CCNA AI and Network Operations Practice Question
Network Topology
You are connected to R1 via the console. The network operations center (NOC) has asked you to configure R1 as an NTP client of the NTP server at 192.0.2.10 (reachable via VLAN 100, SVI 192.168.1.1/24). They also need all system messages of level 'debug' (level 7) and higher forwarded to the syslog server at 203.0.113.50. The current configuration shows that NTP is not working (stratum 16) and syslog is only sending critical and higher messages. Fix both issues.
⚠ Common exam trap
Do not confuse the NTP server command with the source interface command. The server command specifies the server, but the source interface ensures the correct source IP. For syslog, remember that 'debugging' is the keyword for the lowest severity level; using 'warnings' or 'informational' will exclude debug messages.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure 'ntp source Vlan100' and 'logging trap debugging'.
The NTP client is not synchronizing because there is no source interface specified; the NTP packets may be sourced from an unexpected interface and the server may ignore them. The solution is to configure 'ntp source Vlan100' to ensure NTP packets use the correct source IP. Additionally, the syslog trap level is set to 'critical', which filters out messages with severity lower than critical (like warnings, errors, etc.). The NOC requires all messages up to debug level; therefore, change the logging trap level to 'debugging' with 'logging trap debugging'.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure 'ntp source Vlan100' and 'logging trap debugging'.
Why this is correct
This is correct because 'ntp source Vlan100' ensures NTP packets are sourced from the VLAN 100 interface IP (192.168.1.1), which is reachable to the NTP server. 'logging trap debugging' sets the syslog trap level to debugging (severity 7), allowing all messages from debug and higher to be sent to the syslog server.
- ✗
Configure 'ntp server 192.0.2.10' and 'logging trap 7'.
Why it's wrong here
This is incorrect because 'ntp server 192.0.2.10' is already configured (implied by the scenario). The issue is the missing source interface, not the server command. 'logging trap 7' is not a valid command; the correct syntax is 'logging trap debugging' or 'logging trap 7' is not standard (though severity 7 is debugging, the keyword is preferred).
- ✗
Configure 'ntp source Vlan100' and 'logging trap warnings'.
Why it's wrong here
This is incorrect because 'logging trap warnings' sets the syslog trap level to warnings (severity 4), which filters out messages with severity lower than warnings (like notifications, informational, and debug). The NOC requires all messages up to debug level, so the trap level must be set to debugging.
- ✗
Configure 'ntp update-calendar' and 'logging trap informational'.
Why it's wrong here
This is incorrect because 'ntp update-calendar' updates the hardware calendar from NTP, but does not fix the source interface issue. 'logging trap informational' sets the trap level to informational (severity 6), which still excludes debug messages (severity 7).
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓Configure 'ntp source Vlan100' and 'logging trap debugging'.Correct answer▾
Why this is correct
This is correct because 'ntp source Vlan100' ensures NTP packets are sourced from the VLAN 100 interface IP (192.168.1.1), which is reachable to the NTP server. 'logging trap debugging' sets the syslog trap level to debugging (severity 7), allowing all messages from debug and higher to be sent to the syslog server.
✗Configure 'ntp server 192.0.2.10' and 'logging trap 7'.Wrong answer — click to see why▾
Why this is wrong here
The specific factual error: 'logging trap 7' is not a valid Cisco IOS command; the correct command uses the keyword 'debugging'. Also, the NTP server command alone does not fix the source interface issue.
Why candidates choose this
Candidates might think adding the NTP server command again will fix synchronization, or they may incorrectly use the numeric severity level without the keyword.
✗Configure 'ntp source Vlan100' and 'logging trap warnings'.Wrong answer — click to see why▾
Why this is wrong here
The specific factual error: 'logging trap warnings' only sends messages with severity 0-4, missing severity 5-7 (notifications, informational, debug).
Why candidates choose this
Candidates may confuse 'warnings' with a higher severity level, not realizing that debug is the lowest severity and requires the 'debugging' keyword.
✗Configure 'ntp update-calendar' and 'logging trap informational'.Wrong answer — click to see why▾
Why this is wrong here
The specific factual error: 'ntp update-calendar' is not needed for NTP synchronization; the source interface is the key missing piece. 'logging trap informational' does not include debug messages.
Why candidates choose this
Candidates may think updating the calendar is necessary for NTP to work, or they may believe informational is the lowest level, not realizing debug is lower.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Go deeper
Related to this question
Learn chapter
Agentic AI in Network Operations
Key term
Syslog
Syslog is a standard protocol used to send and store log messages from network devices and servers to a central logging server for monitoring and troubleshooting.
Key term
Interface
An interface is a point of connection or interaction between two systems, devices, or software components that allows them to exchange information or signals.
About these practice questions
This 200-301 question is part of Courseiva's 1,389-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.