Use Cisco CCNA practice questions mapped to 200-301 v1.1 if you test before February 3, 2027, and to v2.0 if you test on or after that date. Cisco keeps the exam code 200-301 for both versions, so a question bank labeled only “200-301” does not tell you which blueprint it covers. Here are some things to keep in mind:
| Factor | 2026 reality |
|---|---|
| Current exam | 200-301 CCNA v1.1: 120 minutes, US$300, English and Japanese (Cisco 200-301 exam page) |
| Next version | CCNA v2.0, effective February 2027, same exam code |
| Difficulty | 7/10 with help desk or IT support experience; 8/10 with no networking background (Dumpsgate editorial rating) |
| Official pass rate | Not published by Cisco. Any pass-rate percentage on a vendor site is an unverified claim |
| Passing score and question count | Not published. Grading is pass/fail, results appear online within 48 hours (Cisco CCNA exam and training) |
| Prerequisites | None formal; the exam tests CLI configuration and verification, so labs are part of prep |
- Verdict: Free CCNA practice questions are enough to find weak domains. They are not enough to confirm readiness, because most free sets are multiple choice only and many were written before the v1.1 refresh. Combine a version-tagged question bank with hands-on labs.
Should you practice for CCNA 200-301 v1.1 or v2.0?
Pick the version by exam date, not by study start date. v1.1 is available until February 2027, and v2.0 replaces it under the same 200-301 code.
| Your planned exam date | Practice questions to use | Why |
|---|---|---|
| On or before February 2, 2027 | v1.1 | Six-domain blueprint stays live until the cutover |
| On or after February 3, 2027 | v2.0 | Five-domain blueprint with new AI and troubleshooting topics |
| Not booked yet, starting from zero | v2.0, with core v1.1 questions for fundamentals | Most beginners need more than 4 months; core topics carry over |
How do the v1.1 and v2.0 exam domains compare?
| v1.1 domain | v1.1 weight | Closest v2.0 domain | v2.0 weight |
|---|---|---|---|
| Network Fundamentals | 20% | Network Infrastructure and Connectivity | 25% |
| Network Access | 20% | Switching and Network Access | 25% |
| IP Connectivity | 25% | IP Routing | 20% |
| IP Services + Security Fundamentals | 10% + 15% | Network Services and Security | 20% |
| Automation and Programmability | 10% | AI and Network Operations | 10% |
Sources: CCNA v1.1 exam topics, CCNA v2.0 exam topics. The domain mapping is approximate because Cisco moved individual topics between domains.
Which topics are new in CCNA v2.0?
- AI in network operations: agentic AI, evaluating output from digital network assistants, and prompt construction for troubleshooting workflows.
- Troubleshooting verbs: DHCP (including the IOS DHCP server) and DNS move from configure or describe to diagnose and troubleshoot.
- Infrastructure as code: a hands-on Ansible topic and a comparison of device-based, controller-based, and cloud-based management.
- Access layer: Power over Ethernet and edge-host-aware access port configuration.
Subnetting, VLANs, trunking, spanning tree, OSPF, ACLs, and NAT appear in both versions. A question on those topics written for v1.1 remains valid practice for v2.0.
You can learn more about the differences between both CCNA versions here: What Changed Between CCNA v1.1 and v2.0?
Which Cisco CCNA 200-301 exam claims in practice tests are wrong?
Several top-ranking practice pages repeat claims that do not match Cisco’s published topics. Check any question bank against this list before trusting its scoring or coverage.
| Claim seen on practice sites | What the official blueprint says | Impact on your prep |
|---|---|---|
| “You need 825/1000” or “800 to 850” to pass | No passing score is published (see the summary table above) | Do not treat a practice score as a pass threshold |
| “The exam has exactly 100 or 120 questions” | No question count is published | Pace for about 1 minute per item and leave time for sims |
| BGP peering and troubleshooting are tested | BGP is not a v1.1 exam topic | Skip BGP questions in a CCNA bank |
| Chef and Puppet are tested | v1.1 lists Ansible and Terraform | Drop Chef and Puppet items |
| Questions on Catalyst 2950 output or TelePresence QoS | Legacy items from older exams | Treat them as a sign the bank is outdated |
| CCENT as a step before CCNA | Cisco retired CCENT in February 2020 | Testimonials citing CCENT predate the current exam |
| “Real exam questions” or “actual exam PDF” | Disclosure of exam content violates Cisco policy | See the PDF and dumps section below |
Discover More: How Hard Is CCNA in 2026?
