CCNA AI and Network Operations Practice Question
Exhibit
R1#show running-config | include ntp|logging ntp server 203.0.113.5 logging host 192.0.2.20 logging trap debugging ! R1#show ntp status Clock is unsynchronized, stratum 16, no reference clock R1#show ip interface brief | include Loopback0 Loopback0 10.0.0.1 YES manual up up R1#
You are connected to R1. Configure NTP client so that R1 synchronizes with the NTP server at 198.51.100.10, using its Loopback0 (10.0.0.1/32) as the source interface. Also configure syslog to send messages of severity 5 (notifications) and above to 192.0.2.20. The current configuration shows a misconfigured NTP server address and an incorrect logging trap level. Verify with 'show ntp status' (stratum should not be 16) and 'show logging'.
⚠ Common exam trap
Candidates often confuse the numeric severity levels with the keyword equivalents for logging trap. Also, they may forget to specify the source interface for NTP, assuming the router will use the loopback automatically. Always verify that the NTP source interface is explicitly configured when required.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
ntp server 198.51.100.10 source Loopback0 logging trap notifications
The misconfigured NTP server address (203.0.113.5) and the debug-level logging trap (7) must be corrected to meet requirements. The correct commands are 'ntp server 198.51.100.10 source Loopback0' to use the specified server and Loopback0 as source, and 'logging trap notifications' (severity 5) to send only notifications and more severe messages. Option B is wrong because 'logging trap 4' sets the trap level to warning, which would not forward notifications. Option C misses the source interface, and Option D uses the wrong NTP server and an overly verbose trap level.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
ntp server 198.51.100.10 source Loopback0 logging trap notifications
Why this is correct
This is the correct configuration because it specifies the exact NTP server 198.51.100.10 and uses the `source Loopback0` keyword to force all NTP packets to originate from Loopback0’s IP address. That guarantees a consistent source IP for NTP, which is essential when the NTP server is configured to accept requests only from that address or when building an NTP access-group. The `logging trap notifications` command sets the syslog trap severity to level 5 (notifications), matching the requirement to send severities 5 and above—keyword and numeric severity are equivalent, but the keyword is used here as specified.
- ✗
ntp server 198.51.100.10 source Loopback0 logging trap 4
Why it's wrong here
This is incorrect because 'logging trap 5' uses the numeric severity level, but the question expects the keyword 'notifications' for severity 5. While both are technically valid, the question specifies 'severity 5 (notifications)', and the correct answer uses the keyword.
- ✗
ntp server 198.51.100.10 logging trap notifications
Why it's wrong here
This is incorrect because it omits the 'source Loopback0' parameter. Without specifying the source interface, the NTP client will use the outgoing interface IP, which may not be Loopback0, potentially causing reachability or authentication issues.
- ✗
ntp server 203.0.113.5 source Loopback0 logging trap 7
Why it's wrong here
This is incorrect because it uses the wrong NTP server address (203.0.113.5 instead of 198.51.100.10) and sets the logging trap level to debugging (7), which sends all messages instead of only notifications (5) and above.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓ntp server 198.51.100.10 source Loopback0 logging trap notificationsCorrect answer▾
Why this is correct
This is the correct configuration because it specifies the exact NTP server 198.51.100.10 and uses the `source Loopback0` keyword to force all NTP packets to originate from Loopback0’s IP address. That guarantees a consistent source IP for NTP, which is essential when the NTP server is configured to accept requests only from that address or when building an NTP access-group. The `logging trap notifications` command sets the syslog trap severity to level 5 (notifications), matching the requirement to send severities 5 and above—keyword and numeric severity are equivalent, but the keyword is used here as specified.
✗ntp server 198.51.100.10 source Loopback0 logging trap 4Wrong answer — click to see why▾
Why this is wrong here
logging trap 4 sets the trap level to warning (severity 4), missing severity 5 notifications, so it fails to send messages of severity 5 and above.
Why candidates choose this
Candidates might think that using the numeric value is acceptable, but the question explicitly mentions the keyword, so the answer using the keyword is more precise.
✗ntp server 198.51.100.10 logging trap notificationsWrong answer — click to see why▾
Why this is wrong here
The NTP source interface must be explicitly configured to use Loopback0; otherwise, the NTP packets will use the IP of the egress interface.
Why candidates choose this
Candidates may forget to specify the source interface, especially if they assume the router will automatically use the loopback interface.
✗ntp server 203.0.113.5 source Loopback0 logging trap 7Wrong answer — click to see why▾
Why this is wrong here
The NTP server address is incorrect, and the logging trap level is set to debugging (7), which is too permissive and does not match the requirement of severity 5 (notifications).
Why candidates choose this
This option reflects the misconfigured state mentioned in the question, so candidates might think it is the correct fix, but it actually perpetuates the errors.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Visual reference
Go deeper
Related to this question
Learn chapter
IPv4 Addressing and Address Classes
Key term
Interface
An interface is a point of connection or interaction between two systems, devices, or software components that allows them to exchange information or signals.
Key term
Syslog
Syslog is a standard protocol used to send and store log messages from network devices and servers to a central logging server for monitoring and troubleshooting.
About these practice questions
One of 1,389 original 200-301 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.