Exhibit
R2# show clock *00:12:11.123 UTC Mon Mar 1 1993 R3# show logging | include %LINEPROTO Mar 1 00:12:17.011: %LINEPROTO-5-UPDOWN: Line protocol on Interface G0/0, changed state to up
Exhibit: Users complain that log timestamps from several routers do not line up with one another. Which two actions are most appropriate?
Answer choices
Why each option matters
Good practice is not just finding the correct option. The wrong answers often show the exact trap the exam wants you to fall into.
Best answer
Configure NTP on the network devices
NTP keeps time synchronized.
Best answer
Verify timezone and timestamp settings
Correct local display matters for log correlation.
Distractor review
Increase the syslog severity threshold to debugging
More logs do not correct time drift.
Distractor review
Disable console logging
That reduces noise but does not solve time consistency.
Distractor review
Clear the logging buffer on all devices
That removes messages but not the cause.
Common exam trap
Common exam trap: answer the scenario, not the keyword
A frequent exam trap is selecting options that increase logging detail or clear logs, such as raising the syslog severity threshold to debugging or clearing the logging buffer. These actions might seem helpful but do not resolve the core issue of inconsistent timestamps caused by unsynchronized clocks. Another trap is disabling console logging, which reduces output noise but does nothing to align timestamps. The key mistake is overlooking the need for time synchronization and correct timezone settings, which are the only effective solutions to ensure logs from multiple routers can be accurately correlated.
Technical deep dive
How to think about this question
Network Time Protocol (NTP) is a critical service in Cisco networks that synchronizes the internal clocks of routers and switches to a reliable time source. Accurate timekeeping is essential for log messages, security protocols, and network troubleshooting. Without NTP, each device uses its internal clock, which can drift due to hardware imperfections, causing logs from different devices to show inconsistent timestamps. When troubleshooting log discrepancies, the first step is to ensure that NTP is configured and operational on all network devices. This guarantees that all routers reference the same time source. Additionally, verifying timezone and timestamp settings on each device is crucial because even with synchronized UTC time, incorrect timezone configurations can cause logs to display misleading local times, complicating event correlation. A common exam trap is to assume that increasing logging verbosity or clearing buffers will fix timestamp issues. These actions do not address the fundamental problem of clock drift or timezone misconfiguration. In practice, consistent time synchronization via NTP combined with correct timezone settings ensures reliable and correlated log data, which is vital for effective network management and incident response.
KKey Concepts to Remember
- Network Time Protocol (NTP) synchronizes clocks across network devices to ensure consistent and accurate timestamps in logs and events.
- Devices must have correct timezone and timestamp settings to display log times accurately relative to their geographic location.
- Without NTP, routers rely on their internal clocks, which can drift and cause inconsistent log timestamps across devices.
- Syslog messages use device timestamps to correlate events; mismatched times hinder troubleshooting and event correlation.
- Configuring NTP on all routers ensures a unified time source, preventing discrepancies in log timestamps across the network.
- Verifying timezone settings is essential because even synchronized clocks can display incorrect local times if timezones are misconfigured.
- Increasing syslog severity or clearing buffers does not address the root cause of timestamp inconsistencies, which is time synchronization.
- Disabling console logging reduces output noise but does not affect the accuracy or alignment of log timestamps.
TExam Day Tips
- Watch for words such as best, first, most likely and least administrative effort.
- Review why wrong options are wrong, not only why the correct option is correct.
Related practice questions
Related 200-301 practice-question pages
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
CCNA subnetting practice questions
Practise IPv4 subnetting, CIDR, masks, host ranges and subnet selection.
CCNA OSPF practice questions
Practise OSPF neighbours, router IDs, metrics, areas and routing-table interpretation.
CCNA VLAN practice questions
Practise VLANs, access ports, trunks, allowed VLANs and switching scenarios.
CCNA STP practice questions
Practise spanning tree, root bridge election, port roles and STP troubleshooting.
CCNA EtherChannel practice questions
Practise LACP, PAgP, port-channel behaviour and bundle requirements.
CCNA ACL practice questions
Practise standard and extended ACLs, permit/deny logic and traffic filtering.
CCNA NAT practice questions
Practise static NAT, dynamic NAT, PAT and inside/outside address translation.
CCNA DHCP practice questions
Practise DHCP scopes, relay, leases and troubleshooting.
CCNA show ip route practice questions
Practise routing-table output, longest-prefix match, AD and route selection.
CCNA show interfaces trunk practice questions
Practise trunk verification and VLAN forwarding across switches.
CCNA wireless security practice questions
Practise WLAN security, authentication and wireless architecture concepts.
CCNA IPv6 practice questions
Practise IPv6 addressing, routes, neighbour discovery and common IPv6 exam traps.
More questions from this exam
Keep practising from the same exam bank, or move into a focused topic page if this question exposed a weak area.
Question 1
A router learns the same prefix from both OSPF and EIGRP. Which route is installed by default?
Question 2
A router shows this output: R1#show ip ospf neighbor Neighbor ID Pri State Dead Time Address Interface 10.1.1.2 1 FULL/DR 00:00:34 192.168.12.2 GigabitEthernet0/0 10.1.1.3 1 2WAY/DROTHER 00:00:39 192.168.12.3 GigabitEthernet0/0 Which statement is correct?
Question 3
What is the OSPF metric called?
Question 4
A non-root switch has two uplinks toward the root bridge. One path has a lower total STP cost than the other. What role will the lower-cost uplink have?
Question 5
A router interface applies this ACL inbound: 10 deny tcp any any eq 80 20 permit ip any any A user reports that web browsing to a server by IP address fails, but ping works. Which statement best explains the behavior?
Question 6
A router learns route 198.51.100.0/24 from OSPF with AD 110 and also has a static route to the same prefix configured with AD 150. Which route is installed?
FAQ
Questions learners often ask
What does this 200-301 question test?
Network Time Protocol (NTP) synchronizes clocks across network devices to ensure consistent and accurate timestamps in logs and events.
What is the correct answer to this question?
The correct answer is: Configure NTP on the network devices — When timestamps disagree, the first fix is time synchronization. NTP should be configured consistently, and devices should have correct timezone or clock settings so syslog messages can be correlated across the network.
What should I do if I get this 200-301 question wrong?
Then try more questions from the same exam bank and focus on understanding why the wrong options are tempting.
Discussion
Sign in to join the discussion.