CCNA 200-301 v1.1 // COVERAGE CONTROL

No objective left behind.

This is the curriculum contract. Every listed Cisco objective must have instruction, guided practice, knowledge checks, and exam-form coverage before the program is marked launch-ready.

6 domains 53 objective groups 100% required coverage

1.0

Network Fundamentals

20%

1.1Network components: routers, L2/L3 switches, NGFW/IPS, APs, controllers, endpoints, servers, and PoEExplainRequired

1.2Two-tier, three-tier, spine-leaf, WAN, SOHO, on-premises, and cloud architecturesExplainRequired

1.3Single-mode fiber, multimode fiber, copper, shared media, and point-to-point linksCompareRequired

1.4Interface and cable faults: collisions, errors, duplex mismatch, and speed mismatchVerifyRequired

1.5TCP and UDPCompareRequired

1.6IPv4 addressing and subnettingVerifyRequired

1.7Private IPv4 addressingExplainRequired

1.8IPv6 addressing and prefixesVerifyRequired

1.9IPv6 global/unique-local/link-local unicast, anycast, multicast, and modified EUI-64ExplainRequired

1.10Client IP parameters on Windows, macOS, and LinuxVerifyRequired

1.11Wireless channels, SSIDs, RF, and encryptionExplainRequired

1.12Server virtualization, containers, and VRFsExplainRequired

1.13MAC learning/aging, frame switching/flooding, and MAC tablesExplainRequired

2.0

Network Access

20%

2.1VLANs across switches: access/data/voice ports, default VLAN, and inter-VLAN connectivityConfigureRequired

2.2Trunks, 802.1Q, and native VLANConfigureRequired

2.3CDP and LLDPConfigureRequired

2.4Layer 2/Layer 3 EtherChannel using LACPConfigureRequired

2.5Rapid PVST+: root election, port roles/states, PortFast, root/loop guard, BPDU filter/guardInterpretRequired

2.6Cisco wireless architectures and AP modesExplainRequired

2.7AP, WLC, access/trunk, and LAG physical connectionsExplainRequired

2.8Telnet, SSH, HTTP/S, console, TACACS+/RADIUS, and cloud managementExplainRequired

2.9WLAN GUI: creation, security, QoS profiles, and advanced settingsInterpretRequired

3.0

IP Connectivity

25%

3.1Routing table codes, prefix/mask, next hop, administrative distance, metric, and gateway of last resortInterpretRequired

3.2Forwarding decisions: longest prefix, administrative distance, and metricExplainRequired

3.3IPv4/IPv6 default, network, host, and floating static routesConfigureRequired

3.4Single-area OSPFv2: adjacencies, point-to-point, broadcast DR/BDR, and router IDConfigureRequired

3.5First-hop redundancy protocolsExplainRequired

4.0

IP Services

10%

4.1Inside source NAT using static mappings and poolsConfigureRequired

4.2NTP client and serverConfigureRequired

4.3DHCP and DNS rolesExplainRequired

4.4SNMP operationsExplainRequired

4.5Syslog facilities and severity levelsInterpretRequired

4.6DHCP client and relayConfigureRequired

4.7QoS classification, marking, queuing, congestion, policing, and shapingExplainRequired

4.8Remote access using SSHConfigureRequired

4.9TFTP and FTP capabilitiesExplainRequired

5.0

Security Fundamentals

15%

5.1Threats, vulnerabilities, exploits, and mitigationsExplainRequired

5.2Awareness, training, and physical access controlsExplainRequired

5.3Local password device access controlConfigureRequired

5.4Password management, complexity, MFA, certificates, and biometricsExplainRequired

5.5IPsec remote-access and site-to-site VPNsExplainRequired

5.6Access control listsConfigureRequired

5.7DHCP snooping, Dynamic ARP Inspection, and port securityConfigureRequired

5.8Authentication, authorization, and accountingCompareRequired

5.9WPA, WPA2, and WPA3CompareRequired

5.10WLAN GUI using WPA2-PSKConfigureRequired

6.0

Automation and Programmability

10%

6.1Automation impact on network managementExplainRequired

6.2Traditional and controller-based networksCompareRequired

6.3SDN overlay, underlay, fabric, control/data planes, and northbound/southbound APIsExplainRequired

6.4Generative AI, predictive AI, and machine learning in operationsExplainRequired

6.5REST authentication, CRUD, HTTP verbs, and data encodingExplainRequired

6.6Ansible and Terraform capabilitiesRecognizeRequired

6.7JSON-encoded data componentsRecognizeRequired