CCNA 200-301 v1.1 topic map
CCNA v1.1 is the only 200-301 exam until February 2, 2027. From February 3, 2027 Cisco switches to v2.0. Below, every v1.1 objective (in Cisco's own wording) links to the lessons and labs that cover it.
Deciding which version to take? Read CCNA v1.1 ends February 2, 2027: take it now or wait and what changed in v2.0.
1.0 Network Fundamentals
20% of the exam1.1Explain the role and function of network components (routers, L2 and L3 switches, next-generation firewalls and IPS, access points, controllers, endpoints, servers, PoE)
1.2Describe characteristics of network topology architectures (two-tier, three-tier, spine-leaf, WAN, SOHO, on-premises and cloud)
1.3Compare physical interface and cabling types
1.4Identify interface and cable issues (collisions, errors, mismatched duplex, speed)
1.5Compare TCP to UDP
1.6Configure and verify IPv4 addressing and subnetting
1.7Describe the need for private IPv4 addressing
1.8Configure and verify IPv6 addressing and prefix
1.9Describe IPv6 address types
1.10Verify IP parameters for client OS (Windows, macOS, Linux)
1.11Describe wireless principles (nonoverlapping Wi-Fi channels, SSID, RF, encryption)
1.12Explain virtualization fundamentals (server virtualization, containers, VRFs)
1.13Describe switching concepts (MAC learning and aging, frame switching, frame flooding, MAC address table)
2.0 Network Access
20% of the exam2.1Configure and verify VLANs (normal range) spanning multiple switches
2.2Configure and verify interswitch connectivity (trunk ports, 802.1Q, native VLAN)
2.3Configure and verify Layer 2 discovery protocols (CDP and LLDP)
2.4Configure and verify (L2/L3) EtherChannel (LACP)
2.5Interpret basic operations of Rapid PVST+ (root port, root bridge, port states, PortFast, BPDU Guard, Root Guard)
2.6Describe Cisco Wireless Architectures and AP modes
2.7Describe physical infrastructure connections of WLAN components (AP, WLC, access/trunk ports, LAG)
2.8Describe AP and WLC management access connections (Telnet, SSH, HTTP/HTTPS, console, TACACS+/RADIUS)
2.9Interpret the wireless LAN GUI configuration for client connectivity (WLAN creation, security, QoS, advanced)
3.0 IP Connectivity
25% of the exam3.1Interpret the components of a routing table (protocol code, prefix, mask, next hop, admin distance, metric, gateway of last resort)
3.2Determine how a router makes a forwarding decision by default (longest match, AD, metric)
3.3Configure and verify IPv4 and IPv6 static routing (default, network, host, floating static)
3.4Configure and verify single area OSPFv2 (neighbor adjacencies, point-to-point, broadcast DR/BDR, router ID)
3.5Describe the purpose, functions, and concepts of first hop redundancy protocols
4.0 IP Services
10% of the exam4.1Configure and verify inside source NAT using static and pools
4.2Configure and verify NTP operating in a client and server mode
4.3Explain the role of DHCP and DNS within the network
4.4Explain the function of SNMP in network operations
4.5Describe the use of syslog features including facilities and severity levels
4.6Configure and verify DHCP client and relay
4.7Explain the forwarding per-hop behavior (PHB) for QoS (classification, marking, queuing, congestion, policing, shaping)
4.8Configure network devices for remote access using SSH
4.9Describe the capabilities and function of TFTP/FTP in the network
5.0 Security Fundamentals
15% of the exam5.1Define key security concepts (threats, vulnerabilities, exploits, mitigation techniques)
5.2Describe security program elements (user awareness, training, physical access control)
5.3Configure and verify device access control using local passwords
5.4Describe security password policies elements (management, complexity, MFA, certificates, biometrics)
5.5Describe IPsec remote access and site-to-site VPNs
5.6Configure and verify access control lists
5.7Configure Layer 2 security features (DHCP snooping, dynamic ARP inspection, port security)
5.8Compare authentication, authorization, and accounting concepts
5.9Describe wireless security protocols (WPA, WPA2, WPA3)
5.10Configure and verify WLAN within the GUI using WPA2 PSK
6.0 Automation and Programmability
10% of the exam6.1Explain how automation impacts network management
6.2Compare traditional networks with controller-based networking
6.3Describe controller-based, software-defined architecture (overlay, underlay, fabric)
6.4Explain AI (artificial intelligence) and machine learning (ML) in network operations (AI, ML, generative AI, predictive AI)
6.5Describe characteristics of REST-based APIs (CRUD, HTTP verbs, data encoding)
6.6Recognize the capabilities of configuration management mechanisms Puppet, Chef, and Ansible
6.7Recognize components of JSON-encoded data
Topics on v1.1 that v2.0 drops
These are on the v1.1 exam (take it by February 2, 2027) and still come up in real jobs and interviews. They are not in the v2.0 blueprint.
Coming in v2.0 (new in February 3, 2027)
Topics that v2.0 adds. Not required for v1.1 — read ahead if you plan to re-cert or you'll test on v2.0.
Cisco®, CCNA® and 200-301 are trademarks of Cisco Systems, Inc. PacketMentor is independent and not affiliated with Cisco. Objective text and weights are from Cisco's official CCNA 200-301 v1.1 exam topics.
