CCNA Network Services and Security Practice Question
Exhibit
User test results: - ping 10.20.30.40 = success - open http://10.20.30.40 = success - open http://intranet.corp.local = fail
Users can reach an internal server by IP address but not by hostname. What is the most likely cause?
⚠ Common exam trap
A common exam trap is to confuse IP connectivity problems with DNS resolution issues. Candidates often select options related to VLAN misconfigurations or missing default gateways because they assume network path problems cause hostname failures. However, if users can reach the server by IP address, Layer 3 routing and VLAN membership are correct. The trap is ignoring the DNS layer, which is responsible for translating hostnames. Misinterpreting this leads to incorrect troubleshooting steps and wrong exam answers.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Name resolution is failing even though IP connectivity to the server works.
The strongest explanation is a DNS problem rather than a raw IP connectivity problem. In practical terms, successful access by IP address shows that Layer 3 reachability to the server exists. Failure only when using the hostname strongly suggests name resolution is missing, incorrect, or unavailable. This is a classic symptom-based troubleshooting question. The network path works, but the naming service does not.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Name resolution is failing even though IP connectivity to the server works.
Why this is correct
This is correct because the symptom points directly to a DNS-related problem.
- ✗
The server must be in the wrong VLAN because IP works.
Why it's wrong here
This is wrong because successful IP access already shows the host can reach the server.
When this WOULD be correct
In a different scenario, if a question asked why a server is unreachable by IP address but reachable by hostname, and the context indicated that VLAN configurations were misapplied, then option B could be correct, suggesting the server is in a different VLAN than the clients.
- ✗
The default gateway is missing on the client.
Why it's wrong here
This is wrong because the client can already reach the server by IP.
When this WOULD be correct
In a different scenario, if a question stated that users cannot access any external resources or internal servers by IP address, and the context indicated that the client is on a different subnet without a configured default gateway, then this option would be correct.
- ✗
A GRE tunnel is required for hostname access.
Why it's wrong here
This is wrong because hostname access does not require GRE tunneling.
When this WOULD be correct
In a different question, if the scenario involved a network where hostname resolution required a GRE tunnel due to segmentation across different networks, then this option could be correct. For example, if the question stated that users could access servers in different VLANs only through GRE tunnels, this would validate the need for a GRE tunnel for hostname resolution.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓Name resolution is failing even though IP connectivity to the server works.Correct answer▾
Why this is correct
This is correct because the symptom points directly to a DNS-related problem.
✗The server must be in the wrong VLAN because IP works.Wrong answer — click to see why▾
Why this is wrong here
This option is incorrect because being able to reach the server by IP address indicates that the server is correctly configured on the network and is not in the wrong VLAN. VLAN issues would typically prevent any connectivity, not just hostname resolution.
★ When this WOULD be the correct answer
In a different scenario, if a question asked why a server is unreachable by IP address but reachable by hostname, and the context indicated that VLAN configurations were misapplied, then option B could be correct, suggesting the server is in a different VLAN than the clients.
Why candidates choose this
Candidates might choose this option due to a misunderstanding of VLAN functionality, thinking that if hostname resolution fails, it could be related to VLAN misconfigurations, especially if they have encountered similar issues in practical scenarios.
✗The default gateway is missing on the client.Wrong answer — click to see why▾
Why this is wrong here
This option is incorrect because a missing default gateway would typically prevent any communication with external networks, including reaching the server by IP address. Since users can access the server via IP, the default gateway must be configured correctly.
★ When this WOULD be the correct answer
In a different scenario, if a question stated that users cannot access any external resources or internal servers by IP address, and the context indicated that the client is on a different subnet without a configured default gateway, then this option would be correct.
Why candidates choose this
Candidates may choose this option due to a misunderstanding of network fundamentals, believing that a default gateway is essential for any IP communication, leading them to overlook the specific context of the question.
✗A GRE tunnel is required for hostname access.Wrong answer — click to see why▾
Why this is wrong here
A GRE tunnel is not necessary for hostname access unless the hostname resolution specifically requires a tunnel for communication, which is not indicated in this scenario. The issue described relates to name resolution, not tunneling protocols.
★ When this WOULD be the correct answer
In a different question, if the scenario involved a network where hostname resolution required a GRE tunnel due to segmentation across different networks, then this option could be correct. For example, if the question stated that users could access servers in different VLANs only through GRE tunnels, this would validate the need for a GRE tunnel for hostname resolution.
Why candidates choose this
Candidates might choose this option because they associate GRE tunnels with complex network configurations and assume that hostname resolution issues could stem from tunneling requirements, especially in environments with multiple VLANs or subnets.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Quick reference
Common DNS Record Types
| Record | Purpose | Example |
|---|---|---|
| A | IPv4 address mapping | example.com → 93.184.216.34 |
| AAAA | IPv6 address mapping | example.com → 2606:2800::1 |
| CNAME | Alias to another hostname | www → example.com |
| MX | Mail server for domain | example.com → mail.example.com (priority 10) |
| TXT | Text data (SPF, DKIM, verification) | v=spf1 include:_spf.example.com ~all |
| NS | Authoritative name servers | example.com NS ns1.example.com |
| PTR | Reverse DNS (IP → hostname) | 34.216.184.93.in-addr.arpa → example.com |
| SOA | Zone authority record | Primary NS, admin email, serial, TTL defaults |
Go deeper
Related to this question
Learn chapter
Device File Management with SFTP and SCP
Key term
Fully Qualified Domain Name
A Fully Qualified Domain Name is the complete and unambiguous website or server name that includes the host, domain, and top-level domain, leaving no room for guesswork.
Key term
CAN
A CAN (Controller Area Network) is a robust vehicle bus standard designed to allow microcontrollers and devices to communicate with each other without a host computer.
About these practice questions
Courseiva writes every 200-301 question from scratch — 1,389 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.