Cisco CCNA practice questions and answers: 15 version-tagged samples
These 15 CCNA 200-301 exam questions are original items written by Dumpsgate instructors, not recalled exam content. Each shows its domain and whether it applies to v1.1, v2.0, or both. Q13 to Q15 target topics that v2.0 adds or expands.
Scoring guide: 13 to 15 correct means review only the items you missed. 9 to 12 correct means focus on the domains of your misses. 8 or fewer means return to the topic before practicing more questions.
Q1. How many usable host addresses does a /27 IPv4 subnet provide?
Domain: Network Fundamentals · Valid for: v1.1 and v2.0
A. 14
B. 30
C. 32
D. 62
Answer: B. A /27 leaves 5 host bits: 2^5 = 32 addresses, minus the network and broadcast addresses = 30. 32 forgets to subtract those two; 14 fits a /28 and 62 fits a /26.
Q2. Which subnet contains the host 172.16.45.200/20?
Domain: Network Fundamentals · Valid for: v1.1 and v2.0
A. 172.16.0.0/20
B. 172.16.40.0/20
C. 172.16.45.0/20
D. 172.16.32.0/20
Answer: D. A /20 mask is 255.255.240.0, so subnets increment by 16 in the third octet: 0, 16, 32, 48. The value 45 falls in the 32 to 47 block, so the subnet is 172.16.32.0/20 with broadcast 172.16.47.255.
Q3. What is the RFC 5952 recommended form of 2001:0DB8:0000:0000:00A0:0000:0000:0001?
Domain: Network Fundamentals · Valid for: v1.1 and v2.0
A. 2001:db8::a0:0:0:1
B. 2001:db8::a0::1
C. 2001:db8:0:0:a0::1
D. 2001:db8::a:0:0:1
Answer: A. Two zero runs have equal length, so RFC 5952 compresses the first one. Using :: twice is invalid. 2001:db8:0:0:a0::1 is valid but not the recommended form, and a:0:0:1 drops a significant zero from 00A0.
Q4. A router learns 10.10.10.0/24 from OSPF and also has a static route to 10.10.10.0/24 configured with administrative distance 120. Which route enters the routing table?
Domain: IP Connectivity · Valid for: v1.1 and v2.0
A. The static route, because static routes always win
B. Both routes, with equal-cost load balancing
C. The OSPF route, because 110 is lower than 120
D. Neither, because of the conflict
Answer: C. The lowest administrative distance wins. OSPF is 110, so the static route with AD 120 is a floating static route that installs only if the OSPF route disappears.
Q5. A router has routes to 10.0.0.0/8, 10.1.0.0/16, 10.1.1.0/24, and 0.0.0.0/0. Which route forwards a packet to 10.1.2.5?
Domain: IP Connectivity · Valid for: v1.1 and v2.0
A. 10.0.0.0/8
B. 10.1.1.0/24
C. 10.1.0.0/16
D. 0.0.0.0/0
Answer: C. The router uses the longest prefix that matches. 10.1.2.5 is not inside 10.1.1.0/24 (10.1.1.0 to 10.1.1.255), so the longest match is 10.1.0.0/16.
Q6. Two OSPF routers on the same subnet stay in the EXSTART/EXCHANGE state. What is the most likely cause?
