640-801: The New CCNA Exam Andy Barkl walks you through the latest incarnation of Cisco's Certified Network Associate exam.
by Andy Barkl
August 2003
Once again, Cisco Systems has updated their popular entry-level
certification exam, the Cisco Certified Network Associate (CCNA) exam. I recently took
the updated exam and received 56 questions in 90 minutes with a passing score
of 849. There were three router simulator questions, many multiple choice questions
and a few drag-and-drop questions.
The exam engine itself is slow when it comes to switching between the simulator-based
questions and the standard multiple-choice questions -- patience is a must!
For most simulator-based questions, you are presented with a network scenario,
required to configure or troubleshoot one or more routers, save and verify your
work. The simulator behaves very much like the real thing and includes limited
support for abbreviated, editing and help commands.
Having taken the 407, 507 and 607 versions, I can say that while the exam objectives
haven't changed significantly with this latest update, much of the content is
new and improved (minus the extensive OSI topics). New networking topics include
DDR and configuring register settings. You'll want to download the official
exam objectives from Cisco's Web site here.
With 640-801, the objective categories have been simplified into four areas:
Planning & Designing, Implementation & Operation, Troubleshooting and
Technology. Following is an overview of each section plus advice on where to
focus your studies.
Objective Area #1: Planning & Designing
Under this general heading you'll find these topics listed:
Design a simple LAN using Cisco technology.
Design an IP addressing scheme to meet design requirements.
Select an appropriate routing protocol based on user requirements
Design a simple internetwork using Cisco technology.
Develop an access list to meet user specifications.
Choose WAN services to meet customer requirements.
-- advertisement (story continued below) --
Whoa! They use the word design quite a few times here. Even so, compared to
the new Cisco Certified Design Administrator (CCDA) exam (reviewed here),
the design questions pale in comparison.
Key to this section is knowing how to plan, assign, configure, subnet and troubleshoot
IP addresses. You must have a thorough understanding of the classes of IP addresses,
their starting and ending ranges, default subnet masks, the minus 2 rule, how
to figure and identify the first host, last host and broadcast address of any
subnet, along with calculating the mask for a required number of networks or
hosts or both. You really need to have subnetting down cold before walking into
the exam booth or you could find yourself short on time to finish all the questions!
If you don't feel comfortable with subnetting, start practicing now. A popular
resource for learning to subnet is the aptly named LearnToSubnet.com.
Here's a technique used to help calculate the subnet: 256 minus the subnet
mask. For example, the address 192.168.0.22 255.255.255.240 is on the 192.168.0.16
subnet with subnets of 16, 32, 48, and so on. The first assignable address is
17, and the broadcast is 31.
Tip: Know how to convert binary to decimal and hex.
The other LAN design topics in this objective area deal with defining network
congestion problems and how to prevent them. You should know the features and
benefits of full-duplex Ethernet, as well as the limitations. Data can travel
at 10Mbps or 100Mbps and with full-duplex transmission, data can travel simultaneously
in both directions. However, there are distance limitations of 100 meters, cabling
type restrictions of category 5, and the need for network switches.
RIP version 1 and IGRP are classful distance-vector routing protocols. RIP
uses the metric hop count; IGRP uses a combination of bandwidth and delay. One
method used to prevent loops with distance-vector routing protocols is split-horizon.
Spilt-horizon states that a learned route will never be sent back in the direction
in which it was learned.
Tip: RIP, RIP version 2 and IGRP have many methods of prevent routing
loops: split-horizon, poison-reverse, maximum hop count and hold-down timers.
OSPF is a link state-based routing protocol, EIGRP is a hybrid of both distance vector and link state, and they support classless routing. EIGRP also supports the IP, IPX and Appletalk protocols, with a separate process and table for each.p>
A bigger part of the CCNA exam is usually access lists. They don't appear much
later in your Cisco certification studies, so Cisco hits you hard with them
on the CCNA. Be very familiar with the structure, operation, verification and
modification of both standard and extended access lists. Know the ranges used
for IP standard and extended lists (1-99 for standard IP, 101-199 for extended
IP). Know the rules for applying access lists: one list per interface, per direction,
per protocol!
Access lists can be confusing. Your best bet is to review the Cisco white paper
here
if you feel you need to brush up.
In many instances, CCNAs are called upon to recommend WAN link connection types,
so know your primary WAN protocols and preferred use. Frame relay is a packet-switching
protocol; it is widely supported and readily available. Most of the ISDN theory-based
questions are gone from this version of the exam, but they have been replaced
by implementation and configuration questions (I'll address these later in this
review). Don't forget about PPP as a supporting WAN protocol, as well as its
authentication methods -- PAP uses clear-text, while CHAP supports many encrypted
forms of network authentication without sending the password.
