Question 1mediummultiple choice
Full question →mediummultiple choiceObjective-mapped
A network team wants all devices to timestamp logs consistently so event correlation works across routers, switches, and firewalls. Which service should they configure first?
Answer choices
Why each option matters
Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.
A
Distractor review
DNS
DNS resolves names, not timestamps.
B
Distractor review
DHCP
DHCP assigns addressing information to clients.
C
Best answer
NTP
NTP synchronizes time across devices.
D
Distractor review
TFTP
TFTP transfers files and backups, not time.
Common exam trap
Common exam trap: answer the scenario, not the keyword
A common exam trap is selecting DHCP or DNS as the service to synchronize device clocks. DHCP only assigns IP addresses and related network parameters, while DNS resolves domain names to IP addresses; neither service manages time synchronization. Another tempting but incorrect choice is TFTP, which is used for transferring files such as configurations or IOS images, not for time services. Candidates might confuse the need for consistent network services with time synchronization, but only NTP provides the accurate, network-wide clock synchronization required for consistent log timestamps. Misunderstanding this leads to incorrect answers and potential operational issues in real networks.
Technical deep dive
How to think about this question
Network Time Protocol (NTP) is a protocol designed to synchronize the clocks of devices over packet-switched, variable-latency data networks. It ensures that all network devices, including routers, switches, and firewalls, maintain consistent and accurate time. This synchronization is critical for correlating logs, troubleshooting, and security auditing because timestamps must align across devices to reconstruct event sequences accurately. When configuring a network for consistent log timestamps, NTP is the foundational service to implement first. Devices use NTP to query a reliable time source, such as an authoritative NTP server or an external time reference, and adjust their internal clocks accordingly. Cisco devices support NTP client and server modes, allowing flexible deployment. Without NTP, devices rely on their internal clocks, which can drift and cause inconsistent timestamps, complicating event correlation. A common exam trap is confusing NTP with other network services like DHCP or DNS, which serve different purposes. DHCP assigns IP addresses, and DNS resolves domain names, neither of which affect time synchronization. TFTP is used for file transfers, not time services. In practical networks, failing to configure NTP leads to logs with mismatched timestamps, making troubleshooting and security incident analysis unreliable. Thus, NTP is essential for maintaining network-wide time consistency.
KKey Concepts to Remember
- NTP synchronizes time across all network devices to ensure consistent timestamps for accurate log correlation and troubleshooting.
- Cisco devices can be configured as NTP clients or servers to distribute and maintain synchronized time within a network.
- Without NTP, device clocks drift independently, causing inconsistent log timestamps that hinder event correlation and forensic analysis.
- DNS resolves hostnames to IP addresses and does not provide any time synchronization functionality.
- DHCP dynamically assigns IP addressing information but does not influence device time or timestamp accuracy.
- TFTP is a simple file transfer protocol used for configuration backups and image transfers, not for time synchronization.
- Accurate time synchronization via NTP is a foundational security practice to ensure reliable syslog and event logging across routers, switches, and firewalls.
- Network teams must prioritize NTP configuration before relying on log-based troubleshooting or security event correlation.
TExam Day Tips
- Watch for words such as best, first, most likely and least administrative effort.
- Review why wrong options are wrong, not only why the correct option is correct.
Related practice questions
Related 200-301 practice-question pages
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
CCNA subnetting practice questions
Practise IPv4 subnetting, CIDR, masks, host ranges and subnet selection.
CCNA OSPF practice questions
Practise OSPF neighbours, router IDs, metrics, areas and routing-table interpretation.
CCNA VLAN practice questions
Practise VLANs, access ports, trunks, allowed VLANs and switching scenarios.
CCNA STP practice questions
Practise spanning tree, root bridge election, port roles and STP troubleshooting.
CCNA EtherChannel practice questions
Practise LACP, PAgP, port-channel behaviour and bundle requirements.
CCNA ACL practice questions
Practise standard and extended ACLs, permit/deny logic and traffic filtering.
CCNA NAT practice questions
Practise static NAT, dynamic NAT, PAT and inside/outside address translation.
CCNA DHCP practice questions
Practise DHCP scopes, relay, leases and troubleshooting.
CCNA show ip route practice questions
Practise routing-table output, longest-prefix match, AD and route selection.
CCNA show interfaces trunk practice questions
Practise trunk verification and VLAN forwarding across switches.
CCNA wireless security practice questions
Practise WLAN security, authentication and wireless architecture concepts.
CCNA IPv6 practice questions
Practise IPv6 addressing, routes, neighbour discovery and common IPv6 exam traps.
More questions from this exam
Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.
Question 1
A router learns the same prefix from both OSPF and EIGRP. Which route is installed by default?
Question 2
A router shows this output: R1#show ip ospf neighbor Neighbor ID Pri State Dead Time Address Interface 10.1.1.2 1 FULL/DR 00:00:34 192.168.12.2 GigabitEthernet0/0 10.1.1.3 1 2WAY/DROTHER 00:00:39 192.168.12.3 GigabitEthernet0/0 Which statement is correct?
Question 3
What is the OSPF metric called?
Question 4
A non-root switch has two uplinks toward the root bridge. One path has a lower total STP cost than the other. What role will the lower-cost uplink have?
Question 5
A router interface applies this ACL inbound: 10 deny tcp any any eq 80 20 permit ip any any A user reports that web browsing to a server by IP address fails, but ping works. Which statement best explains the behavior?
Question 6
A router learns route 198.51.100.0/24 from OSPF with AD 110 and also has a static route to the same prefix configured with AD 150. Which route is installed?
FAQ
Questions learners often ask
What does this 200-301 question test?
NTP synchronizes time across all network devices to ensure consistent timestamps for accurate log correlation and troubleshooting.
What is the correct answer to this question?
The correct answer is: NTP — NTP provides consistent time across the infrastructure. Syslog carries log messages, but if device clocks are wrong, the log entries will still be hard to correlate. Accurate time is a foundational service for troubleshooting and forensics.
What should I do if I get this 200-301 question wrong?
Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.
Discussion
Loading comments…
Sign in to join the discussion.