addressing.

1.1 Network hardware devices: Routers, L2/L3 switches, Next-gen firewalls/IPS, APs, Controllers, Endpoints, and Servers.

1.2 Network topology architectures: 2-tier, 3-tier, Spine-leaf, WAN, SOHO, On-premises, and Cloud.

1.3 Physical interface and cabling types: Single-mode fiber, multimode fiber, copper, and PoE.

1.4 Identify interface and cable issues: Collisions, errors, mismatch duplex, or speed.

1.5 Protocol comparisons: TCP vs. UDP.

1.6 IPv4 addressing and subnetting.

1.7 Describe the need for private IPv4 addressing.

1.8 IPv6 addressing and prefix.

1.9 IPv6 address types: Unicast (global, unique local, link local), Anycast, Multicast, and Modified EUI 64.

1.10 Verify IP parameters for Client OS: Windows, Mac OS, and Linux.

1.11 Wireless principles: Non-overlapping Wi-Fi channels, SSID, RF, and Encryption.

1.12 Virtualization fundamentals: Server virtualization, Containers, and VRFs.

1.13 Switching concepts: MAC learning/aging, Frame switching, Frame flooding, and MAC address table.

2. Network Access (20%)

Focuses on VLANs, Spanning Tree, and Wireless architectures.

2.1 Configure and verify VLANs: Access ports (data and voice), Default VLAN, and Inter-VLAN connectivity.

2.2 Configure and verify interswitch connectivity: Trunk ports, 802.1Q, and Native VLAN.

2.3 Configure and verify Layer 2 discovery protocols: Cisco Discovery Protocol (CDP) and LLDP.

2.4 Configure and verify (L2/L3) EtherChannel: LACP.

2.5 Interpret basic operations of Rapid PVST+ STP: Root bridge, port states/roles, PortFast, Root guard, Loop guard, BPDU filter, and BPDU guard.

2.6 Compare Cisco Wireless Architectures and AP modes.

2.7 Describe physical infrastructure connections: AP, WLC, access/trunk ports, and LAG.

2.8 Describe network device management access: Telnet, SSH, HTTP, HTTPS, console, TACACS+/RADIUS, and Cloud managed.

2.9 Interpret Wireless LAN GUI configuration: WLAN creation, security settings, and QoS profiles.

3. IP Connectivity (25%)

Includes routing components, static routing, and OSPFv2.

3.1 Interpret components of routing table: Protocol code, Prefix, Next hop, AD, Metric, and Gateway of last resort.

3.2 Determine router forwarding decisions: Longest prefix match, AD, and Routing protocol metric.

3.3 Configure and verify IPv4/IPv6 static routing: Default, Network, Host, and Floating static.

3.4 Configure and verify single area OSPFv2: Neighbor adjacencies, Point-to-point, Broadcast (DR/BDR), and Router ID.

3.5 Describe the purpose and concepts of First Hop Redundancy Protocols (HSRP).

4. IP Services (10%)

Explores essential network services and Quality of Service (QoS).

4.1 Configure and verify inside source NAT using static and pools.

4.2 Configure and verify NTP operating in a client and server mode.

4.3 Explain the role of DHCP and DNS within the network.

4.4 Explain the function of SNMP in network operations.

4.5 Describe the use of syslog features including facilities and levels.

4.6 Configure and verify DHCP client and relay.

4.7 Explain the forwarding per-hop behavior (PHB) for QoS such as classification, marking, queuing, and congestion.

4.8 Configure network devices for remote access using SSH.

4.9 Describe the capabilities and function of TFTP/FTP in the network.

5. Security Fundamentals (15%)

Covers security concepts, ACLs, and Layer 2 security.

5.1 Define key security concepts: Threats, vulnerabilities, exploits, and mitigation techniques.

5.2 Describe security program elements: User awareness, training, and physical access control.

5.3 Configure device access control using local passwords.

5.4 Describe security password policy elements: Management, complexity, and alternatives (MFA, certificates, biometrics).

5.5 Describe remote access and site-to-site VPNs.

5.6 Configure and verify access control lists (ACLs).

5.7 Configure Layer 2 security features: DHCP snooping, dynamic ARP inspection, and port security.

5.8 Differentiate Authentication, Authorization, and Accounting (AAA) concepts.

5.9 Describe wireless security protocols: WPA, WPA2, and WPA3.

5.10 Configure WLAN using WPA2 PSK using the GUI.

6. Automation and Programmability (10%)

Focuses on the impact of automation, APIs, and AI in networking.

6.1 Explain how automation impacts network management.

6.2 Compare traditional networks with controller-based networking.

6.3 Describe controller-based and software-defined architectures (Overlay, Underlay, and Fabric).

6.4 Explain AI (Generative and Predictive) and Machine Learning in network operations.

6.5 Describe characteristics of REST-based APIs (Authentication types, CRUD, HTTP verbs, and data encoding).

6.6 Recognize the capabilities of configuration management tools, Ansible and Terraform.

6.7 Interpret JSON-encoded data.