The answer is to change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and add a primary default route 0.0.0.0/0 via 10.0.0.2 with an administrative distance (AD) of 1, while keeping the floating static default route 0.0.0.0/0 via 192.0.2.2 with AD 100. This is correct because a floating static route configuration relies on a higher AD to remain inactive until the primary path fails; without a primary default route, the backup with AD 100 becomes active prematurely, and the wrong next-hop 10.0.0.5 causes a recursive lookup failure since R1’s directly connected interface is 10.0.0.1/30. On the CCNA 200-301 v2 exam, this tests your understanding of administrative distance as a tiebreaker for route selection and the mechanics of floating statics as backup default routes. A common trap is forgetting to configure the primary default route at all, leaving the floating route as the only option. Remember the memory tip: “Primary AD 1, backup AD 100—the higher the AD, the later it’s used.”
CCNA IP Routing Practice Question
This 200-301 practice question tests your understanding of ip routing. The scenario asks you to isolate a root cause — eliminate options that address a different problem before choosing. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Network Topology
You are connected to R1 via console. R1 must forward traffic to the 203.0.113.0/24 and 2001:db8:1::/48 networks through R2 (10.0.0.2/30, 2001:db8:ff::2/64). The primary path must use a next-hop of 10.0.0.2 for IPv4 and 2001:db8:ff::2 for IPv6. Additionally, configure a floating static default route for IPv4 that uses R3 (192.0.2.2/30) as a backup only when the primary path fails. The current configuration has errors: the IPv4 static route points to a wrong next-hop (10.0.0.5) and the primary default route is missing, causing the floating route (AD 100) to become active instead of serving as a backup. Fix these issues so that both primary and backup routes work correctly.
Clue words in this question
Noticing these words before you look at the options changes how you read each choice.
Clue: "primary"
Why it matters: Asks for the main purpose or function, not a secondary benefit. Eliminate answers that describe side-effects or partial functions.
R1# show running-config | section ip route
ip route 203.0.113.0 255.255.255.0 10.0.0.5
ip route 0.0.0.0 0.0.0.0 192.0.2.2 100
R1# show running-config | section ipv6 route
ipv6 route 2001:db8:1::/48 2001:db8:ff::2
R1# show ip interface brief
Interface IP-Address OK? Method Status Protocol
GigabitEthernet0/0 10.0.0.1 YES manual up up
GigabitEthernet0/1 192.0.2.1 YES manual up up
R1# show ip route
Codes: C - connected, S - static, ...
10.0.0.0/30 is subnetted, 1 subnets
C 10.0.0.0/30 is directly connected, GigabitEthernet0/0
S 203.0.113.0/24 [1/0] via 10.0.0.5
S* 0.0.0.0/0 [100/0] via 192.0.2.2
R1# show ipv6 route
C 2001:db8:ff::/64 [0/0]
via GigabitEthernet0/0, directly connected
S 2001:db8:1::/48 [1/0]
via 2001:db8:ff::2
R1# show ip route 203.0.113.0
Routing entry for 203.0.113.0/24
Known via "static", distance 1, metric 0
Last update from 10.0.0.5 on GigabitEthernet0/0
* 10.0.0.5, via GigabitEthernet0/0
Route is not advertised to any peer
A
Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and add a default route 0.0.0.0/0 via 10.0.0.2 with AD 1. Keep the floating default route 0.0.0.0/0 via 192.0.2.2 with AD 100.
This is correct because the primary static route to 203.0.113.0/24 must use a directly connected next-hop (10.0.0.2) to be reachable. A primary default route with AD 1 ensures it is preferred over the floating route (AD 100), which only becomes active when the primary fails. The IPv6 route is already correct.
B
Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and change the administrative distance of the floating default route from 100 to 1 so it becomes the primary default route.
Why wrong: This is incorrect because changing the floating route's AD to 1 would make it the primary default route, but the requirement is for it to be a backup only. The primary default route should have AD 1, and the floating route should have a higher AD (e.g., 100) to serve as backup.
C
Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and change the administrative distance of the floating default route from 100 to 255 so it is never used.
Why wrong: This is incorrect because an AD of 255 makes the route unusable (effectively disabled), but the requirement is for the floating route to be used as a backup when the primary fails. AD 100 is appropriate for a floating route; AD 255 would prevent it from ever being installed in the routing table.
D
Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and remove the floating default route because it is unnecessary.
Why wrong: This is incorrect because the requirement explicitly states that a floating static default route must be configured as a backup for when the primary path fails. Removing it would leave no backup path, violating the requirement.
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and add a default route 0.0.0.0/0 via 10.0.0.2 with AD 1. Keep the floating default route 0.0.0.0/0 via 192.0.2.2 with AD 100.
