20 questions, split the way the real exam is split: 5 on IP Connectivity, 4 each on Network Fundamentals and Network Access, 3 on Security Fundamentals, 2 each on IP Services and Automation and Programmability. Every question comes with a full explanation of the right answer and why the others are wrong, plus a Cisco source link, not just a score at the end.
Is it a free download? Yes. Drop your email below and it lands in your inbox. No payment.
What’s Inside: 20 CCNA 200-301 Practice Test Questions by Domain
| Domain | Questions | Exam weight |
|---|---|---|
| IP Connectivity | 5 | 25% |
| Network Fundamentals | 4 | 20% |
| Network Access | 4 | 20% |
| Security Fundamentals | 3 | 15% |
| IP Services | 2 | 10% |
| Automation and Programmability | 2 | 10% |
- 20 questions, exam-weighted: the table above, matched to the real 200-301 v1.1 blueprint, not split evenly across topics
- Full explanation on every question: why the correct answer is correct, and a line on why each wrong option is wrong, not just a bolded letter
- A source link per question: Cisco documentation first, so you can go read the primary source instead of trusting a paragraph
- Scenario questions where the domain calls for it: topology diagrams and config snippets for HSRP, NAT, and VLAN questions, not just definition recall
- No login, no timer, no score tracking: it’s a PDF, open it, work through it, check your answers against the explanations whenever you want
Why the Domain Split Matters More Than the Question Count
Most free “CCNA practice tests” online split questions evenly across topics, or worse, load up on whichever domain was easiest to write questions for. That’s not what the exam does. IP Connectivity alone is 25% of your score, the single biggest domain, while Automation and Programmability is 10%. A test that gives both domains the same number of questions is training you for an exam that doesn’t exist.
This one mirrors the actual blueprint. If you get more questions wrong on IP Connectivity than on Automation here, that’s not bad luck, that’s the same ratio you’ll face on exam day, so it’s exactly where your review time should go.
The Kind of Mistake This Test Is Built to Catch
Take NAT. Plenty of candidates can recite that ip nat inside and ip nat outside exist. Fewer can look at a topology, work out which physical interface faces the LAN and which faces the internet, and apply the right keyword to each one without flipping them. Get it backwards and the config looks complete, the router doesn’t complain, and traffic still doesn’t pass. That gap, between knowing the commands and applying them to a specific diagram, is exactly what a multiple-choice topology question checks for, and exactly what a flashcard app can’t.
That’s why reading about it isn’t enough. The hands-on labs in the CCNA workbook have you configure NAT, ACLs and OSPF on real topologies, until the inside and outside keywords stop getting flipped.
Sample CCNA Practice Test Question: NAT Inside vs Outside
Here’s one question in the exact format every question in the PDF follows, so you can see what “full explanation plus source link” actually looks like before you download.
Question. R1 has two interfaces: GigabitEthernet0/0, connected to the ISP, and GigabitEthernet0/1, connected to the internal LAN. An administrator configures ip nat inside on Gi0/0 and ip nat outside on Gi0/1, then applies a standard PAT configuration. Internal hosts still cannot reach the internet, and show ip nat translations shows no entries. What is the most likely cause?
A) The NAT access list references the wrong internal subnet
B) The inside and outside interface roles are reversed
C) The router needs a static default route
D) PAT requires a dynamic routing protocol to function
Answer: B. The interface facing the LAN needs ip nat inside, and the interface facing the ISP needs ip nat outside. Here they’re swapped: Gi0/0 (the ISP-facing interface) got ip nat inside, and Gi0/1 (the LAN-facing interface) got ip nat outside. The router won’t throw an error for this, the config looks syntactically complete, but NAT only evaluates traffic in the direction the keywords describe, so nothing ever matches and the translation table stays empty.
Why the others are wrong: A would still produce translations for the subnets the ACL does match, not zero entries across the board. C affects routing to destinations beyond the directly connected ISP link, not whether NAT itself triggers. D is false, PAT works with static routes and needs no routing protocol at all.
Source: Cisco’s own NAT configuration guide covers the inside/outside interface role in detail.
Go deeper
Missed a question here? That’s the topic to lab next.
The CCNA Lab Workbook: 75 hands-on labs, 950 pages and full timed 200-301 practice test runs. Find the gap here, close it there.
Close the Gap With the Workbook →Who It’s For
- CCNA 200-301 candidates within a few weeks of exam day who want to check readiness domain by domain, not just get a single overall score
- Anyone who’s been through our Free CCNA 200-301 PDF study notes and wants to test what stuck
- Self-study learners who want scenario questions, not just flashcards, since the real exam leans on topology and config reading more than recall
- Anyone deciding between exam-readiness (this) and job-readiness. If it’s an interview coming up, not an exam, see the Free CCNA Interview Questions PDF instead
It’s 20 questions, not a full-length mock exam. The real test runs 100 to 120 questions over 120 minutes. Treat this as a domain-by-domain diagnostic, the section you score worst on is the section to go back and study, not a full dress rehearsal. For that, the CCNA Lab Workbook includes full 200-301 practice test runs alongside its 75 labs.
