Last updated October 2026
The CCNA is still one exam, 200-301, but it’s about to change. Cisco announced CCNA v2.0 on May 20, 2026, its first major blueprint change since 2019. The current v1.1 exam runs through February 2, 2027, and v2.0 starts on February 3, 2027, with more troubleshooting, hands-on Ansible and AI-assisted network operations (Cisco, Cisco). This guide first went up in 2019 and has been rewritten from scratch for 2026.
CCNA proves you can build, run and troubleshoot a small-to-medium enterprise network: switching and VLANs, addressing and subnetting, OSPF, wireless basics, DHCP, DNS and NAT, security fundamentals and the basics of automation. It’s the standard for anyone heading into network engineering, and it’s one of the best things a security person can have on their résumé, because it means you actually understand how traffic moves.
Know what matters before your first meeting.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
v1.1 or v2.0? Your test date decides
- Testing before February 3, 2027: Take v1.1. Cisco says there’s no reason to change gears if you’re already studying for it, and most books and courses cover it.
- Starting from scratch in late 2026: If you can be ready by January, v1.1 has the most mature study material. If you’ll need longer, study for v2.0 and use Cisco’s new free Cisco U. material as it appears.
- Either way: Both versions earn the same CCNA certification, valid for three years.
CCNA exam dates in 2026: there is no fixed test day
Cisco does not run the CCNA on set dates. You pick your own appointment with Pearson VUE, Cisco’s test delivery partner, either at a test center or online from home or the office. In the U.S. and Canada you can book up to six weeks ahead and as late as the same day (Cisco). The two dates that matter are version dates: v1.1 stays live until v2.0 takes over on February 3, 2027 (Cisco).
- Before you book: create a Cisco account, sign in to the Cisco Certification Tracking System and complete your profile (Cisco). If you have taken a Cisco exam before, find your Cisco Certification ID first so your results land on one record (Cisco).
- Booking: schedule online through the Certification Tracking System, by phone with Pearson VUE, or as a walk-in at a test center where that is offered (Cisco). The legal name on your booking has to match your government ID.
- Testing online: Pearson VUE’s OnVUE software runs the exam on your own computer. Run the system test ahead of time, start check-in 30 minutes early, and expect a room scan and ID check. You need a closed room with nobody else in it and a clear desk (Cisco online testing FAQ).
- Testing at a center: the admission process takes a digital photo and signature and two forms of ID, both signed, one a government-issued photo ID (Cisco).
- Planning around v2.0: if you want v1.1, book early enough that a retake still fits before February 3, 2027.
v1.1 domains (through February 2, 2027)
| Domain | Weight | What it covers |
|---|---|---|
| 1. Network Fundamentals | 20% | Network components and topologies, cabling, TCP and UDP, IPv4 and IPv6 addressing and subnetting, wireless principles, virtualization and switching concepts |
| 2. Network Access | 20% | VLANs, trunking, EtherChannel, Rapid PVST+, CDP and LLDP, and wireless LAN architecture and configuration |
| 3. IP Connectivity | 25% | Routing tables, static routing, single-area OSPFv2 and first hop redundancy protocols |
| 4. IP Services | 10% | NAT, NTP, DHCP, DNS, SNMP, syslog, QoS, SSH and TFTP/FTP |
| 5. Security Fundamentals | 15% | Threats and mitigation, device access control, passwords and AAA, VPNs, ACLs, Layer 2 security and wireless security |
| 6. Automation and Programmability | 10% | Controller-based and software-defined networking, REST APIs, JSON, configuration management tools such as Ansible, and AI and machine learning in network operations |
v2.0 domains (from February 3, 2027)
| Domain | Weight | Highlights |
|---|---|---|
| 1. Network Infrastructure and Connectivity | 25% | Diagnosing interface and cable issues, troubleshooting IPv4 and IPv6 addressing, wired and wireless client connectivity and DHCPv4, hypervisors and containers, wireless principles |
| 2. Switching and Network Access | 25% | Switch-to-switch and switch-to-router connectivity, edge-host port settings (VLAN, PoE, port channel and LACP), CDP and LLDP, show-command troubleshooting and Rapid PVST+ (including PortFast) |
| 3. IP Routing | 20% | Reading routing tables, troubleshooting static routes, OSPFv2 for IPv4 and OSPFv3 for IPv6, and HSRP and VRRP status |
| 4. Network Services and Security | 20% | Local users and AAA with TACACS+ and RADIUS, secure file transfer, NAT/PAT on IOS XE, diagnosing DNS records, IPsec VPN concepts, ACLs and Layer 2 security features such as DHCP snooping and dynamic ARP inspection |
| 5. AI, and Network Operations and Management | 10% | The role of agentic AI in network operations, choosing prompts for generative AI, network management approaches including infrastructure as code, SNMP, using Ansible to run commands, and interpreting syslog messages |
Weights and topics come from Cisco’s v1.1 and v2.0 exam topics. The v2.0 exam says you may have to evaluate output and recommendations from agentic AI and digital network assistants. The domain descriptions above are summaries; download the official topic lists before you study.
