The New Cisco CCNA v2.0 Coming in 2027: What Actually Changed — and Why Hands-On Lab Practice Matters More Than Ever

Published by CertificationKits.com — Your Premiere and Original Source For Cisco Lab Equipment since 2000.

Don’t Believe the Hype (Or the Panic) (Or the Marketing)

Every time Cisco updates the CCNA, two camps emerge online. The first declares that the certification is being revolutionized and that everything you’ve studied is obsolete. The second insists nothing is really changing, and you can coast through on what you already know.

The truth, as usual, is more of a refresh than the exam being rebuilt from the ground up — with the 2027 CCNA v2.0 update, it’s actually closer to the “not much changed” end of that spectrum than what most “marketing” headlines suggest.

Here’s the honest breakdown: what’s new, what it means for your preparation, and why — despite the addition of AI topics — the single most important thing you can do to pass this exam and build a real career is still the same as it’s always been: get your hands on real equipment, complete labs, fail and fix things, learn and practice, practice, practice.

What the CCNA 200-301 v2.0 Looks Like

The exam code is still 200-301. The exam is still 120 minutes, approximately 100 questions, with a passing score around 825/1000. The six core domain areas remain the same, and their weightings are unchanged:

Nothing dramatic there. The framework that has defined the CCNA for years is still intact.

What did change is the content within some of those domains — and the biggest addition is the one getting the most attention.

The AI Addition: What It Is (and What It Isn’t)

The most-talked-about change to the CCNA is the addition of AI-related content. Cisco has added Generative AI, Machine Learning, and Cloud Network Management topics to the exam — and yes, they fall within that small 10% Automation and Programmability domain.

Let’s be direct about what this means in practice.

Look at the verbs Cisco uses in the official exam objectives for these topics: describe, explain, compare. Not configure, not implement, not troubleshoot. The AI content on the CCNA is conceptual and theoretical — you need to understand what these technologies are, how they apply to networking environments, and how AI-powered tools like Cisco Catalyst Center use machine learning for network analytics and automation.

We want to stress the difference in the language Cisco uses.  When Cisco uses describe, explain, compare –  it would mean theory based questions – multiple choice, drag and drop, etc.  What it does mean is that there will be NO performance based questions – configuration that would have a full blown, lab style question attached to it.  

What Cisco’s Verb Taxonomy Means:

You are not being asked to build an AI model. You are not being asked to write prompts or fine-tune language models. You are being asked to understand the role AI plays in modern network management — because that context is genuinely useful for a network engineer working in enterprise environments today.

That’s a reasonable thing to include in a foundational networking certification. But it’s important to have perspective: this is 10% of the exam, tucked inside a domain that already covered Python scripting, REST APIs, Ansible, and Puppet. The networking fundamentals that make up the other 90% are the same rigorous, hands-on material they’ve always been.

What Else Actually Changed

Beyond the AI content, the CCNA v2.0 blueprint brought a few other meaningful updates worth knowing:

Security got more practical. Security Fundamentals remains at 15%, but the update added more emphasis on security labs and applied security scenarios. You’re not just memorizing what an ACL is — you’re expected to understand and configure security controls in context. This aligns with the broader industry reality that security is no longer a separate specialty; it’s a baseline expectation for every network engineer.  We’ve seen this before in the old CCNA Security certification.  We’ll have labs built for these on deck once Cisco releases the full details.

Spanning Tree got deeper. Advanced STP features received expanded coverage, reflecting how critical loop prevention and redundancy design remain in real enterprise environments.  This means you’ll want to go with a three switch setup in your lab if you can squeeze it into your budget.  You will need three switches to fully implement redundant technologies such as STP.

WPA3 wireless security was added to reflect modern wireless deployment realities.  This will be theory based.

OSPF and open standards received updated alignment, including a cleaner focus on how open routing protocols fit into modern network designs.

What didn’t change: The core of the exam — IP addressing, subnetting, VLANs, trunking, routing protocols, switching fundamentals, NAT, DHCP, DNS, ACLs, VPN basics — is exactly where it’s always been. If you’ve been studying for the CCNA, your preparation is not wasted.

The Real Story: Why the CCNA Still Matters More in an Automated World

Here’s the argument you’ll hear from some corners of the industry: “AI and automation are handling the network configuration now. The CCNA is less relevant.”

This argument fundamentally misunderstands what the CCNA teaches — and what automation actually does.

Automation tools don’t replace networking knowledge. They execute networking knowledge at scale. When Cisco Catalyst Center pushes a configuration across 500 switches, it’s translating a human engineer’s intent into IOS commands. When an AI-powered analytics platform flags an anomaly, it’s surfacing something for a human engineer to investigate and resolve. The tool does the work faster — but the engineer still needs to know whether the tool did it right.

Consider what the security additions actually represent. Features that used to require careful, deliberate manual configuration — access control policies, encrypted management sessions, hardened default states — are increasingly handled automatically by the OS and management platforms. IOS XE 26, for example, boots in a hardened state by default. Catalyst Center can push Zero Trust policies across a campus network without an engineer having to touch a single CLI prompt.

That sounds like it reduces the need for CCNA knowledge. It doesn’t. It raises the stakes for having it.

