CCNA Subnetting: How to Get Fast Enough for Exam Day

Plenty of CCNA candidates can subnet. Give them a quiet room and a sheet of paper and they will get the right network address every time. Then they sit the 200-301, the clock starts, the question is buried in a config scenario, and the whole thing evaporates. Slow-but-correct on paper is not the same skill as fast-and-correct under pressure.

This post is about closing that gap. No new theory. Just a repeatable method, the exact question shapes Cisco asks, a self-test, and a drill you can run in ten minutes a day until subnetting becomes muscle memory.

Why speed actually matters on the 200-301#

Subnetting sits inside the Network Fundamentals domain, which Cisco weights at 20% of the 200-301. That alone makes it worth getting right. But the bigger reason to be fast is structural.

The CCNA is a linear exam. You cannot go back to a flagged question. Once you move on, it is gone. So you cannot do the comfortable thing you do on most tests, where you skip the hard ones, clear the easy ones, then circle back with whatever time is left. On the CCNA, every slow question steals time you will never get back, and a subnetting question you fumble for four minutes is four minutes you needed for a multi-line OSPF or ACL scenario later.

The rough math: the exam runs about 120 minutes for roughly 100 questions, a little over a minute per question on average, and the long config and simulation items eat far more than a minute each. To stay on pace, your pure-arithmetic subnetting questions need to take 30 to 60 seconds, not three minutes. If subnetting is costing you minutes, it is a pacing problem that fails you elsewhere on the test. For a fuller picture of the exam's structure and difficulty, see is the Cisco CCNA exam hard.

The first thing you write on your scratch sheet#

When the exam starts and you get your laminated sheet (or whiteboard), spend your first minute writing two things at the top. Do this before you read a single question, while your hands are steady.

First, the powers of two, high to low:

Second, the masks you actually see on the exam, /25 through /30, with the last octet value and the block size:

That second table is the whole game. The block size is how far apart your subnets sit inside the last octet, and almost every question is just "which block does this address land in." Notice the two columns are reflections of each other: as the last-octet value climbs (128, 192, 224, 240, 248, 252), the block size halves (128, 64, 32, 16, 8, 4). Write both. Reading them off your own sheet is faster and safer than recomputing under pressure.

The magic number (block size in one subtraction)#

If you ever blank on the block size, you can rebuild it with one subtraction. The block size, sometimes called the magic number, is:

256 - (the mask value in the interesting octet)

For a /27, the mask is 255.255.255.224. So the block size is 256 - 224 = 32. The subnets in that last octet start at 0, 32, 64, 96, 128, 160, 192, 224. For a /29, the mask is 248, so 256 - 248 = 8, and subnets start at 0, 8, 16, 24, and so on.

That is the entire trick. Find the interesting octet (the one where the mask is not 0 or 255), subtract it from 256, and you have your block size. Everything below is just applying it.

The four question shapes Cisco asks#

Once you can find a block size in two seconds, the exam only asks subnetting four or five ways. Learn the shapes and you stop reading each question as a fresh puzzle.

Shape 1: network address#

Question: What is the network (subnet) address for the host 192.168.10.77/26?

Block size for /26 is 64. The boundaries in the last octet are 0, 64, 128, 192. Find the largest boundary that does not exceed 77. That is 64. So the network address is 192.168.10.64. You round the host's last octet down to the nearest block boundary.

Shape 2: broadcast address#

Question: What is the broadcast address for 192.168.10.64/26?

The broadcast is the last address in the block, which is one below the next boundary. The next boundary after 64 (block size 64) is 128, so the broadcast is 128 - 1 = 127. Broadcast is 192.168.10.127. Put another way, broadcast = network + block size - 1.

Shape 3: first and last usable host#

Question: Give the usable host range for 172.16.5.40/27.

Block size for /27 is 32, boundaries 0, 32, 64. Address 40 rounds down to the 32 block, so the network is 172.16.5.32 and the broadcast is 64 - 1 = 63. Usable hosts are everything strictly between network and broadcast. First usable is network + 1 (172.16.5.33) and last usable is broadcast - 1 (172.16.5.62). So the range is 172.16.5.33 to 172.16.5.62.

Shape 4: which subnet does host X live in#

Question: Which subnet does host 10.1.1.130/28 belong to?