Domain: IP Connectivity · Valid for: v1.1 and v2.0
A. Mismatched interface MTU
B. Mismatched hello timers
C. Mismatched area IDs
D. Duplicate router IDs on different subnets
Answer: A. Hello timer and area mismatches stop routers from becoming neighbors at all. An MTU mismatch lets them see each other but breaks database description exchange, which leaves them stuck in EXSTART/EXCHANGE.
Q7. Three OSPF routers boot at the same time on one Ethernet segment. R1: priority 0, router ID 9.9.9.9. R2: priority 1, router ID 2.2.2.2. R3: priority 1, router ID 3.3.3.3. Which router becomes the DR?
Domain: IP Connectivity · Valid for: v1.1 and v2.0
A. R1
B. R3
C. R2
D. No DR is elected
Answer: B. Priority 0 makes R1 ineligible regardless of its high router ID. R2 and R3 tie on priority, so the higher router ID (3.3.3.3) wins. R2 becomes the BDR.
Q8. Both ends of a switch-to-switch link are configured with switchport mode dynamic auto. What is the result?
Domain: Network Access · Valid for: v1.1 and v2.0
A. An 802.1Q trunk forms
B. An ISL trunk forms
C. The ports go err-disabled
D. The link operates as an access link
Answer: D. Dynamic auto only responds to DTP negotiation and never initiates it. With both ends waiting, no trunk forms and the link stays in access mode. At least one side must be trunk or dynamic desirable.
Q9. An access port has PortFast and BPDU Guard enabled. Someone connects a switch that sends BPDUs. What happens?
Domain: Network Access · Valid for: v1.1 and v2.0
A. The port becomes the root port
B. The port moves to the blocking state
C. BPDUs are filtered and the port keeps forwarding
D. The port goes err-disabled
Answer: D. BPDU Guard shuts the port down into err-disabled state when it receives any BPDU. Filtering BPDUs while forwarding describes BPDU Filter, a different feature.
Q10. Which wildcard mask matches every host in 192.168.10.0/26 in an ACL?
Domain: Security Fundamentals · Valid for: v1.1 and v2.0
A. 0.0.0.31
B. 0.0.0.63
C. 0.0.0.64
D. 255.255.255.192
Answer: B. A wildcard mask is the inverse of the subnet mask: 255.255.255.255 minus 255.255.255.192 = 0.0.0.63. 255.255.255.192 is the subnet mask itself, which IOS would misread as a wildcard.
Q11. A switch port has switchport port-security enabled with no other port-security commands. What happens when a second MAC address appears on the port?
Domain: Security Fundamentals · Valid for: v1.1 and v2.0
A. The frame is dropped silently (protect)
B. The frame is dropped and a log is generated (restrict)
C. The port goes err-disabled (shutdown)
D. The new MAC replaces the old one
Answer: C. The default maximum is one MAC address and the default violation mode is shutdown, which err-disables the port.
Q12. A syslog message is logged at severity level 4. Which severity name does that correspond to?
Domain: IP Services · Valid for: v1.1 and v2.0
A. Warnings
B. Errors
C. Notifications
D. Informational
Answer: A. Syslog levels run 0 Emergencies, 1 Alerts, 2 Critical, 3 Errors, 4 Warnings, 5 Notifications, 6 Informational, 7 Debugging. Interpreting syslog output is an explicit v2.0 skill.
Q13. A user can ping 8.8.8.8 but cannot open www.example.com in a browser. Which test isolates the fault fastest?
Domain: IP Services / Network Services · Valid for: v2.0 new topic
A. nslookup www.example.com
B. ping the default gateway
C. show mac address-table on the access switch
D. traceroute 8.8.8.8
Answer: A. A successful ping to a public IP proves Layer 1 to Layer 3 connectivity and the default gateway. The remaining failure point is name resolution, which nslookup tests directly.
Q14. Which statement about Ansible is correct?