If you remember the old CCNA
If you remember CCNA Routing and Switching, CCNA Security, CCNA Cloud and the two-exam CCENT route, those are gone. Cisco replaced all of them with a single CCNA and a single exam, 200-301, in 2020. You earn the certification by passing that one exam, and there are no prerequisites.
Who should take the CCNA
- Aspiring network engineers and network administrators
- Help desk and desktop support staff ready to move into networking
- Security analysts and engineers who need real networking depth
- Systems and cloud administrators who manage connectivity
Cisco has no formal prerequisites. Many candidates take CompTIA A+ or Network+ first, but plenty start with CCNA and a good lab.
200-301 exam facts
| Item | Details |
|---|---|
| Exam | Implementing and Administering Cisco Solutions (200-301 CCNA) |
| Current version | v1.1, last test date February 2, 2027 |
| Next version | v2.0, first test date February 3, 2027 |
| Time limit | 120 minutes |
| Question types | Performance-based, multiple choice and drag-and-drop |
| Results | Score report at the end of the exam with a breakdown by section; Cisco does not publish the passing score |
| Exam fee | Listed on Cisco’s 200-301 exam page; Cisco Learning Credits are accepted |
| Retakes | Wait five calendar days after a failed attempt |
| Languages | English and Japanese |
| Prerequisites | None |
| Validity | Three years |
| Recertification | 30 Continuing Education credits, or pass a qualifying exam (200-301 counts) |
Sources: Cisco’s 200-301 exam page, exam policies, exam list, CCNA certification page, v1.1 exam topics, v2.0 exam topics and recertification policy.
What the CCNA test is like, and where candidates get stuck
- Subnetting speed. Addressing shows up everywhere on the exam. If you can’t do it in your head quickly, every other topic gets slower.
- Configure and verify. Performance-based questions make you type commands and check the result. Recognizing the right command in a list isn’t the same skill.
- Reading show output. Most troubleshooting comes down to spotting the one wrong line in a routing table or interface status.
- Shortcuts. “Brain dump” sites that claim to have real exam questions violate Cisco’s exam rules and can get your certifications revoked. They also don’t teach you to run a network.
Twelve weeks, half of it in the lab
Figure eight to ten hours a week, and spend at least half of it in Packet Tracer or another lab. The exam makes you configure and verify, not just recall.
- Weeks 1 to 2: fundamentals. The OSI and TCP/IP models, Ethernet, cabling, TCP and UDP. Start Packet Tracer on day one.
- Weeks 3 to 4: subnetting and IPv6. Practice subnetting daily until you can do it in your head in under a minute. It shows up across the whole exam.
- Weeks 5 to 6: switching. VLANs, trunks, spanning tree, EtherChannel, and the Layer 2 security features. Build and break a multi-switch topology.
- Weeks 7 to 8: routing. Static routes, the routing table, OSPF and first hop redundancy. Troubleshoot deliberately misconfigured labs.
- Week 9: services. DHCP, DNS, NAT, NTP, SNMP and syslog. Configure each one and verify it with show commands.
- Week 10: security and wireless. ACLs, device hardening, AAA, VPN concepts and wireless LAN configuration.
- Week 11: automation. Controller-based networking, REST APIs and JSON. For v2.0, add Ansible basics and the AI operations topics.
- Week 12: practice. Timed practice exams from reputable providers and lab drills. Book the exam when you pass consistently.
Who pays for the CCNA, and what is free
- Exam fee: check the current fee on Cisco’s 200-301 exam page. Many employers pay it, and Cisco accepts Cisco Learning Credits, which companies often hold through Cisco purchases, so ask your manager before paying yourself. Only buy vouchers from Pearson VUE or an authorized source: Cisco says fraudulent or reused vouchers can lead to a lifetime ban (Cisco).
- Retakes: if you fail, you wait five calendar days, starting the day after the attempt, and pay the exam fee again (Cisco).
- Lab: Cisco Packet Tracer is free through Cisco’s Networking Academy, and Cisco Modeling Labs has a free tier. Used Cisco switches and routers are an option if you want physical gear.
- Training: Cisco U. has a CCNA learning path and practice exam, and Cisco Learning Partners run instructor-led classes. Books and video courses are the cheaper route.
- Recertification: Every three years with 30 CE credits or by passing a qualifying exam.
What hiring managers see in a CCNA
For network roles, it’s the standard entry credential; it tells a hiring manager you can be trusted with a switch config. BLS reports May 2025 median pay of $76,220 for computer network support specialists and $99,130 for network and computer systems administrators (BLS). Network architects, the senior end of the path, had a median of $134,050 (BLS).