The IPv4 static route to 203.0.113.0/24 used a next-hop of 10.0.0.5, which is not a directly connected interface (R1's G0/0 is 10.0.0.1/30, so only .2 is valid). This caused a recursive lookup failure. The floating static default route had AD 100, but a floating route must have an AD higher than the primary route's AD (typically 1) so it is only used when the primary fails; setting AD 100 is correct for backup, but the primary default route was missing. The fix: change the next-hop for 203.0.113.0/24 to 10.0.0.2, and add a primary default route with AD 1 via 10.0.0.2. The floating route's AD of 100 is fine as backup. IPv6 route was correct.
Key principle: NAT direction and interface roles matter as much as the IP address mapping. Inside/outside designation controls which traffic is translated.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✓
Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and add a default route 0.0.0.0/0 via 10.0.0.2 with AD 1. Keep the floating default route 0.0.0.0/0 via 192.0.2.2 with AD 100.
Why this is correct
This is correct because the primary static route to 203.0.113.0/24 must use a directly connected next-hop (10.0.0.2) to be reachable. A primary default route with AD 1 ensures it is preferred over the floating route (AD 100), which only becomes active when the primary fails. The IPv6 route is already correct.
Clue confirmation
The clue word "primary" in the question point toward this answer.
Related concept
Static NAT maps one inside address to one outside address.
✗
Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and change the administrative distance of the floating default route from 100 to 1 so it becomes the primary default route.
Why it's wrong here
This is incorrect because changing the floating route's AD to 1 would make it the primary default route, but the requirement is for it to be a backup only. The primary default route should have AD 1, and the floating route should have a higher AD (e.g., 100) to serve as backup.
✗
Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and change the administrative distance of the floating default route from 100 to 255 so it is never used.
Why it's wrong here
This is incorrect because an AD of 255 makes the route unusable (effectively disabled), but the requirement is for the floating route to be used as a backup when the primary fails. AD 100 is appropriate for a floating route; AD 255 would prevent it from ever being installed in the routing table.
✗
Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and remove the floating default route because it is unnecessary.
Why it's wrong here
This is incorrect because the requirement explicitly states that a floating static default route must be configured as a backup for when the primary path fails. Removing it would leave no backup path, violating the requirement.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and add a default route 0.0.0.0/0 via 10.0.0.2 with AD 1. Keep the floating default route 0.0.0.0/0 via 192.0.2.2 with AD 100.Correct answer▾
Why this is correct
This is correct because the primary static route to 203.0.113.0/24 must use a directly connected next-hop (10.0.0.2) to be reachable. A primary default route with AD 1 ensures it is preferred over the floating route (AD 100), which only becomes active when the primary fails. The IPv6 route is already correct.
✗Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and change the administrative distance of the floating default route from 100 to 1 so it becomes the primary default route.Wrong answer — click to see why▾
Why this is wrong here
The floating route must have a higher AD than the primary route to act as a backup; setting it to 1 would make it preferred over the primary default route, violating the requirement.
Why candidates choose this
Candidates might think that lowering the AD makes the route more reliable, but they overlook that the floating route is meant to be a backup, so it must have a higher AD.
✗Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and change the administrative distance of the floating default route from 100 to 255 so it is never used.Wrong answer — click to see why▾
Why this is wrong here
AD 255 is reserved for routes that are not to be installed; a floating route needs an AD higher than the primary but less than 255 to be usable as backup.
Why candidates choose this
Candidates may confuse the concept of floating static routes with administrative distance values, thinking a very high AD ensures it is only used as a last resort, but AD 255 disables the route entirely.
✗Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and remove the floating default route because it is unnecessary.Wrong answer — click to see why▾
Why this is wrong here
The floating route is required by the scenario; removing it would eliminate the backup path, which is not the intended fix.
Why candidates choose this
Candidates might think that since the primary route is fixed, no backup is needed, but the question clearly requires a backup floating route.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Common exam traps
Common exam trap: NAT rules depend on direction and matching traffic
NAT is not only about the public address. The inside/outside interface roles and the ACL or rule that matches traffic are just as important.
Detailed technical explanation
How to think about this question
NAT questions usually test address translation, overload/PAT behaviour, static mappings and whether the right traffic is being translated. Read the interface direction and address terms carefully.
KKey Concepts to Remember
Static NAT maps one inside address to one outside address.
PAT allows many inside hosts to share one public address using ports.
Inside local and inside global describe the private and translated addresses.
NAT ACLs identify traffic for translation, not always security filtering.
TExam Day Tips
→Identify inside and outside interfaces first.
→Check whether the scenario needs static NAT, dynamic NAT or PAT.
→Do not confuse NAT matching ACLs with normal packet-filtering intent.
Key takeaway
NAT direction and interface roles matter as much as the IP address mapping. Inside/outside designation controls which traffic is translated.