When something breaks in an automated security policy, the engineer who passed the CCNA by memorizing flashcards is helpless. The engineer who built labs, debugged ACLs that blocked the wrong traffic, and watched authentication fail and succeed in real time — that engineer can look at what the automation produced and know whether it’s correct.

The CCNA teaches you to think like a network. Automation tools think like a network only as well as the people who built and configured them. Someone has to be the check and balance.

The Lab Problem: Why Simulators Aren’t Enough

Here’s where we need to talk about preparation strategy — and be honest about what works.

The 2027 CCNA update added security labs and more applied, hands-on scenarios. The exam has always included performance-based questions (PBQs) — tasks where you actually configure a device in a simulated environment, and the exam checks whether you got it right. These questions are where candidates who studied only from books and videos consistently struggle.

There are two ways to prepare for these:

Option 1: Packet Tracer or simulators. Free, convenient, and fine for learning concepts. But simulators approximate real IOS behavior — they don’t replicate it. Even the simulated equipment is limited and may not even represent actual real world equipment. The timing and error messages are different. The feel of navigating a real CLI under pressure is different. And critically, the troubleshooting experience — where you’ve broken something and have to figure out why — is fundamentally different on real gear.

Option 2: Real Cisco hardware. An actual router or switch running IOS gives you the identical experience you’ll encounter in production environments. The commands work the same way. The debug output is real. The mistakes you make are the same mistakes you’d make on the job — and the lessons stick because you felt the consequences.

The CCNA 2027 update, with its emphasis on practical security configuration and applied scenarios, makes the case for Option 2 stronger than ever. You can read about ACLs. You can watch someone configure them. Or you can build a lab, misconfigure one, watch it block the wrong traffic, figure out why, and fix it. The third experience is the one that makes you dangerous in a good way. It is also great to be able to tell a prospective employer that you made several configuration mistakes in your home lab, troubleshooted them, and corrected them in your own real-world equipment learning environment.

What to Focus On for CCNA v2.0

Based on what’s actually changed, here’s a practical study approach:

Don’t change your core preparation. IP addressing, subnetting, VLANs, routing protocols, switching — these are still 80%+ of what you need to know. If you’re already studying these, stay the course.

Add the AI conceptual layer. Understand what Generative AI, ML, and cloud network management mean in a networking context. Know how Cisco Catalyst Center uses AI for network analytics. Understand intent-based networking at a conceptual level. This doesn’t require deep technical study — it requires reading current Cisco documentation and understanding the landscape.  We will create training materials for these once Cisco fully outlines the new topics.

Get hands-on with security configs. The expanded security labs make ACLs, port security, AAA, and encrypted management sessions more important to practice, not just study. Build them in a lab. Break them. Fix them.

Practice performance-based tasks under time pressure. The clock is real in the exam. Knowing the command and executing it efficiently under pressure are different skills. Only repetition on real gear builds the second one.  Learning to subnet quickly and manually is also a massive time saver that will allow you to focus more attention on the more complicated lab style questions. (Our subnetting eWorkbook is great for this and included with all labs)

Your CCNA Is a Foundation, Not a Destination

One more thing worth saying clearly: the CCNA is an entry point, not an endpoint. The 2027 version of the exam, with its AI awareness additions, is Cisco’s way of making sure new engineers understand the environment they’re entering — one where AI tools, automation platforms, and self-configuring security systems are part of everyday network operations.

That context matters. But the engineers who will thrive in that environment aren’t the ones who know how to describe what Generative AI is. They’re the ones who understand the network deeply enough to work effectively alongside automated tools — to configure them correctly, verify their output, troubleshoot failures, and adapt when the automation doesn’t account for something the real network does.

That knowledge comes from fundamentals. It comes from studying and practicing. It comes from sitting in front of real Cisco hardware, building real configurations, and even learning what happens when things don’t go as the documentation says they will.

All Labs Purchased Before the Update Will Come With a Free Upgrade to the Revised CCNA Training Materials When We Update Them Next Year.

Remember, there isn’t a massive change coming.  So, keep studying or start studying the current training materials.  You’ll be covering everything you need to know, and if you aren’t ready for the exam before the change, you’ll only have to bridge the gap with a handful of new, added information.  We’ll have that covered in the next revision of the training materials coming soon after Cisco posts the official deep breakdown.

Current Hardware Recommendations Will Stay the Same

The new content being added in 2027 will not require different hardware from the current recommendations.  There are no additional configuration type topics beyond the scope or capabilities of our current recommendations.  So, you can feel confident that you will be ready to go, real hardware style!

Build Your CCNA Lab at CertificationKits.com

At CertificationKits.Com, we’ve been helping networking professionals prepare for Cisco certifications with real lab equipment since 2000. Our CCNA lab kits are designed to give you hands-on experience with the concepts the 200-301 exam tests—routing, switching, security configurations, everything in between —and even the skills you need for the field beyond the exam.

The CCNA v2.0 update didn’t change what makes a great network engineer. It just updated the checklist. The foundation is the same as it’s always been.

Build the lab. Do the work. Hang that certification on the wall!

CertificationKits.com has been helping students, educational institutions, and networking professionals build real Cisco lab experiences since 2000. The CCNA 200-301 exam is a registered trademark of Cisco Systems, Inc. All trademarks are the property of their respective owners.

Sales@CertificationKits.com – 331.285.7689