Objective Area #2: Implementation & Operations
This area covers the following topics:
Configure routing protocols given user requirements.
Configure IP addresses, subnet masks, and gateway addresses on routers and
hosts.
Configure a router for additional administrative functionality.
Configure a switch with VLANS and inter-switch communication.
Implement a LAN.
Customize a switch configuration to meet specified network requirements.
Manage system image and device configuration files.
Perform an initial configuration on a router.
Perform an initial configuration on a switch.
Implement access lists.
Implement simple WAN protocols.
Routers can be configured for network routes and discovery via routing protocols.
Manually configured, connected and static routes are usually preferred since
they have some of the lowest administrative distances. For the exam, remember
when viewing the routing table of a Cisco router, you will see two values in
brackets -- such as [100/2] -- which indicates the administrative distance and
hop count or other metric. Also indicated next to each route in the table is
whether it is a connected route (C), static route (S), or was learned dynamically
via a routing protocol (with designations such as R for RIP and I for IGRP).
RIP and IGRP are fairly simple to configure. For RIP the IOS command would
be router rip followed
by the network statement. For IGRP it is router
igrp 10, which includes an autonomous system number, followed by
a network statement.
Tip: When an interface is configured for passive routing, the interface
will accept but not advertise network routes.
Once again, this section of the exam relies heavily on your knowledge of subnetting.
You may be presented with a simple network diagram consisting of subnets, routers
and hosts, and be asked to identify the proper assignment of IP addresses. Read
each and every address carefully as the answer may not always be obvious!
Every CCNA should understand what happens within a Cisco switch and the bridging
functions of a network. You'll want to be familiar with STP (Spanning Tree Protocol),
VLANs, and the switching methods cut-through and store-and-forward. Cut-through
switching is a preferred method when media collisions are low and latency at
the switch cannot be tolerated. Store-and-forward, on the other hand, is needed
when media collisions are high and a higher latency is acceptable.
VLANs have become a popular implementation method to connect network clients
and their preferred servers logically, through the switched networks, without
having to connect them to the same physical switch. The network administrator
generally configures vLANs within the switches. They offer levels of security
and control plus limit network broadcast traffic, much like routers.
Referring back to the Cisco white paper mentioned earlier (link above), using
extended access lists you can deny telnet traffic to a router's interface; for
example, ip access-list 101 deny
tcp any any eq telnet (don't forget to also add a permit statement
such as ip access-list 101 permit
ip any any or all traffic will be denied). You would then apply the
access list to the filtered interface: ip
access-group 101 in.
There are many things to configure to prepare an interface for a frame relay
connection, and you should be intimately familiar with all of them. Memorize
the different frame relay, DLCI configurations and LMI types. Frame relay encapsulation
types are cisco and ietf with cisco being the default. DLCIs are locally significant
and only represent the connection identifier from the router to the frame switch.
LMI types are ansi, cisco and q933a. When there is a mismatch between two routers,
communication will not take place.
ISDN and DDR configuration is new to the CCNA list of topics--not ISDN as a
protocol, but as a complete understanding of how to configure ISDN and dial-on-demand
routing (DDR). To begin with, here is a great reference for study: http://www.cisco.com/warp/public/793/access_dial/ddr_dialer_profile.html.
Be sure you understand the components and commands of a dialer profile and
the order of configuration:
Objective Area #3: Troubleshooting
For this objective area, Cisco expects you to know how to:
Utilize the OSI model as a guide for systematic network troubleshooting.
Perform LAN and VLAN troubleshooting.
Troubleshoot routing protocols.
Troubleshoot IP addressing and host configuration.
Troubleshoot a device as part of a working network.
Troubleshoot an access list.
Perform simple WAN troubleshooting.
The OSI model is a no-brainer: How could any network guru possible get through
an average day without knowing the OSI model? If you're not familiar with it
yet, the OSI 7-layer reference model from the top is Application, Presentation,
Session, Transport, Network, Data Link and Physical layers. The numbering starts
from the bottom (physical layer is number 1). Knowing the layer names and their
order is crucial. Some people like to use an anagram to help. One of my favorites
is (from the bottom up) Please Do Not Throw Sausage Pizza Away.
Knowing where the most common network devices operate in the OSI model is also
a must. At the physical layer there is the cabling of the network, repeaters,
and hubs. The data link layer includes bridges and switches, and routers operate
at the network layer.
Tip: A switch is a multi-port bridge.