Real-world example
How this comes up in practice
A small business has 20 workstations on the 192.168.1.0/24 network and one public IP from its ISP. The router uses PAT (NAT overload) so all 20 devices share one public address using different source ports. NAT questions test whether you understand the four address terms and which direction each translation applies.
Related glossary terms
Concepts from this question explained
These glossary pages explain the core terms tested in this 200-301 question in full detail.
Review the four NAT address types (inside local, inside global, outside local, outside global), PAT port overload, and static vs dynamic NAT use cases. Then practise related 200-301 NAT questions on configuration and troubleshooting.
IP Routing — This question tests IP Routing — Static NAT maps one inside address to one outside address..
What is the correct answer to this question?
The correct answer is: Change the next-hop of the static route to 203.0.113.0/24 from 10.0.0.5 to 10.0.0.2, and add a default route 0.0.0.0/0 via 10.0.0.2 with AD 1. Keep the floating default route 0.0.0.0/0 via 192.0.2.2 with AD 100. — The IPv4 static route to 203.0.113.0/24 used a next-hop of 10.0.0.5, which is not a directly connected interface (R1's G0/0 is 10.0.0.1/30, so only .2 is valid). This caused a recursive lookup failure. The floating static default route had AD 100, but a floating route must have an AD higher than the primary route's AD (typically 1) so it is only used when the primary fails; setting AD 100 is correct for backup, but the primary default route was missing. The fix: change the next-hop for 203.0.113.0/24 to 10.0.0.2, and add a primary default route with AD 1 via 10.0.0.2. The floating route's AD of 100 is fine as backup. IPv6 route was correct.
What should I do if I get this 200-301 question wrong?
Review the four NAT address types (inside local, inside global, outside local, outside global), PAT port overload, and static vs dynamic NAT use cases. Then practise related 200-301 NAT questions on configuration and troubleshooting.
Are there clue words in this question I should notice?
Yes — watch for: "primary". Asks for the main purpose or function, not a secondary benefit. Eliminate answers that describe side-effects or partial functions.
What is the key concept behind this question?
Static NAT maps one inside address to one outside address.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which TWO statements about IPv4 and IPv6 static routing are correct?
medium
A.A default static route is used when no dynamic routing protocols are configured.
✓ B.A floating static route is configured with a higher administrative distance than the primary route.
C.A floating static route must have a lower administrative distance than the primary route.
✓ D.An IPv6 default static route uses the prefix ::/0.
E.An IPv6 static route can specify an IPv4 address as the next-hop.
Why B: Option B is correct because a floating static route is configured with a higher administrative distance to serve as a backup when the primary route fails. Option D is correct because an IPv6 default static route uses the prefix ::/0 to match all destinations. Option A is incorrect because a default static route can be used independently of whether dynamic routing protocols are configured; it is simply a route with destination 0.0.0.0/0. Option C is incorrect because a floating static route must have a higher AD, not lower, than the primary route. Option E is incorrect because an IPv6 static route cannot specify an IPv4 address as the next-hop; it must use an IPv6 address or an outgoing interface.
Variation 2. Which TWO statements about floating static routes and default routes are correct?
medium
✓ A.A floating static route uses an administrative distance higher than that of the primary route to act as a backup.
B.A floating static route must have a lower administrative distance than the primary route to ensure faster convergence.
✓ C.A default route can be configured as a static route with destination 0.0.0.0/0 for IPv4 and ::/0 for IPv6.
D.Floating static routes are supported only for IPv6, not for IPv4.
E.A default static route cannot be configured as a floating static route.
Why A: Option A is correct because a floating static route is configured with a higher administrative distance (AD) than the primary route. This ensures the floating route remains inactive in the routing table unless the primary route fails, at which point the router installs the floating static route as a backup. The higher AD makes it less preferred than the primary dynamic or static route.
Variation 3. Which TWO statements about IPv4 and IPv6 static routes, including floating static routes, are correct?
medium
✓ A.A floating static route uses a higher administrative distance than the primary route to provide backup connectivity.
✓ B.An IPv6 static route using a link-local next-hop address must include both the next-hop address and the outgoing interface.
C.In IPv6, the default route prefix is 0.0.0.0/0.
D.For a floating static route to be installed in the routing table, it must have an administrative distance lower than that of the primary route.
E.An IPv4 static route will only be inserted into the routing table if its next-hop IP address belongs to a directly connected subnet.
Why A: Option A is correct because a floating static route is configured with a higher administrative distance (AD) than the primary route. This ensures the floating route is only used when the primary route fails, as the router prefers routes with lower AD values. For example, if the primary route has an AD of 1 (static route default), the floating static route might be set to AD 200, making it a backup.
Last reviewed: Jun 6, 2026
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.