Some certifications teach you a product. CCNA (Cisco Certified Network Associate) teaches you how networks work: how devices find each other, how traffic gets routed, how switches separate networks, and how to secure and automate all of it. That foundation sits under almost every IT, cloud, and security job.
It's also, frankly, a box on a lot of hiring checklists. Recruiters and HR systems have recognized CCNA for decades, and many networking, NOC, and infrastructure postings ask for it by name. That's not a bad thing: a box that's easy to tick with real knowledge behind it is one of the most reliable ways to get an interview.
This review covers the 200-301 exam, what it costs, how it compares with Network+, who should take it, and a 12-week study plan built around labs. It's in the certifications stage of our Cybersecurity learning path, because networking is the foundation security is built on.
CCNA at a glance
| Provider | Cisco |
| Exam | CCNA 200-301 |
| Time | 120 minutes |
| Questions | Cisco doesn't publish a fixed number; candidates commonly report around 100 |
| Question types | Multiple choice, drag and drop, simulations, and other formats |
| Passing score | Not published by Cisco |
| Prerequisites | None. Cisco suggests some experience with networking and IP addressing |
| Cost | US$300 plus tax (prices vary by country) |
| Delivery | Pearson VUE test center or online proctored |
| Valid for | Three years, renewable by exam or continuing education credits |
Why CCNA still matters
It gets you through the door
CCNA is one of the most recognized IT certifications. For networking, NOC (network operations center), and infrastructure roles, it's often listed as required or preferred, and recruiters who don't know the difference between a VLAN and a VPN still know what "CCNA" means. Our guide to what recruiters actually care about explains why those keyword boxes matter more than they should.
It teaches real fundamentals
Unlike certifications that mostly test vocabulary, CCNA makes you do things: calculate subnets, configure switches and routers, troubleshoot why two devices can't talk. Those skills transfer to:
- Security: you can't defend a network you don't understand. Firewall rules, segmentation, and log analysis all assume networking knowledge. Security+ is much easier with it.
- Cloud: cloud networks use the same concepts: subnets, routing tables, gateways, and access control.
- IT support: most "the internet is broken" tickets are networking problems.
It's fairly priced
One exam, no required training, and some of the best free study resources in IT. Compared with many certifications, the cost per unit of real skill is low.
What's on the exam
Current exam topics (version 1.1) and their weights:
| Domain | Weight | What it covers |
|---|---|---|
| 1. Network Fundamentals | 20% | The OSI and TCP/IP models, cabling, IPv4 and IPv6 addressing, subnetting, switching concepts, wireless basics, virtualization |
| 2. Network Access | 20% | VLANs, trunking, EtherChannel, Spanning Tree Protocol, wireless architectures |
| 3. IP Connectivity | 25% | Routing tables, static routes, OSPF, first-hop redundancy |
| 4. IP Services | 10% | NAT, NTP, DHCP, DNS, SNMP, syslog, QoS basics, SSH |
| 5. Security Fundamentals | 15% | Security concepts, device access control, passwords, VPN basics, access control lists (ACLs), Layer 2 security, wireless security |
| 6. Automation and Programmability | 10% | How automation changes networking, controllers and SDN, REST APIs, JSON, configuration management tools, and AI in network operations |
IP Connectivity is the heaviest domain, and subnetting underpins almost everything. If you master one skill early, make it subnetting.
A quick subnetting example
A /26 network leaves 6 bits for hosts: 2⁶ = 64 addresses. Subtract the network and broadcast addresses and you get 62 usable hosts. You'll do calculations like this constantly on the exam, often under time pressure, so practice until they take seconds.
| Prefix | Addresses | Usable hosts |
|---|---|---|
| /24 | 256 | 254 |
| /25 | 128 | 126 |
| /26 | 64 | 62 |
| /27 | 32 | 30 |
| /28 | 16 | 14 |
| /30 | 4 | 2 |
CCNA vs CompTIA Network+
| CCNA | Network+ | |
|---|---|---|
| Vendor | Cisco-focused (concepts are universal) | Vendor-neutral |
| Depth | Deeper; includes command-line configuration | Broader, lighter on configuration |
| Difficulty | Harder | Easier entry point |
| Recognition | Highly recognized for networking roles | Widely recognized; meets some government baselines |
| Cost | About $300 | Several hundred dollars per voucher |
| Best for | Networking, NOC, infrastructure, and anyone who wants deep fundamentals | Help desk and IT generalists; a gentler first step |
You don't need both. If you're aiming at networking or want the strongest foundation, go for CCNA. If you want a quicker, broader introduction before Security+, Network+ is a reasonable alternative.
Who CCNA is for
Good fit:
- Help desk and IT support staff moving up
- People targeting network technician, NOC, network administrator, or infrastructure roles
- Aspiring security analysts who want a real networking foundation
- Career changers who like hands-on, technical problem solving
Can wait or skip:
- People aiming purely at governance, risk, and compliance roles
- Developers who only need light networking knowledge
- Anyone who can't commit to regular hands-on lab practice; CCNA is hard to pass on reading alone
The best study resources
Pick one main course, one book, one lab tool, and one practice exam source:
| Type | Options | Notes |
|---|---|---|
| Video course | Jeremy's IT Lab (free); Cisco U. courses; paid courses on major learning platforms | Jeremy's IT Lab is a widely recommended free full course with labs |
| Book | Wendell Odom's CCNA 200-301 Official Cert Guide (Cisco Press, two volumes) | The standard reference |
| Labs | Cisco Packet Tracer (free via Cisco Networking Academy); Cisco Modeling Labs (has a free tier); GNS3; used Cisco gear for a physical home lab | Labs are non-negotiable for CCNA |
| Practice exams | Reputable practice tests from established publishers | Use them for timing and finding weak areas |
| Subnetting drills | Daily practice with any subnetting quiz or flashcards | Ten minutes a day beats an occasional marathon |
Cisco Networking Academy also offers free introductory courses and discounted exam vouchers for some students. As with any certification, avoid brain dumps: they violate Cisco's exam agreement and can get your certification revoked. Our guide to using AI to study for certifications covers how to use AI as a tutor safely.