As a CCNA, you need to understand protocol operation and at which layer each
function. This exam focuses only on TCP/IP. From the physical layer up, there
are protocols, such as V.35 and RS-232, that define the physical connection
and signaling on the wire. At the data link layer protocols such as Ethernet,
token-ring and FDDI are responsible for defining the network topology and data
communication standards .
At the network layer, there is IP, ICMP ARP. At the transport layer, there
is TCP and UDP. UDP is fast and efficient but does not provide guaranteed delivery
and retransmission like TCP. TCP is more commonly used at this layer by many
upper-layer protocols and applications. TCP uses windowing, buffering and acknowledgments
for flow control. Skipping over the session and presentation layers for brevity,
the application layer contains Telnet, FTP, TFTP, SMTP, and many other application-type
protocols.
Troubleshooting IP addresses, subnet masks, and gateways requires knowledge
of subnetting. You may be presented with a simple network diagram consisting
of subnets, routers and hosts, and be asked to identify the incorrect assignment
of IP addresses. You might also find a question relating to configuration of
access lists. Remember the rules from above as well as the following: If you
created an access list with various deny statements and no permit, you would
prohibit the routing of all traffic on the applied interface. Remember there
is the explicit deny at the end of each access list.
Tip: Ping,
traceroute and
show ip route can be used to troubleshoot connectivity problems.
Understanding how to perform the password recovery procedure on a Cisco router
is must-have knowledge for the CCNA. Remember that on the 2500 series routers,
the command config-register 0x2102
returns the bits from 0x2142, which were changed in the rommon mode using the
command o/r for password
recovery.
Objective Area #4: Technology
Under this final heading you'll find these topics listed:
Describe network communications using layered models.
Describe the Spanning Tree process.
Compare and contrast key characteristics of LAN environments.
Evaluate the characteristics of routing protocols.
Evaluate TCP/IP communication process and its associated protocols.
Describe the components of network devices.
Evaluate rules for packet control.
Evaluate key characteristics of WANs.
Spanning tree protocol (STP) is enabled by default on all Cisco switches. Along
with STA (Spanning Tree Algorithm), it avoids switched network loops. STP allows
exchange of bridge protocol data units (BPDUs) by the switches to choose a Root
bridge (switch, in this case) and determine where the network loops are present.
Then the STA requires switches responsible for creating loops place their redundant
port or ports in a blocked state preventing network loops. There are five port
states possible: blocking, listening, learning, forwarding and disabled.
Tip: The listening state is where the port determines whether or
not it should participate in the forwarding of frames. The learning state
is when the port learns MAC addresses that are added to the forwarding database.
Remember, routers divide networks into different broadcast domains for controlling
client and server network broadcast traffic. Switches and bridges create or
divide collision domains.
HDLC is the default Cisco router serial interface encapsulation type and is
only understood by other Cisco routers using Cisco's HDLC.
Tip: ISDN supports a faster call setup than traditional analog
modems.
PPP is an authentication method; using chap is preferred since the password
is never sent across the wire. The configuration command is username username
password password, where username is the hostname of the peer router. Note:
passwords must be identical at both ends and the hostname and password are case
sensitive.
Preparation Tips
When deciding which study guides will fully prepare you for the new CCNA 640-801
exam, keep in mind that while the objectives have been reorganized, the knowledge
tested really hasn't changed much from the previous CCNA exam 640-607. Therefore,
if you have already started your studying, continue on with your existing 607
study guides and materials. You should also pickup a router simulator or a real
router to prepare for the router simulator questions. Cisco uses a router simulator
in their exams developed by the Cisco Networking Academy program You can view
and even demo a copy of the official Cisco exam simulator here.
Many third-party offerings are very similar to this product.
That wraps it up for the version of the CCNA exam. Remember, if you still feel
overwhelmed, you can now obtain this certification through a process of two
exams by passing both the INTRO (640-821) and ICND (640-811) exams (both
of which we'll review on this site shortly). Good luck!
Have you taken this exam? Rate it below!
Andy Barkl, CCNP, CCDP, CISSP, MCT, MCSE:Security, MCSA:Security, A+, CTT+,
i-Net+, Network+, Security+, Server+, CNA, has over 19 years of experience in
the IT field. He's the owner of MCT & Associates LLC, a technical training
and consulting firm in Phoenix, Arizona. He spends much of his time in the classroom
but has also been responsible for many Microsoft Windows 2000, Exchange 2000,
and Cisco networking deployments for many clients across Arizona. He's also
the online editor for MCPMag.com, TCPMag.com, CertCities.com, and a contributing
author and editor for Sybex and Cisco Press. He hosts a multitude of exam preparation
chats monthly on MCPmag.com, TCPmag.com and CertCities.com. You can reach him
at andy.barkl@wetrainit.com.
