CCNA Network Services and Security Practice Question
An administrator sees high interface utilization through SNMP graphs but wants to identify which conversations are responsible. Which addition best closes that visibility gap?
⚠ Common exam trap
Avoid assuming all network monitoring tools provide the same level of detail. Understand the specific capabilities of each tool.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
NetFlow
NetFlow provides conversation-level visibility into which hosts and applications are consuming bandwidth, closing the gap left by SNMP's interface totals. A new DHCP scope assigns IP addresses but offers no traffic insight. An STP priority manages loop-free topology and does not affect monitoring. A larger OSPF metric influences routing path selection, not traffic analysis.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
NetFlow
Why this is correct
NetFlow (and similar flow export technologies) captures metadata for each IP conversation traversing the interface, including source/destination addresses, L4 ports, and byte counts. This allows the administrator to aggregate by host, application, or TCP/UDP port and immediately identify the top talkers driving the interface to high utilization. Unlike SNMP counters that show only aggregate usage, NetFlow correlates the utilization to specific flows.
- ✗
Another DHCP scope
Why it's wrong here
A DHCP scope is a pool of IP addresses that a server hands out to clients; it controls address assignment, not traffic measurement. Adding another scope would only expand the number of leases available, and while it might indirectly change addressing, it would not reveal which applications or conversations fill the interface. The 'high utilization' observed via SNMP therefore remains an unexplained aggregate number, not a conversation detail.
When this WOULD be correct
In a scenario where the question asks about expanding IP address availability in a network with multiple subnets experiencing address exhaustion, adding another DHCP scope could be the correct answer to ensure devices can obtain IP addresses.
- ✗
A new STP priority
Why it's wrong here
STP priority is a spanning-tree election value that determines which switch becomes the root and which redundant paths are placed in blocking state. Reconfiguring it can move traffic to a different physical path, but it offers zero visibility into existing flows. The administrator needs a flow-based telemetry source, not a topology-control parameter, to see the specific traffic causing high utilization.
When this WOULD be correct
In a scenario where the question asks about optimizing network performance by adjusting STP settings to prevent loops or improve redundancy, selecting a new STP priority could be correct. For example, if the question focuses on reducing broadcast storms in a VLAN environment, adjusting STP priority could be the right answer.
- ✗
A larger OSPF metric
Why it's wrong here
OSPF metric (cost) is a routing parameter that influences shortest-path selection, not a tool for inspecting live traffic. Even with a larger metric on an interface, the administrator would only see route changes, never which source/destination pairs are consuming the interface's bandwidth. SNMP utilization counters are aggregate, so OSPF tuning cannot break down the utilization by conversation.
When this WOULD be correct
In a scenario where the question asks about optimizing OSPF routing performance or managing traffic flow in a congested network, increasing the OSPF metric for certain routes could be the correct answer. This would prioritize other routes and potentially alleviate congestion.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓NetFlowCorrect answer▾
Why this is correct
NetFlow (and similar flow export technologies) captures metadata for each IP conversation traversing the interface, including source/destination addresses, L4 ports, and byte counts. This allows the administrator to aggregate by host, application, or TCP/UDP port and immediately identify the top talkers driving the interface to high utilization. Unlike SNMP counters that show only aggregate usage, NetFlow correlates the utilization to specific flows.
✗Another DHCP scopeWrong answer — click to see why▾
Why this is wrong here
A DHCP scope is used to assign IP addresses to hosts on a subnet; it does not provide any information about traffic flows or bandwidth consumption. Therefore, adding another DHCP scope would not help identify which conversations are responsible for high interface utilization.
★ When this WOULD be the correct answer
In a scenario where the question asks about expanding IP address availability in a network with multiple subnets experiencing address exhaustion, adding another DHCP scope could be the correct answer to ensure devices can obtain IP addresses.
Why candidates choose this
Students might confuse DHCP with network monitoring tools because DHCP is involved in network configuration, but it has no capability to report on traffic conversations.
✗A new STP priorityWrong answer — click to see why▾
Why this is wrong here
STP priority is a parameter used in Spanning Tree Protocol to influence root bridge election and loop prevention; it does not provide any visibility into traffic flows or bandwidth usage. Changing STP priority would not help identify which conversations are consuming bandwidth.
★ When this WOULD be the correct answer
In a scenario where the question asks about optimizing network performance by adjusting STP settings to prevent loops or improve redundancy, selecting a new STP priority could be correct. For example, if the question focuses on reducing broadcast storms in a VLAN environment, adjusting STP priority could be the right answer.
Why candidates choose this
Students might think that STP priority affects traffic paths and thus could help identify conversations, but STP only controls the logical topology for loop prevention, not traffic monitoring.
✗A larger OSPF metricWrong answer — click to see why▾
Why this is wrong here
OSPF metric is used for routing path selection based on cost; it does not provide any information about actual traffic flows or bandwidth consumption. Adjusting OSPF metrics might change routing paths but does not offer visibility into which conversations are responsible for high utilization.
★ When this WOULD be the correct answer
In a scenario where the question asks about optimizing OSPF routing performance or managing traffic flow in a congested network, increasing the OSPF metric for certain routes could be the correct answer. This would prioritize other routes and potentially alleviate congestion.
Why candidates choose this
Students might associate OSPF metrics with traffic engineering and assume they can help identify bandwidth hogs, but metrics only influence routing decisions, not monitoring.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Quick reference
Routing Protocol Comparison
| Protocol | Metric | Max Hops | Algorithm | Type |
|---|---|---|---|---|
| RIP v2 | Hop count | 15 | Bellman-Ford | Distance vector |
| OSPF | Cost (bandwidth) | Unlimited | Dijkstra (SPF) | Link state |
| EIGRP | Composite metric | Unlimited | DUAL | Hybrid |
| IS-IS | Cost | Unlimited | Dijkstra | Link state |
| BGP | Policy / attributes | Unlimited | Path vector | Path vector |
RIP's 15-hop limit makes it unsuitable for large networks. OSPF and EIGRP dominate modern enterprise deployments.
Go deeper
Related to this question
Learn chapter
Configuring AAA with TACACS+ and RADIUS on IOS XE
Key term
Bandwidth
Bandwidth is the maximum amount of data that can travel over a network connection in a given amount of time, usually measured in bits per second.
Key term
Interface
An interface is a point of connection or interaction between two systems, devices, or software components that allows them to exchange information or signals.
About these practice questions
This 200-301 question is part of Courseiva's 1,389-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.