Domain: Automation / AI and Network Operations · Valid for: v1.1 and v2.0 (expanded in v2.0)
A. It requires an agent installed on each network device
B. It is a pull-based tool where devices fetch configurations on a schedule
C. It only works with Cisco controllers
D. It uses YAML playbooks and connects agentlessly, typically over SSH
Answer: D. Ansible is agentless and push-based. Playbooks are written in YAML, and network modules connect to devices over SSH or APIs. Pull-based agents describe Puppet and Chef.
Q15. An engineer wants a public generative AI tool to explain errors in a router running-config. What should happen before the config is pasted?
Domain: AI and Network Operations · Valid for: v2.0 new topic
A. Nothing, because configs contain no sensitive data
B. Remove or mask passwords, keys, SNMP communities, and public addressing per the data classification policy
C. Convert the config to JSON
D. Paste only the first 20 lines
Answer: B. Running-configs hold secrets such as enable secrets, pre-shared keys, and SNMP strings. Data classification is part of building a safe prompt in the v2.0 AI topics.
The full 55-question set, with an answer key and the same version tags, is in the free PDF covered in the PDF section below.
Can you solve a CCNA simulation-style question from CLI output?
The 200-301 exam expects you to read IOS output and act on it, and none of the free practice pages on page one includes exhibit-based items. Work these two from the output alone.
Exhibit 1: VLAN 30 hosts cannot reach each other across the trunk
Hosts in VLAN 30 on SW1 cannot reach VLAN 30 hosts on SW2. VLANs 10 and 20 work.
SW1# show interfaces trunk
Port Mode Encapsulation Status Native vlan
Gi0/1 on 802.1q trunking 1
Port Vlans allowed on trunk
Gi0/1 1,10,20
Which command fixes the problem without breaking VLANs 10 and 20?
A. switchport trunk allowed vlan 30
B. switchport trunk allowed vlan add 30
C. switchport trunk native vlan 30
D. switchport mode dynamic desirable
Answer: B. VLAN 30 is missing from the allowed list. Option A replaces the whole list with VLAN 30 alone and cuts VLANs 10 and 20, which is the most common trunk mistake in labs. Changing the native VLAN or DTP mode does not add VLAN 30.
Exhibit 2: An ACL meant to block web traffic blocks everything
The ACL below is applied inbound on R1’s LAN interface. Users in 192.168.10.0/24 now lose DNS, ping, and email as well as web access.
R1# show access-lists
Extended IP access list BLOCK_WEB
10 deny tcp 192.168.10.0 0.0.0.255 any eq www (42 matches)
20 deny tcp 192.168.10.0 0.0.0.255 any eq 443 (17 matches)
What is the cause?
A. The wildcard mask is wrong
B. The ACL is applied in the wrong direction
C. Every ACL ends with an implicit deny any, and no permit statement exists
D. Port 443 cannot be filtered by an extended ACL
Answer: C. Traffic that matches neither line hits the implicit deny. Adding 30 permit ip any any restores everything except HTTP and HTTPS. The match counters prove the mask and direction already work.
Which mistakes cost the most points on CCNA practice tests?
Most wrong answers on the questions above come from seven repeatable traps. Fixing the rule removes the whole category of error.
| Trap | Seen in | Rule that fixes it |
|---|---|---|
| Forgetting network and broadcast addresses | Q1 | Usable hosts = 2^host bits minus 2 |
| Guessing subnet boundaries | Q2 | Block size = 256 minus the mask octet; the subnet starts at the nearest lower multiple |
| Comparing metrics across protocols | Q4 | Administrative distance decides between sources; metric decides within one protocol |
| Picking the most specific-looking route that does not contain the address | Q5 | Check containment first, then take the longest prefix |
| Reading neighbor state as a yes/no | Q6, Q7 | Stuck state tells you the cause: INIT, 2-WAY, and EXSTART each point to different faults |
| Mixing up look-alike features | Q8, Q9 | Dynamic auto vs desirable; BPDU Guard vs BPDU Filter; restrict vs protect vs shutdown |
| Command that replaces instead of adds | Exhibit 1 | allowed vlan add appends; allowed vlan overwrites |
Where can you take a free CCNA 200-301 practice test?