Current TCPmag.com
user comments for "640-801: The New CCNA Exam"
12/18/03 -
Ronny
from UG
says:
Well the only diffcult thing is when you didn't read.Those guys in the academy shouldn't be let down just get yo stuff.But I like the document.
12/18/03 -
maxy
from UK
says:
Passed this exam today. I did 3 days solid revision beforehand. Its a difficult exam, finished with 2secs left. All you need to pass the exam is Todd Lammle's excellent CCNA 4th Ed book. It has all the information required for the exam and a CD with loads of excellent practice exams.
12/18/03 -
Dick Gooris
from Hilversum, The Netherlands
says:
Andy Barkl; many thanks for the summarization of the 640-801 exam (to keep in terms of ccna). I used the Osborne 640-801 Study Guide documentation to get the background of all the material. All the 17 Chapters are easy to read without to much overhead as what I found in other books. In addition the chapters are filled with Exam-Watch's. This is very useful to quickly go through the chapters and refresh the information you learned. Usually when I am at chapter 6 i begin to forget chapter 1 and so forth, so this helps. The exam I too at 16 December 2003 was really focussing on subnet calculations. I was a bit surprised that after having about 8 similar subnet questions the test engine decided to again ask some questions in that area. I expected questions about vlsm and nat nat/pat, but I did not see them. Also a bit surpised about the significant amount of simulations. I got 5 simulations. I got my speed in this material by using the RouterSim simulator. This is a nice toy to make all sort of networks to play with. Really sufficient to solve these questions mainly dealing with RIPv1 and the proper setting of the classfull network setting. Using the material of Andy as described on this webpage I was able to again read the focus points he mentioned and make sure I did not forget any part of CCNA 640-801. I rated the exam to difficult given that you are not sure you really prepared well when just reading the books. Nevertheless i got 914 points.
Regards, - Dick Gooris
12/18/03 -
Kristy
from United States
says:
Took 801 today. I used the Odem books to study. Exam questions were twice as hard and trickier than the test ones with the book! Not at all what I was expecting. Subnetting and Access lists out the wazoo! Also have to know your PPP, WAN and HDLC stuff down to the picayune stuff like reference points. I got a 730 and will be taking this again in a few weeks once I memorize all the possible subnets there are...just kidding. Ran out of time, too. Be careful of your time if you're going to take it!
12/18/03 -
sarasvathi
from singapore
says:
hi, i am about to sit for the exam, jus need some tips:) there are alot more qns on subnetting and access lists?
Dick Gooris,whats ur best advice for anyone taking the exam for the 1st time:)
12/20/03 -
Dick Gooris
from Hilversum, The Netherlands
says:
On respond to Sarasvathi (12/18/03): Subnetting is a cantral part of the exam. These tests are about to distinguish broadcasts and networks from hosts as well as to see whether a given ip address belongs to a certain subnet. Please practise this a lot. I am quite familiar with converting decimal to binary by going via the hexadecimal convertion. I can read hex and see the bits in front of me, that helps a lot and saves time. Then you write up the bits and put it underneath the subnet. Then you will see if there are bits in the subnet part of the mask. I never followed the way to devide decimal values by values of the power of 2, to error prone to me. To help converting to hex, the table of 16 is very useful, so I wrote down this table before I even touched the keyboard of the exam computer, so this did not eat any minutes from the exam time. You get a few questions about access-lists indeed. just practise and understand where you preferably put a standard, and where an extended list in your network. I read somewhere that the exam is following your answers, and acts on bad answers. If wrong, another question may follow on the same subject. If ok, you get a new subject. This ensures that when taking the CCNA, you really cover all the different areas. I am of course not sure if that is true, but I think its a fair approach. So in fact follow the guidelines of Andy and you are about to pass the first time, given that you practise a lot with subnetting, access-lists, and simulations. Hope this helps. Best regards and success indeed, - Dick Gooris.
12/22/03 -
Kevin
says:
I prepared myself for the 640-801 exam by using the 2 new books (Intro and INCD) and going through a self paced e course from Global Knowledge. I took the 640-801 exam twice now and did not pass either time. I find the test using alot of base knowledge (like OSI model structure or protocols) to be used to solve another question. In other words you have to know one in order to solve the other. Next I think their was way to much emphisis put on subnetting, when in the real world situation we would use an IP calculator. On the test you have to memorize this knowledge or work it out long hand. I thought the same for hex conversion, thats what charts and calculators are used for. The test is hard and I feel if you can not configure a router or a switch, subnet in your head, and know acess lists, this test is impossible to pass. I feel that Cisco got tired of the go to a bootcamp situation for 5 day and take and pass the exam. Also I fell Cisco was tired of complaint comming back to them about people going through a bootcamp, or reading a brain dump, pass the test and were unable to configure a router. This test will test your abliity to configure a switch and a router. In the tests I took I had 3 simulations each (1 switch,2 routers). I also feel that this test is harder than the previous version. You will have to know your stuff to pass. I plan to go through a instructor led course before I go back. The days of just picking up the book,going through a bootcamp, or getting a brain dump are gone. I been their and they did not help me pass.
