The CCNA (200-301 v1.1) is Cisco's foundational associate certification, validating the knowledge to install, configure, and troubleshoot small-to-medium enterprise networks. The 120-minute exam spans six areas: Network Fundamentals (20%), Network Access (20%), IP Connectivity (25%), IP Services (10%), Security Fundamentals (15%), and Automation and Programmability (10%). It blends conceptual recall with hands-on IOS configuration and verification, so the fastest path to a pass is pairing each concept with the exact show/configure command that proves it. This sheet maps every blueprint objective to the Cisco framing the exam grades against, with the traps that catch most candidates called out alongside.
What This Cheat Sheet Covers
This topic spans 43 focused tables and 418 indexed concepts. Below is a complete table-by-table outline of this topic, spanning foundational concepts through advanced details.
A jump-to index of every table row in this cheat sheet.
An interactive map of every table and concept in this topic.
Table 1: Network Components
CCNA 200-301 Network Fundamentals, exam topic 1.1: explain the role and function of network components. These are the building blocks Cisco expects you to place correctly in a campus design, from Layer 3 routers down to powered endpoints.
| Concept | Example | Description |
|---|---|---|
Looks up destination IP in routing table picks lowest-metric path, forwards between networks | Layer 3 device that forwards IP packets between different IP networks and connects separate broadcast domains. Each interface sits in its own network; it chooses paths using a routing table. Not the source or destination of traffic, the transit device that links networks. | |
Learns source MACs into a MAC address table forwards frames by destination MAC inside a VLAN | Forwards Ethernet frames within a LAN based on destination MAC address, building its table by learning source MACs. It will not forward frames between VLANs. • One switch = many collision domains • Each VLAN is a separate broadcast domain | |
interface vlan 10 ip address 10.0.10.1 255.255.255.0 (an SVI gateway) | Also called a multilayer switch, it switches at Layer 2 and routes at Layer 3, doing inter-VLAN routing in hardware via SVIs. Preferred over a router for high-speed campus LAN routing. Not to be confused with a router: it usually has no WAN interfaces. | |
Blocks a risky app by name, not just port 443 | A network security device that goes beyond a traditional stateful firewall by adding application awareness and control, integrated intrusion prevention, URL filtering, and threat intelligence. A stateful firewall alone only filters by state, port, and protocol. | |
Inline sensor inspects traffic, drops a known exploit | Sits inline in the traffic path, inspects packets, and can drop or block traffic it identifies as an intrusion. • IPS = inline, can stop attacks • IDS = out-of-band copy, only detects and alerts | |
Lightweight AP joins a WLC over a CAPWAP tunnel | Bridges wireless clients onto the wired LAN. A lightweight AP handles only real-time radio (split-MAC) and cannot run on its own; an autonomous AP runs standalone Cisco IOS. Not a wireless router; it adds Wi-Fi access, it does not route between networks. |