200-301 domain

IP Services

Use this page to practise 200-301 IP Services practice questions. The goal is not to memorise dumps, but to understand the concept, review the explanation and improve your exam readiness.

50 questions

Focused practice

Start a IP Services session

All sessions draw only from this domain. Pick a length or try interactive practice with inline explanations.

Start 20-question practice session →

What the exam tests

What to know about IP Services

IP Services questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Question index

All IP Services questions (50)

Click any question to see the full explanation, or start a practice session above.

1

A network team wants centralized logging and also wants log timestamps from different devices to line up accurately. Which combination best supports that goal?

2

Why is NTP especially valuable when a network uses centralized Syslog servers?

3

Why is NTP especially useful when devices send logs to a centralized Syslog server?

4

Why is the combination of strong authentication and centralized logging generally better than using either one alone?

5

Why is centralized logging especially useful when combined with NTP?

6

Why is the combination of strong authentication and centralized logging better than either control by itself?

7

Why is NTP especially valuable when a company uses a centralized Syslog server?

8

Users on VLAN 20 are not receiving IPv4 addresses from the centralized DHCP server at 10.50.0.10. Users in other VLANs are working normally. Based on the exhibit, which change should fix the issue for VLAN 20 clients?

9

Exhibit: PCs in VLAN 40 are not receiving addresses from the centralized DHCP server at 172.16.1.10. What should be configured on the VLAN 40 default gateway interface?

10

An engineer configures NAT overload on a router for inside users. Which resource is primarily used to let many internal hosts share one public IPv4 address?

11

A network team wants routers and switches to have consistent timestamps in logs so event correlation is accurate during an outage. Which service should they verify first?

12

Exhibit: A client can ping 8.8.8.8 but cannot browse to www.example.com. Which service is most likely failing?

13

Which statement about DHCP address exclusion is correct?

14

Which statement about NetFlow is correct?

15

Exhibit: Users report intermittent internet access after PAT was configured. The inside and outside interfaces are marked correctly. Which missing configuration is the most likely cause?

16

Exhibit: A collector is receiving traffic metadata from a router, including source IP, destination IP, protocol, and byte counts. Which feature is being used?

17

A user types www.example.com into a browser. Which service is used first to resolve that name into an IP address?

18

Match each network service to its primary purpose.

19

Exhibit: A client receives an IP address but cannot reach remote networks. Which DHCP option is most likely missing or incorrect?

20

Match each network service to its primary function.

21

Exhibit: Inside hosts can reach the internet only one at a time. What is the most likely NAT issue?

22

Exhibit: PCs in VLAN 20 are not receiving addresses from a DHCP server in another subnet. The switch SVI for VLAN 20 is up, and routing is working. Which configuration is most likely missing on the gateway for VLAN 20?

23

On a router performing NAT, where should ip nat inside be applied?

24

Exhibit: A switch shows a clock that is several minutes off from other devices even though an NTP server has been configured. Which issue is the most likely cause?

25

Exhibit: An engineer wants a device to send only warning messages and more critical events to a syslog server. Which logging level should be configured?

26

Exhibit: A user can ping 8.8.8.8 successfully but cannot browse to www.example.com by name. Which service is the most likely failing component?

27

Exhibit: An engineer wants all devices to send logs to 10.10.10.50 and also stamp those logs with consistent time from 10.10.10.60. Which two configurations are required on a Cisco device?

28

Match each service with the best operational purpose.

29

Exhibit: A DHCP client on VLAN 30 is not receiving an address from a server located on another subnet. The SVI configuration is shown below. What should be added?

30

A branch router should automatically learn the IP address of a time source so logs from all devices show matching timestamps. Which service provides that function?

31

Exhibit: A network engineer wants to identify which applications are consuming most WAN bandwidth over time. Which feature should be enabled on the router?

32

Exhibit: A router is configured for NAT overload, but translations never appear when inside users browse the internet. Which issue is most likely?

33

Exhibit: A router is configured with an access list intended to block Telnet from 192.168.10.0/24 to 10.1.1.10, but Telnet still works. What is the most likely reason?

34

Exhibit: Users receive addresses from the correct subnet, but they cannot browse by hostname. Which DHCP option is most likely missing or incorrect?

35

A small office wants branch routers to automatically hand out IP addresses, default gateway values, and DNS servers to clients. Which service should be configured?

36

Match each service to its primary function.

37

Exhibit: A branch router receives time from an NTP server, but the show output marks the server with a tilde instead of an asterisk. What does that mean?

38

Exhibit: A named standard ACL is configured to permit only the 192.168.30.0/24 subnet, but users from 192.168.31.0/24 are still passing traffic. What is the most likely reason?

39

Exhibit: A router is configured for PAT overload. What does the inside global address represent for an internal PC?

40

Exhibit: Users complain that log timestamps from several routers do not line up with one another. Which two actions are most appropriate?

41

Exhibit: A company wants to export traffic statistics from routers to a collector for visibility into top talkers and application usage. Which two statements are accurate?

42

Which protocol is used to resolve a hostname such as www.example.com into an IP address?

43

A branch router is acting as a DHCP server. Which two parameters can it provide directly to clients through DHCP?

44

A router is configured as a DHCP server for VLAN 20. Clients on the VLAN can reach the default gateway, but they do not receive leases. Which two configuration issues on the router would directly prevent successful address assignment?

45

A company wants all routers and switches to use a common time source so log timestamps line up during incident review. Which two statements about NTP are correct?

46

Users can browse websites by IP address but not by hostname. The default gateway is reachable and general internet connectivity works. Which two causes are the most likely?

47

A network team wants to collect flow-level traffic statistics from routers to identify top talkers and bandwidth consumers. Which two statements about NetFlow are correct?

48

A branch office uses PAT overload on the edge router. Inside users can reach the internet, but return traffic for a newly deployed server must be mapped to a specific inside host. Which two statements are correct?

49

A network operations team wants centralized logging from routers and switches and also wants meaningful severity filtering. Which two statements about syslog are correct?

50

You have a storage account named stproddata01 that contains application data in a blob container. Users sometimes delete blobs accidentally and need a way to recover those deleted blobs for several days. You want the simplest solution with minimal operational effort. What should you configure?

Watch out for

Common IP Services exam traps

  • Answering from memory before reading the full scenario.
  • Missing a constraint such as cost, availability, security, scope or command context.
  • Choosing a broad answer when the question asks for the most specific fix.
  • Ignoring why the wrong options are tempting.

Frequently asked questions

What does the IP Services domain cover on the 200-301 exam?
IP Services questions test whether you can apply the concept in context, not just recognise a definition.
How many questions are in this domain?
This page lists all 50 IP Services questions in the 200-301 question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then use the interactive practice page to work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only IP Services questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length or try the interactive practice page for inline explanations.