The 12-week study plan
This plan assumes about 10 hours a week and basic computer skills. New to IT entirely? Allow 16 weeks.
| Week | Focus | Labs and practice |
|---|---|---|
| 1 | Networking models, cabling, Ethernet basics | Install Packet Tracer; build a two-PC, one-switch network |
| 2 | IPv4 addressing and subnetting | Daily subnetting drills start now and continue to exam day |
| 3 | Switching, MAC tables, VLANs | Configure VLANs and verify with show commands |
| 4 | Trunking, EtherChannel, Spanning Tree | Build a multi-switch lab; break and fix STP |
| 5 | Routing basics and static routes | Route between VLANs; configure static and default routes |
| 6 | OSPF | Configure single-area OSPF; read the routing table |
| 7 | IPv6 and first-hop redundancy | Dual-stack lab; review weeks 1 to 6; first practice exam |
| 8 | IP services: DHCP, DNS, NAT, NTP, SNMP, syslog | Configure DHCP and NAT on a router |
| 9 | Security fundamentals and ACLs | Write standard and extended ACLs; secure device access with SSH |
| 10 | Wireless fundamentals | Wireless architecture concepts; review security domain |
| 11 | Automation and programmability | REST APIs, JSON, controller concepts; second practice exam |
| 12 | Review and weak areas | Timed practice exams, subnetting speed drills, re-do weakest labs; book or confirm your exam |
Study habits that work
- Lab every concept. If you read about VLANs, configure VLANs that day.
- Break your labs on purpose, then troubleshoot them. Troubleshooting is what the job, and the harder exam questions, are really about.
- Keep a command notebook of every command you learn and what it shows.
- Use active recall. Our Learning How to Learn review explains why testing yourself beats rereading.
- Track your weak areas with a simple log of practice scores by domain. Our data analysis guide shows how to spot real trends instead of reacting to one bad day.
Exam day tips
- Manage time. 120 minutes goes quickly when subnetting and lab-style questions are mixed in.
- Subnet on the whiteboard you're given, or on the online equivalent, rather than in your head.
- You usually can't go back to earlier questions on Cisco exams, so answer each one before moving on.
- For online proctoring, test your setup in advance and follow the workspace rules exactly.
After you pass
- List it as "Cisco Certified Network Associate (CCNA)" on your resume and LinkedIn so keyword filters find both forms.
- Show your labs. Screenshots or write-ups of networks you built and troubleshot make strong portfolio pieces.
- Renew within three years, through continuing education credits or by passing a qualifying exam.
- Choose your next step: Security+ for security, a cloud networking or cloud associate certification for cloud roles, or CCNP for advanced networking.
Frequently asked questions
Is CCNA still worth it?
Yes, for networking, infrastructure, and many IT and security roles. It's widely recognized, fairly priced, and teaches fundamentals that don't go out of date. It also clears a lot of HR filters.
How long does it take to study for CCNA?
Most people with some IT background need about three months of steady study; complete beginners often need four to six months. Hands-on lab time is the part not to cut.
Is CCNA harder than Security+?
Many people find CCNA harder, because it requires configuration skills and fast subnetting, not just conceptual knowledge. Security+ is broader but less hands-on.
Can I get a job with just a CCNA?
It significantly helps for help desk, NOC, and junior network roles, especially combined with lab projects. Most employers also value IT experience, so roles like help desk are a common first step.
Do I need Cisco equipment to study?
No. Cisco Packet Tracer is free and covers most CCNA labs. Cisco Modeling Labs and used equipment are optional.
Bottom line
CCNA is the networking certification that both hiring managers and HR systems respect, and unlike some "box-ticking" credentials, the box has real substance behind it. It's affordable, it rewards hands-on practice, and it makes everything else in IT and security easier to learn. Commit to three months of labs and subnetting drills, and it's one of the best investments you can make in an IT career.
Check your understanding
Answer each question from memory before opening it. Recalling, not rereading, is what makes learning stick (here's why).
1 Which domain carries the most weight on the CCNA 200-301 exam?
IP Connectivity, at 25%: routing tables, static routing, and OSPF. Network Fundamentals and Network Access follow at 20% each.
2 How many usable host addresses are in a /26 IPv4 subnet?
62. A /26 leaves 6 host bits, so 2^6 = 64 addresses, minus the network and broadcast addresses.
3 What free tool does Cisco provide for practicing CCNA labs?
Cisco Packet Tracer, a network simulator available free through Cisco Networking Academy. Cisco Modeling Labs also has a free tier.
4 What's the main difference between CCNA and CompTIA Network+?
Network+ is vendor-neutral and broader at the entry level. CCNA goes deeper, includes Cisco command-line configuration, and is usually considered harder and more respected for networking roles.
5 Why does CCNA help even if you're aiming for security, not networking?
Security work depends on understanding how traffic moves: subnets, VLANs, routing, ports, and access control lists. CCNA builds exactly that foundation.
Sources
- Cisco: CCNA certification: exam details, price, and exam topics.
- Cisco Networking Academy: free courses and Packet Tracer.
- Pearson VUE: Cisco: exam scheduling and testing policies.