12/22/03 -
mike
from NJ
says:
I just took the test this weekend and passed. got about 890 out of 1000. 849 is the cut off score. There were three router sims, 1.configure 3 routers, ip's , subnets, and add a routing protocol. Then, simply add router rip to an network that was already configured and then the hard one, access lists. It was actually pretty easy if you know a basic access list. the tricky part was to know which ip address you need and subnet mask. The multiple choice I though was the hard part, there were sneaky questions.
good luck!
12/23/03 -
ahmed
from belgium
says:
Passed my CCNA 640-801 with good score I did not expect when I have finished the test - 938/1000.
As everybody may know, got 3 sims:
rip config, rip troubleshooting and acl to block all telnet sessions on a router. you have to know very well subnetting - 20 % of the exam. know also where to put standard and where to put extended list... config-reg after password recovery... difference between 3 switching methods...
I hope this will help you as this site helped me with members comments. Good luck and be cool.
Ahmed
12/24/03 -
PARTHO
from JAMSHEDPUR
says:
Dear Sir
MARY CHRISMAS,
I WANT TO KNOW THAT, WHAT IS THE EXAM PRICE FOR CCNA(640-801)IN INDIA.BCO"Z LOT'S OF CONFUSION ABOUT EXAM FEE HARE IN JAMSHEDPUR.
Partho
12/26/03 -
cp
says:
very nice effort
12/28/03 -
rizwan ahmad
from delhi,india
says:
dear sir
can u send best notes of ccna(640-801)
and question paper on my mail add.
12/28/03 -
rizwan ahmad
from india
says:
pls send me best notes of ccna(640-801)
and model of question paper
12/28/03 -
Anonymous
says:
I took the 640-801 test last week and failed with a 749, gonna retake tomorrow and hopefully make it. I had my CCNA back in 2000 and up for re-newal. This exam is alot more difficult that the older version bvecause they added alot more info into it and the fact that you have 3 simulations and I had 53 other questions, there really isnt enough time to complete the exam unless you know everything about:
Switching
VLANS
RIP
EIGRP
OSI Model
DDR
ISDN
Serial config and troubleshooting
need to know the Catalyst 1900
I will post my score tomorrow, wish me luck..
12/29/03 -
Tom
from Ohio
says:
I took the CCNA Boot Camp in Summer 03 and did not pass the test given on that Friday. Read CCNA Book and other preparation material afterwards, which helped a great deal (especially IP subnetting). In December 03 took the CCNA 810 with a score of 815. I believe my downfall is in the simulator and especially the access list sim (which I passed over) Plan to spend time studying and preparing for access lists and better prepared overall for the simulators. Anyone taking the test should have access to Simulators such as are available with the Cisco Press. The Cisco Press Simulator is very similiar to the test simulator. Also be advised that when you receive confirmation for your test date they will typically provide an appointment length of 110 minutes. 15 to 20 minutes are used to fill out surveys that do not count against you in the test. The test is 90 minutes, therefore you can divide outthe 90 minutes to baseline the time you may want to spend on each question, naturally give more time to the siumlators.
Any suggestions for overall simulator preparation are welcome (I really feel the pressure during the sims).
If you can pass this test, you know your stuff.
12/29/03 -
Puneet Varma
from Maryland
says:
Good article. I have a CCNA certification book exam 640-507. Do you think I should look into buying the updated version of the book? By the way, I have taken a CCNA class a while back but now I need to review alot of stuff before I can say confidently say that I can take the exam. I don't have experience in Networking at all. What do you suggest?
12/29/03 -
Anonymous
says:
Well, I took the test today and received a score of 840. Thats only 9 points from passing :(. I guess better luck next time, which is going to be tomorrow.. I'll keep everyone posted. The one part I did not do well in was Technology. Guess I'll be studying up all night again.. Wish me luck..
PS, Great study site for this exam is here which was written for the 640-801 exam....
http://www.celticrover.com/tig/ccna/ccnareviews.asp
12/30/03 -
Chris Kilian
from United Kigdom
says:
What switch model and router model is the new exam based on. Excellent articel by the way. Thanks to the author you have helped me allot