CCNA Practice Exam Online
NetExam Pro · Cisco CCNA 200-301 · Full-length mock exams under real exam conditions
Sit the exam before you sit the exam
Reading about OSPF is one thing. Answering 100+ timed questions across all six CCNA domains is another. NetExam Pro's online practice exams replicate the real 200-301 experience: timed, mixed-domain, and scored — so exam day feels like a repeat, not a surprise.
- 370 exam-style questions written to match real CCNA 200-301 difficulty and wording
- Full-length mock exams under timed conditions, just like the real thing
- All six exam domains: Network Fundamentals, Network Access, IP Connectivity, IP Services, Security Fundamentals, Automation & Programmability
- Full explanations for every answer — learn from every mistake
- Weak-area tracking shows exactly which domains need more work
Not sure you're ready? Find out in 25 minutes.
Take the free 25-question mini-mock — timed, scored, with full explanations. No card required.
Take the free practice test →
Sample questions from the practice exam
These are real questions from the NetExam Pro bank. Try them, then check your answers:
Network Fundamentals
A router receives an Ethernet frame and must decide which interface to use to forward the enclosed packet toward its destination. At which OSI layer is this forwarding decision made?
- Layer 2 (Data Link)
- Layer 3 (Network)
- Layer 4 (Transport)
- Layer 1 (Physical)
Show answer & explanation
Answer: Layer 3 (Network)
Routers forward based on the destination IP address, which is a Layer 3 (Network layer) address. Layer 2 switches forward on MAC addresses, and Layer 1 deals only with bits on the wire. The Transport layer provides end-to-end delivery but plays no role in the router's forwarding decision.
IP Connectivity
A packet arrives at R1 destined for 10.10.5.77. Which route does R1 use to forward it?
- The static route via 10.10.0.2
- The directly connected route out GigabitEthernet0/0
- The OSPF route via 10.10.0.3
- The default route via 192.168.1.1
Show answer & explanation
Answer: The static route via 10.10.0.2
The router uses longest prefix match: 10.10.5.77 matches 10.10.5.0/24, 10.10.0.0/16 and 0.0.0.0/0, and the /24 is the longest (most specific) match, so the static route via 10.10.0.2 wins. Administrative distance only matters when two routes have the same prefix length, which is not the case here.
Security Fundamentals
In security terminology, what is a weakness in a system or device that could potentially be taken advantage of by an attacker?
- A threat
- A vulnerability
- An exploit
- A payload
Show answer & explanation
Answer: A vulnerability
A vulnerability is a weakness, such as an unpatched service or a misconfiguration, that could be exploited. A threat is the potential danger itself, an exploit is the technique or code used to take advantage of the weakness, and a payload is the malicious code delivered by the exploit.
How the online practice exams work
- Start with the free mini-mock — 25 questions, 25 minutes, instant scoring.
- Unlock full access for £29 one-time or £5/month — unlimited mock exams, topic drills, 20 CLI labs and 300 flashcards.
- Drill your weak domains with targeted topic practice until every area is exam-ready.
Why practice exams matter for the CCNA
The CCNA 200-301 isn't just a knowledge test — it's a time-management test. Around 100 questions in 120 minutes means just over a minute per question. Candidates who never practice under timed conditions routinely run out of time, even when they know the material. Full-length mock exams train the two skills the real exam demands: recalling knowledge fast, and moving on from hard questions without panicking.