CCNA AI and Network Operations Practice Question
Which TWO statements correctly describe NTP stratum levels and syslog severity levels in a Cisco IOS-XE environment?
⚠ Common exam trap
Candidates often mistakenly equate lower syslog severity numbers with lower importance, not realizing that a smaller number means a higher severity; similarly, they may think higher NTP stratum numbers mean higher accuracy.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
An NTP stratum value of 1 indicates a higher accuracy than a stratum value of 3.
A lower NTP stratum number indicates higher accuracy; stratum 1 is directly synchronized to a precise reference clock (e.g., GPS) and is thus more accurate than stratum 3, which is two hops away. Option C is correct because the 'ntp server' command configures a device to synchronize its clock to a specified NTP server, making it an NTP client. Option B is incorrect: syslog severity level 4 (warning) is more severe than level 5 (notice) because lower severity numbers indicate higher severity. Option D is incorrect: severity level 0 (emergency) is the most severe level, indicating a system-wide critical event, not a normal operational message. Option E is incorrect: NTP stratum 0 is assigned to an authoritative time source itself (e.g., atomic clock), not to devices directly connected to it; devices connected to stratum 0 sources are stratum 1.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
An NTP stratum value of 1 indicates a higher accuracy than a stratum value of 3.
Why this is correct
NTP stratum defines the distance from a reference clock in a hierarchy. Stratum 0 is the authoritative time source (e.g., GPS or atomic clock), stratum 1 is a device directly synchronized to that source, and stratum 3 is two hops away from stratum 1. Each hop introduces potential network delay and jitter, so a lower stratum value indicates closer proximity to the reference clock and consequently higher time accuracy. Therefore, stratum 1 is indeed more accurate than stratum 3.
- ✗
A syslog severity level of 5 (notice) is more severe than a level of 4 (warning).
Why it's wrong here
Syslog severity levels use an inverse numbering scale: lower numbers represent higher severity. Level 0 is emergency, 1 alert, 2 critical, 3 error, 4 warning, 5 notice, 6 informational, and 7 debug. Since level 4 (warning) has a lower numeric value than level 5 (notice), warning is more severe. The statement reverses this relationship, making it incorrect.
- ✓
The 'ntp server' command under global configuration configures the device as an NTP client.
Why this is correct
The global configuration command 'ntp server <ip-address>' instructs the Cisco IOS-XE device to synchronize its system clock with the listed NTP server. When this command is applied, the device sends NTP requests and adjusts its time based on the server's responses, thereby operating as an NTP client. To provide time services to other devices, you must configure 'ntp master' or an NTP server assignment on another interface, so the statement is accurate.
- ✗
Syslog severity level 0 (emergency) indicates a normal operational message.
Why it's wrong here
Syslog severity level 0 (emergency) is the highest severity level, used for conditions that make the system or a critical subsystem unusable and require immediate attention. It is not a normal operational message; routine operational events are typically logged at level 5 (notice) or level 6 (informational). Thus, describing level 0 as normal is incorrect.
- ✗
NTP stratum 0 is assigned to devices that are directly connected to an authoritative time source.
Why it's wrong here
NTP stratum 0 is reserved exclusively for the reference clock itself, such as a GPS receiver, atomic clock, or radio clock. Devices that connect directly to a stratum 0 source are assigned stratum 1, because they are the first stratum in the synchronization chain. Assigning stratum 0 to those connected devices confuses the reference clock with its directly attached clients, making the statement wrong.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓An NTP stratum value of 1 indicates a higher accuracy than a stratum value of 3.Correct answer▾
Why this is correct
NTP stratum defines the distance from a reference clock in a hierarchy. Stratum 0 is the authoritative time source (e.g., GPS or atomic clock), stratum 1 is a device directly synchronized to that source, and stratum 3 is two hops away from stratum 1. Each hop introduces potential network delay and jitter, so a lower stratum value indicates closer proximity to the reference clock and consequently higher time accuracy. Therefore, stratum 1 is indeed more accurate than stratum 3.
✗A syslog severity level of 5 (notice) is more severe than a level of 4 (warning).Wrong answer — click to see why▾
Why this is wrong here
Level 4 is warning, level 5 is notice; warning is more severe.
✗Syslog severity level 0 (emergency) indicates a normal operational message.Wrong answer — click to see why▾
Why this is wrong here
Level 0 is for emergencies, not normal messages; normal messages are typically level 5 or 6.
✗NTP stratum 0 is assigned to devices that are directly connected to an authoritative time source.Wrong answer — click to see why▾
Why this is wrong here
Stratum 0 is the reference clock; stratum 1 is the first NTP server connected to it.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
Learn chapter
Network Management Approaches: Device, Cloud, Controller, Automation, and IaC
Key term
NTP
Network Time Protocol is a networking protocol used to synchronize the clocks of computers and devices over a network to a common time reference.
Key term
Network Time Protocol
Network Time Protocol (NTP) is a networking protocol that synchronizes the clocks of computers and devices over a network to a common reference time source, typically Coordinated Universal Time (UTC).
About these practice questions
One of 1,389 original 200-301 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.