How hard is the CCNA exam?
The CCNA is a moderately hard exam, and harder than most entry-level IT certifications, because it is broad and practical. It has no prerequisites and is designed as a starting point, but it expects you to subnet quickly, read device output, and know how switching, routing, network services and security fit together well enough to troubleshoot them. People with some networking experience are often ready in two to four months of steady study; complete beginners should plan on longer. Cisco does not publish a pass rate, a question count or a passing score, so treat any figure you see quoted for those with suspicion.
What makes the CCNA hard
Breadth is the first difficulty. The exam covers five domains: network infrastructure and connectivity, switching and network access, IP routing, network services and security, and AI and network operations and management. Each one is a subject in its own right, and the questions mix them, so a routing question can turn on a switching detail.
The second is that the exam is practical. Cisco describes the CCNA as a test of practical skills, and most of its objectives are worded as configure, verify, troubleshoot or interpret. Recognising a term is rarely enough; you need to read a configuration or a block of show-command output and work out what it does, or why traffic is not flowing.
The topics that trip people up
Most CCNA marks are lost on the following topics:
- Subnetting under time pressure. IPv4 subnet masks, ranges and summarisation, and IPv6 addressing, have to be quick and automatic, because they sit underneath questions on every domain.
- Spanning tree and VLANs. Which switch becomes root, which ports block, how trunks carry VLANs, and what EtherChannel changes.
- Routing decisions. How a router chooses between routes using prefix length, administrative distance and metric, and how single-area OSPF forms adjacencies and elects a designated router.
- Reading output. Interpreting show commands and configuration snippets correctly, including spotting the one line that explains the fault.
- The newer material. Network operations and automation topics, and evaluating output and recommendations from AI-based network assistants, which older study resources do not cover.
How long it takes to prepare
If you already work with networks, two to four months of regular study is a common range, spent mostly on the domains your job does not touch. With general IT experience but little networking, allow four to six months. Complete beginners should plan on six months or more, because the fundamentals (addressing, the OSI and TCP/IP models, how switches and routers forward traffic) need time to become second nature.
Whatever your background, build a small lab, physical or virtual, and configure what you read about. Cisco recommends practising in labs with routers and switches, and the habit of checking your work with show commands is exactly the skill the exam tests. The CCNA study plan guide linked below lays out the phases.
The exam is changing in February 2027
Cisco refreshes the CCNA on 3 February 2027. The exam code stays 200-301, version 2.0 adds a domain on AI and network operations, and the current exam stays live until then. If you sit before 3 February, check the current exam topics on Cisco Learning Network as well as any v2.0 material; if you sit after, make sure your study material covers the new domain.
Who finds it hardest
Newcomers to networking find it hardest, because the CCNA assumes nothing but builds quickly, and subnetting and routing logic take practice before they feel natural. Experienced engineers can struggle too, in a different way: years on one vendor or one part of the network leave gaps in the rest of the syllabus, and day-to-day habits sometimes differ from the answer the exam expects. Candidates who study only from videos, without a lab, often find the output-reading questions harder than expected.
How to tell you are ready
You should be able to subnet in your head or on scrap paper in well under a minute, explain why a given port is blocking in spanning tree, and say which route a router will choose and why. When you pass full-length timed mocks consistently across different question draws, and no domain is clearly behind, book the exam. If you do not pass, Cisco requires a short wait before you can retake an associate exam.
Plan your prep
Questions, answered
Sources
Exam facts in this guide come from the vendor's published exam guide. Vendors revise these — check the source for the current version before you book.