The free CCNA practice exams ranking today differ most on three points: question count, whether a signup is required, and how recently they were updated. None of the free sources below labels questions for v2.0.
| Source | Free questions | Signup or gate | Last updated | Version stated | Watch for |
|---|---|---|---|---|---|
| TechTarget CCNA quiz | 20 | None | June 2025 | v1.1 domains | AI-assisted quiz; intro lists BGP, which v1.1 does not test |
| LearnCisco 200-301 test | 55 | Email form for score report | July 2023 | 200-301, no version | Legacy items (Catalyst 2950, TelePresence QoS) |
| IPCisco CCNA quizzes | 2 open quizzes | Most quizzes members-only | March 2025 | v1.1 | Paywall after the first quizzes |
| Crucial Exams CCNA | Up to 20 per test, drawn from a 530-question bank | Free tier, no signup for sample | Not stated | 200-301 blueprint | Full bank and PBQs require purchase |
| OpenExamPrep CCNA | 270 | None stated | Not stated | 200-301 | Independent; check explanations against the blueprint |
| Cisco U. CCNA | Pre- and post-assessments and practice tests | Cisco account; paid learning path | Maintained by Cisco | Current blueprint | Official source; cost depends on plan |
| Dumpsgate CCNA question bank | 1,242 questions with explanations | Free demo | October 2026 | v1.1 and v2.0 tags per question | PBQs |
As checked in October 2026. Counts and gates change, so confirm on each site.
How do you choose between free and paid CCNA practice exams?
- Free sets work for a first diagnostic and for drilling one domain.
- Paid banks earn their cost when they add three things free sets lack: 500 or more blueprint-mapped items, simulation or lab-style questions, and per-domain score reports.
- Version tagging matters more than bank size between now and February 2027. A 1,000-question bank without v1.1 or v2.0 labels leaves you guessing which items still apply.
Learn More: CCNA 200-301 Certification Exam Cost: Complete Breakdown in 2026
Are CCNA exam questions and answers PDFs safe to use?
A PDF of original Cisco CCNA practice questions is safe. A PDF that claims to contain real or recent exam questions is a braindump, and using it puts your certification at risk. Cisco prohibits disclosure of exam content under the Cisco Certification and Confidentiality Agreement and can invalidate results or decertify candidates for misconduct (Cisco exam policies).
How do you spot a CCNA dump disguised as a practice test PDF?
- It promises “actual” or “real” 200-301 exam questions, or a “100% pass guarantee.”
- It is sold in VCE format or as a “premium file” uploaded by “recent test takers.”
- Answers have no explanations, or explanations contradict the official exam topics.
- The same site sells dumps for dozens of unrelated vendors.
- It offers to sit the exam for you. That is proxy testing and leads to a ban.
Download the CCNA 200-301 practice test PDF
The free Dumpsgate PDF holds 55 original questions with an answer key, explanations, and a version tag on every item, plus 4 CLI exhibit questions, a one-page quick reference, 5 Packet Tracer mini-labs with verification commands, and a domain score tracker that tells you what to study next.
| v1.1 domain | v1.1 weight | Questions in the PDF |
|---|---|---|
| Network Fundamentals | 20% | 9 |
| Network Access | 20% | 9 |
| IP Connectivity | 25% | 12 |
| IP Services | 10% | 10 |
| Security Fundamentals | 15% | 8 |
| Automation and Programmability (incl. v2.0 AI topics) | 10% | 7 |
46 questions apply to both versions, 8 cover v2.0 new topics, and 1 covers a topic expanded in v2.0.
[Download the free 55-question CCNA practice PDF]
How do you know you are ready for the CCNA exam?
You are ready when you pass unseen questions consistently and can configure core features from a blank device without notes. Repeating the same question bank inflates scores through memorization, so only first-attempt scores on new items count.
