- A
Slow network performance: Network infrastructure
This is correct because routing and switching issues, such as high CPU utilization on routers or switches, often manifest as slow performance and packet loss. These symptoms are classic indicators of problems in the network layer or switching fabric.
- B
Application crashes: Application support
This is incorrect because wireless issues typically cause intermittent connectivity or low signal strength, not consistently high CPU and packet loss across the network.
- C
Cannot log in: Identity and access management
This is incorrect because WAN issues usually cause internet access problems or high latency, not necessarily high CPU on local devices.
- D
Data loss: Data protection and backup
This is incorrect because security issues typically cause authentication failures or access denials, not high CPU and packet loss as primary symptoms.
CCNA Network Services and Security Practice Question
This 200-301 practice question tests your understanding of network services and security. The scenario asks you to isolate a root cause — eliminate options that address a different problem before choosing. A key principle to apply: dNS resolves domain names to IP addresses and is the first service to check when name resolution fails but IP connectivity works.. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
Match each symptom to the first service area most likely involved.
Clue words in this question
Noticing these words before you look at the options changes how you read each choice.
Clue:
"first"Why it matters: Order matters here. You are being tested on which action comes before the others — not which action is generally useful.
Clue:
"most likely"Why it matters: Probability qualifier — the question wants the most probable cause or outcome, not a guaranteed one. Eliminate low-probability options.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
Slow network performance: Network infrastructure
Works by IP but not by hostname indicates that name resolution is failing, pointing to DNS. No automatic address on the host means DHCP is not providing an IP, so DHCP is the likely problem. Logs that do not line up in time suggest inconsistent clocks, which is a symptom of NTP failure. No centralized device event view means log messages are not being aggregated, which is the role of Syslog.
Key principle: DNS resolves domain names to IP addresses and is the first service to check when name resolution fails but IP connectivity works.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Slow network performance: Network infrastructure
Why this is correct
This is correct because routing and switching issues, such as high CPU utilization on routers or switches, often manifest as slow performance and packet loss. These symptoms are classic indicators of problems in the network layer or switching fabric.
Clue confirmation
The clue words "first", "most likely" in the question point toward this answer.
Related concept
DNS resolves domain names to IP addresses and is the first service to check when name resolution fails but IP connectivity works.
- ✓
Application crashes: Application support
Why this is correct
This is incorrect because wireless issues typically cause intermittent connectivity or low signal strength, not consistently high CPU and packet loss across the network.
Clue confirmation
The clue words "first", "most likely" in the question point toward this answer.
Related concept
DNS resolves domain names to IP addresses and is the first service to check when name resolution fails but IP connectivity works.
- ✓
Cannot log in: Identity and access management
Why this is correct
This is incorrect because WAN issues usually cause internet access problems or high latency, not necessarily high CPU on local devices.
Clue confirmation
The clue words "first", "most likely" in the question point toward this answer.
Related concept
DNS resolves domain names to IP addresses and is the first service to check when name resolution fails but IP connectivity works.
- ✓
Data loss: Data protection and backup
Why this is correct
This is incorrect because security issues typically cause authentication failures or access denials, not high CPU and packet loss as primary symptoms.
Clue confirmation
The clue words "first", "most likely" in the question point toward this answer.
Related concept
DNS resolves domain names to IP addresses and is the first service to check when name resolution fails but IP connectivity works.
Common exam traps
Common exam trap: answer the scenario, not the keyword
Students often confuse DNS with DHCP: if a host can reach a destination by IP but not by hostname, DNS is the issue, not DHCP.