This is just Shape 1 with extra words. Block size for /28 is 16. Boundaries climb 0, 16, 32 ... 112, 128, 144. The largest boundary not exceeding 130 is 128. The host lives in 10.1.1.128/28 (broadcast 143, usable 129 to 142).

Shape 5: how many subnets, how many hosts#

Question: If you subnet a /24 with a /28 mask, how many subnets and how many usable hosts per subnet?

Two separate counts, both powers of two:

• Hosts per subnet come from the host bits. A /28 leaves 32 - 28 = 4 host bits, so 2^4 - 2 = 14 usable hosts (subtract 2 for the network and broadcast addresses).
• Subnets come from the bits you borrowed. Going from /24 to /28 borrows 4 bits, so 2^4 = 16 subnets.

That is where your powers-of-two row earns its keep. You are just reading 2 to the power of a small number off the table.

A 10-question self-test#

No peeking. Write your powers-of-two and block-size tables first, then time yourself. Target 30 to 60 seconds each. Answers are at the bottom.

1. What is the broadcast address of 192.168.1.0/26?
2. Which subnet does 192.168.1.100/27 belong to (give the network address)?
3. What is the network address of 10.0.0.200/28?
4. Give the usable host range for 172.16.0.20/29.
5. How many usable hosts are in a single /26?
6. How many /27 subnets fit inside a single /24?
7. What is the broadcast address of 192.168.50.66/28?
8. What is the network address of 10.10.10.45/29?
9. What is the first usable host of the subnet containing 192.168.1.130/27?
10. VLSM: a point of sale segment needs to hold 60 hosts. What is the smallest (largest-numbered) mask that fits, and how many usable hosts does it give?

If a couple of those took you more than a minute, that is exactly the gap this post is about. It closes with reps, not with reading.

Want a structured ramp that folds this drill into the rest of the blueprint? The six-week CCNA study plan slots subnetting practice into the early weeks so it is automatic by the time you hit the harder routing material.

The daily drill that makes it stick#

Speed on subnetting is not understanding. It is reflex, and reflex comes from spaced repetition, not from one heroic study session. Here is the routine that works:

• Five problems a day. Every day. Not fifty once a week. Five, daily, is what builds the reflex.
• Mix the masks. One /26, one /27, one /28, one /29, and one curveball (a /30 or a VLSM "smallest mask that fits N hosts" question). Do not let yourself get comfortable with only one prefix length.
• Target 15 seconds per problem once the method clicks. Start at whatever pace you have today and shave time each week. Write the block size first, find the boundary, answer.
• Always rebuild your tables from scratch. Even on day 20. The point is that the exam-day version of you can produce them cold in sixty seconds.
• Generate fresh problems. The worst thing you can do is memorize ten answers. You need new addresses every day so you are practicing the method, not recalling a result.

Two weeks of this and the four question shapes stop feeling like math. They start feeling like reading. That is the state you want to walk in with.

If you are still deciding which networking cert to start with, the trade-offs are laid out in CompTIA Network+ vs CCNA. Both lean on exactly this subnetting skill, so the drill above is not wasted effort either way.

Self-test answers#

1. 192.168.1.63 (block 64: network .0, broadcast .63)
2. 192.168.1.96 (block 32: 96 is the boundary below 100; broadcast .127)
3. 10.0.0.192 (block 16: 192 is the boundary below 200; broadcast .207)
4. 172.16.0.17 to 172.16.0.22 (block 8: network .16, broadcast .23, usable .17 to .22)
5. 62 (2^(32-26) - 2 = 2^6 - 2 = 62)
6. 8 (borrowing 3 bits from /24 to /27: 2^3 = 8)
7. 192.168.50.79 (block 16: network .64, broadcast .79)
8. 10.10.10.40 (block 8: 40 is the boundary below 45; broadcast .47)
9. 192.168.1.129 (block 32: network .128, first usable .129)
10. /26 (255.255.255.192), 62 usable hosts. A /27 gives only 30 usable, too few; a /26 gives 2^6 - 2 = 62, the smallest mask that still fits 60.

If you got 8 or more in under a minute each, you are exam-ready on subnetting. If not, you know your homework: five a day until you do.

Ready to put this into practice? Start a free practice test on ExamCoachAI and drill subnetting questions against the real CCNA blueprint. The free tier gives you 10 questions a day, which happens to be exactly enough for two days of the routine above.