Dumpsgate CCNA readiness checklist
This is our instructor standard, not a Cisco pass threshold.
85% or higher on two consecutive timed, full-length sets of unseen questions from different sources
No single domain below 75%
About 100 items finished in under 100 minutes, leaving time for simulations
You can explain why each wrong option is wrong on at least 9 of 10 reviewed questions
From a blank lab, without notes: VLANs and trunks, router-on-a-stick, single-area OSPFv2, a standard and an extended ACL, PAT, a DHCP server and relay, and SSH access
How should you use CCNA practice questions during prep?
- Finish a first pass of one domain, then take a short timed set on that domain only.
- Map each miss to its exam topic in the official blueprint.
- Fix the gap in a lab, not by rereading. Cisco Packet Tracer is free with a Cisco Networking Academy account, and Cisco Modeling Labs has a free tier.
- Retest with unseen questions on the same topic.
- In the final two weeks, run full-length timed sets that mix all domains.
How many hours does CCNA prep take?
Cisco publishes no study-hour guidance. These ranges are Dumpsgate instructor estimates.
| Starting point | Study hours | Weeks at 10 hours per week |
| No IT experience | 250 to 300 | 25 to 30 |
| Help desk or CompTIA Network+ level | 150 to 200 | 15 to 20 |
| Working network technician | 80 to 120 | 8 to 12 |
A beginner starting in October 2026 at 10 hours per week reaches exam readiness after the February 2027 cutover, which is why the version table above points new learners to v2.0.
Why should you practice without a review button?
Cisco exams do not let you return to a previous question once you move forward, as Cisco Learning Network moderators confirm (Cisco Learning Network). Practice tests that allow “mark for review” train a habit the real exam punishes.
- Turn off review and back navigation in any practice engine you use.
- Commit to an answer within about 60 seconds on multiple choice.
- Bank time for simulations, which can take 5 to 15 minutes each and may appear late in the exam.
- If a question stalls you past 3 minutes, pick the best remaining option and move on.
Explore Further: What Are the CCNA Certification Requirements in 2026?
Is the CCNA worth the exam fee in 2026?
For US candidates, the roles CCNA targets pay well above the national median, but administrator demand is projected to shrink. The certification is valid for 3 years, so one passed exam covers one renewal cycle.
| US occupation (BLS) | Median pay, May 2025 | Outlook |
|---|---|---|
| Network and computer systems administrators | $99,130 | 323,600 jobs in 2025; projected decline of 4% for 2025 to 2035 |
| Computer network support specialists | $76,220 | Grouped with computer support specialists, projected decline of 3% for 2025 to 2035 |
| All US occupations | $50,980 | Reference point |
- US: a declining administrator headcount means CCNA works best paired with automation, cloud networking, or security skills, which is where v2.0 is moving.
- Canada, UK and EU, Australia, India: the exam is priced in US dollars, with local taxes added at checkout. Use your national labor statistics office for local pay data rather than global salary aggregators.
Frequently Asked Questions (FAQs)
Is a CCNA earned on v1.1 different from one earned on v2.0?
No. Both versions use exam code 200-301 and award the same CCNA certification. Only the blueprint you are tested on changes.
Do CCNA practice exams need simulation questions?
Yes. The 200-301 exam mixes multiple choice, drag-and-drop, and simulation-style items that require IOS commands. A bank with multiple choice only leaves the configuration skill untested.
How many CCNA practice questions should you complete?
Coverage matters more than count. Aim to see every exam topic at least three times across unseen questions, then use the readiness checklist above to decide when to book.
Is the CCNA harder than CompTIA Network+?
CCNA is generally harder because it is Cisco-specific and tests CLI configuration and verification. Network+ is vendor-neutral and more conceptual. Many candidates take Network+ first when they have no networking background.
Can you take the CCNA exam online?
Yes. Cisco exams are delivered by Pearson VUE at test centers or through online proctoring. Practice under the same conditions: a single screen, no notes, and a 120-minute limit.