For security roles, it’s a quiet advantage. Information security analysts had a median pay of $129,180 in May 2025 (BLS), and many strong analysts started in networking.
CCNA or Network+, A+ and Security+?
- CCNA vs Network+: Network+ is vendor-neutral and more conceptual. CCNA goes deeper and makes you configure Cisco devices. If you want to be a network engineer, CCNA carries more weight; Network+ is a good first step or a fit for general IT roles.
- CCNA vs CompTIA A+: A+ is broad IT support. Many people take A+ first and then CCNA when they know they want networking.
- CCNA vs Security+: Security+ is the entry security certification. CCNA plus Security+ is a strong combination for network security and SOC roles.
- Moving toward security: After CCNA, security-minded engineers often add Security+, then CySA+ or a GIAC certification such as GSEC.
Planning what comes after CCNA? The certification roadmap covers networking-to-security paths.
Best Cybersecurity Certifications in 2026 has the broader ranking. And lab every day, even for 20 minutes; subnetting, VLANs and OSPF only become second nature after you’ve fixed your own mistakes dozens of times.
Routers and VPN gateways are attackers’ favorite targets. Know when yours are. The CyberExperts Daily Brief tracks network-device vulnerabilities and the rest of the week’s security news in five minutes, weekday mornings. Get tomorrow’s brief.
CCNA FAQ
Which CCNA exam version should I take?
If you test on or before February 2, 2027, take 200-301 v1.1. From February 3, 2027, the exam is v2.0. Both versions earn the same CCNA certification.
When can I take the CCNA exam in 2026?
Any day there is an open Pearson VUE appointment. There are no fixed exam dates. In the U.S. and Canada you can book up to six weeks ahead and as late as the same day, at a test center or online. v1.1 is the exam until February 3, 2027, when v2.0 replaces it.
What changes in CCNA v2.0?
The v2.0 blueprint has five domains: Network Infrastructure and Connectivity (25%), Switching and Network Access (25%), IP Routing (20%), Network Services and Security (20%), and AI, Network Operations and Management (10%). It adds more troubleshooting, hands-on Ansible and AI-assisted operations.
What is the CCNA exam format?
120 minutes, with performance-based, multiple-choice and drag-and-drop questions.
How soon can I retake the CCNA?
Five calendar days after a failed attempt, counting from the day after the attempt. You pay the exam fee again for each attempt.
Who pays for the CCNA exam?
Often the employer. Cisco accepts Cisco Learning Credits for the 200-301 exam, and many companies cover the fee. The current fee is on Cisco’s 200-301 exam page; confirm it when you book with Pearson VUE.
Do I need anything before the CCNA?
No formal prerequisites. Anyone can take the 200-301 exam, though some IT experience helps.
How long is the CCNA valid?
Three years. You recertify by earning 30 Continuing Education credits or by passing a qualifying exam, including 200-301.
CCNA or Network+?
If you want to be a network engineer, CCNA carries more weight. Network+ is vendor-neutral, easier to start with and a good fit for general IT roles.
Sources
- Cisco, CCNA certification: cisco.com
- Cisco, 200-301 CCNA exam: cisco.com
- Cisco, Certification exams: cisco.com
- Cisco, Exam registration: cisco.com
- Cisco, Exam, testing and certification policies: cisco.com
- Cisco, Online testing FAQ (PDF): cisco.com
- Cisco Learning Network, CCNA v1.1 exam topics: learningnetwork.cisco.com
- Cisco Learning Network, CCNA v2.0 exam topics: learningnetwork.cisco.com
- Cisco, 200-301 CCNA v2.0 exam topics (PDF): learningcontent.cisco.com
- Cisco blog, Major updates to CCNA, CCIE and more (May 20, 2026): blogs.cisco.com
- Cisco, Recertification policy: cisco.com
- BLS, Computer support specialists: bls.gov
- BLS, Computer network architects: bls.gov
- BLS, Information security analysts: bls.gov
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
CMMC After the Phase 2 Suspension: What Contractors Still Have to Do in 2026
Short answer: on July 13, 2026, the Department of War suspended the move to CMMC Phase 2, which was due on November...
Blue Team Certifications (2026): CySA+, GCIA, BTL1 and SC-200 Compared
Blue team certifications compared from the issuers' own pages: CompTIA CySA+ V4, GIAC GCIA, BTL1 from Centri (Security Blue Team) and Microsoft...
Digital Forensics Certifications (2026): GCFA, CHFI, EnCE and CCE Compared
Digital forensics certifications compared from the issuers' own pages: GIAC GCFA and GCFE, EC-Council CHFI, OpenText EnCE and ISFCE CCE, with exam...
Monday’s brief: Ivanti’s last VPN fix is due today, then WordPress update attacks, a fake Claude Code extension and Drupal stores
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.