Drag and drop the syslog severity levels and NTP concepts on the left to their correct descriptions on the right.
Drag a concept onto its matching description — or click a concept then click the description.
Emergency: system is unusable
Debugging: detailed debug messages
Reference clock (e.g., atomic clock or GPS)
Unsynchronized or maximum usable stratum
Configures an IOS-XE device as an NTP client
Displays NTP synchronization state and stratum
⚠ Common exam trap
Be careful not to confuse the severity order of syslog levels: lower numbers (0) are more severe, higher numbers (7) are less severe. Also, remember that NTP stratum numbers work inversely to accuracy: lower stratum numbers indicate higher accuracy, with Stratum 0 being the most accurate reference clock.
Answer choices
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Syslog severity level 0 (Emergency) – System is unusable; NTP Stratum 0 – Reference clock (e.g., atomic clock)
Syslog severity levels range from 0 (Emergency) to 7 (Debug), with 0 being the most critical. NTP stratum indicates clock accuracy: stratum 0 is the reference clock, stratum 1 is directly connected to a reference, and so on up to stratum 15, which is the maximum usable synchronized stratum. Stratum 16 means the device is unsynchronized. The ntp server command configures a device as a client, and show ntp status displays synchronization state and current stratum.
Answer analysis
For each option: why learners choose it and why it is or isn't the right answer here.
Syslog severity level 0 (Emergency) – System is unusable; NTP Stratum 0 – Reference clock (e.g., atomic clock)
Why this is correct
Syslog severity level 0 (Emergency) indicates the most critical condition where the system is unusable. NTP Stratum 0 is the highest accuracy reference clock, such as an atomic clock or GPS, from which all other NTP servers derive their time.
Syslog severity level 0 (Emergency) – System is unusable; NTP Stratum 0 – Client that synchronizes to a Stratum 1 server
Why it's wrong here
The syslog severity level 0 (Emergency) correctly denotes the most critical network condition where the system has become unusable, but the NTP assignment is flawed. Stratum 0 represents the authoritative reference clock itself—such as a GPS or atomic clock—not a client. Any device that synchronizes to a Stratum 1 server is classified as Stratum 2 (or higher), so calling it Stratum 0 inverts the hierarchy.
Syslog severity level 7 (Debug) – System is unusable; NTP Stratum 0 – Reference clock (e.g., atomic clock)
Why it's wrong here
This option correctly identifies NTP Stratum 0 as the reference clock, but it mislabels the syslog severity. Level 7 in syslog is 'Debug,' which is the least critical and used only for verbose diagnostic output, not for a system that is unusable. The description 'System is unusable' is exclusively reserved for severity level 0 (Emergency), so the mapping is reversed.
Syslog severity level 7 (Debug) – System is unusable; NTP Stratum 0 – Client that synchronizes to a Stratum 1 server
Why it's wrong here
Both halves of this option are incorrect. The syslog severity level 7 is 'Debug,' a low-priority message for troubleshooting information, and it would never be used to describe an unusable system; that phrase belongs to level 0 (Emergency). Additionally, NTP Stratum 0 is the primary reference clock (atomic or GPS), while a client syncing to a Stratum 1 server would be Stratum 2 or below—so the entire statement misrepresents both concepts.
Option-by-option analysis
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
Why this is correct
Syslog severity level 0 (Emergency) indicates the most critical condition where the system is unusable. NTP Stratum 0 is the highest accuracy reference clock, such as an atomic clock or GPS, from which all other NTP servers derive their time.
Why this is wrong here
The specific factual error is confusing the reference clock (Stratum 0) with a client device. Stratum 0 devices are authoritative time sources, not clients.
Why candidates choose this
Candidates might think Stratum 0 is the lowest level in the hierarchy and thus a client, but in NTP, lower stratum numbers indicate higher accuracy, and Stratum 0 is the top.
Why this is wrong here
The specific factual error is mismatching the syslog severity level. Level 7 is Debug, not Emergency. Emergency is level 0.
Why candidates choose this
Candidates may confuse the highest number (7) with the most severe, but in syslog, lower numbers are more severe.
Why this is wrong here
The specific factual errors are: (1) Syslog level 7 is Debug, not Emergency; (2) NTP Stratum 0 is a reference clock, not a client.
Why candidates choose this
Candidates might pick this if they have multiple misconceptions, such as thinking higher syslog numbers are more severe and that Stratum 0 is a client.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Learn chapter
Network Management Approaches: Device, Cloud, Controller, Automation, and IaC
Key term
NTP
Network Time Protocol is a networking protocol used to synchronize the clocks of computers and devices over a network to a common time reference.
Key term
Syslog
Syslog is a standard protocol used to send and store log messages from network devices and servers to a central logging server for monitoring and troubleshooting.
About these practice questions
This 200-301 question is part of Courseiva's 1,389-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.