CCNA Skills Measured: What You Need to Know

Network Fundamentals measures whether you understand how networks are built and described. Study architectures such as two-tier, three-tier, spine-leaf, WAN, cloud, and controller-based models. Know common interface and cabling concepts, IPv4 and IPv6 addressing, wireless principles, switching behavior, and basic troubleshooting indicators such as duplex or speed mismatch. This domain is the base layer for the rest of the exam because later routing, access, and services questions assume you can read a network scenario accurately.

Network Access focuses on the switching and wireless layer that connects users and endpoints. Expect objectives around VLANs, access ports, trunk ports, native VLANs, EtherChannel, STP concepts, Cisco Discovery Protocol, LLDP, wireless access points, WLAN components, and secure management access. The practical skill is recognizing how local network segmentation and Layer 2 behavior affect connectivity before traffic ever reaches a routed path.

IP Connectivity is the largest CCNA domain. It tests route selection, routing tables, longest prefix match, static routes, default routes, OSPF, first-hop redundancy, and how routers move packets between networks. Study administrative distance, next-hop behavior, floating static routes, and OSPF neighbor concepts. A strong answer usually follows the forwarding path and explains why one route, interface, or next hop is preferred over another.

IP Services covers the network services that make user connectivity usable and manageable. Study NAT, DHCP, DNS, NTP, SNMP, Syslog, QoS, SSH, and TFTP/FTP concepts where they appear in the official objectives. These topics often show up as practical administration or troubleshooting scenarios: a host cannot obtain an address, time stamps are wrong, remote management must be secured, or traffic needs classification.

Security Fundamentals measures baseline network defense knowledge. Study device access control, local passwords, SSH, AAA, RADIUS, TACACS+, ACL behavior, wireless security, VPN concepts, port security, DHCP Snooping, Dynamic ARP Inspection, and basic threat categories. Security-domain questions usually expect a practical distinction, such as whether the problem calls for authentication, authorization, traffic filtering, endpoint protection, or management-plane security.

Automation and Programmability introduces the language of modern network operations. Study controller-based networking, overlay and underlay concepts, REST APIs, HTTP verbs, JSON structure, configuration management, and automation tools at the level defined by Cisco’s objectives. The exam does not require deep software engineering, but it does expect you to understand why APIs, controllers, and structured data help manage networks consistently.