Detailed technical explanation
How to think about this question
DNS (Domain Name System) is a critical IP service that translates human-readable domain names into IP addresses. In Cisco networks, DNS enables devices to resolve hostnames for management and routing purposes. When a device can ping an IP address but cannot resolve a hostname, it indicates that DNS is not functioning correctly. This symptom directs troubleshooting efforts to DNS server configuration, forwarding, or ACLs blocking DNS traffic. DHCP (Dynamic Host Configuration Protocol) automates IP address assignment and network configuration parameters like subnet mask and default gateway. If devices fail to receive automatic addressing, they cannot communicate properly on the network. Troubleshooting DHCP involves verifying DHCP server availability, scope configuration, and relay agent settings. NTP (Network Time Protocol) ensures synchronized clocks across network devices, which is essential for accurate logging and security. Misaligned timestamps indicate NTP synchronization issues, often caused by incorrect NTP server settings or network connectivity problems. Syslog centralizes logging from multiple devices to a central server, facilitating event monitoring and troubleshooting. Missing centralized event visibility usually means Syslog messages are not reaching the server due to misconfiguration or network filtering. The exam trap is confusing symptoms that affect connectivity with those related to IP services. For example, failing to distinguish between DHCP and DNS issues can lead to incorrect troubleshooting steps. Understanding the specific role and symptoms of each IP service helps avoid this mistake and improves first-pass troubleshooting accuracy.
KKey Concepts to Remember
- DNS resolves domain names to IP addresses and is the first service to check when name resolution fails but IP connectivity works.
- DHCP automatically assigns IP addresses and related network configuration parameters, so missing automatic addressing indicates a DHCP issue.
- NTP synchronizes device clocks across the network, and misaligned timestamps typically point to NTP service problems.
- Syslog centralizes event logging from multiple devices, so missing centralized event visibility suggests a Syslog configuration or service failure.
- Troubleshooting IP services requires linking symptoms directly to the service domain, such as DNS, DHCP, NTP, or Syslog, to isolate issues efficiently.
- Cisco devices rely on DNS for hostname resolution, so failure to resolve hostnames but successful IP pings confirms DNS as the problem domain.
- DHCP failures prevent devices from obtaining IP addresses dynamically, causing connectivity issues that manual IP configuration can temporarily bypass.
- NTP misconfigurations cause inconsistent timestamps, which can affect log correlation and security event analysis across Cisco network devices.
TExam Day Tips
- Watch for words such as best, first, most likely and least administrative effort.
- Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
DNS resolves domain names to IP addresses and is the first service to check when name resolution fails but IP connectivity works.
Real-world example
How this comes up in practice
A practitioner preparing for the 200-301 exam encounters this exact type of scenario on the job. The correct answer here is not the most general option — it is the best answer for the specific constraint described. DNS resolves domain names to IP addresses and is the first service to check when name resolution fails but IP connectivity works. Real exam questions reward reading the full scenario before eliminating options, because the constraint defines which answer fits.
What to study next
Got this wrong? Here's your next step.
Review dNS resolves domain names to IP addresses and is the first service to check when name resolution fails but IP connectivity works., then practise related 200-301 questions on the same topic to reinforce the concept.
- →
Network Services and Security — study guide chapter
Learn the concepts, then practise the questions
- →
Network Services and Security practice questions
Targeted practice on this topic area only
- →
All 200-301 questions
1,819 questions across all exam domains
- →
CCNA 200-301 v2 study guide
Full concept coverage aligned to exam objectives
- →
200-301 practice test guide
How to use practice tests most effectively before exam day
Related practice questions
Related 200-301 practice-question pages
Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.
Network Infrastructure and Connectivity practice questions
Practise 200-301 questions linked to Network Infrastructure and Connectivity.
Switching and Network Access practice questions
Practise 200-301 questions linked to Switching and Network Access.
IP Routing practice questions
Practise 200-301 questions linked to IP Routing.
Network Services and Security practice questions
Practise 200-301 questions linked to Network Services and Security.
AI and Network Operations practice questions
Practise 200-301 questions linked to AI and Network Operations.
CCNA subnetting practice questions
Practise IPv4 subnetting, CIDR, masks, host ranges and subnet selection.
CCNA OSPF practice questions
Practise OSPF neighbours, router IDs, metrics, areas and routing-table interpretation.
CCNA VLAN practice questions
Practise VLANs, access ports, trunks, allowed VLANs and switching scenarios.
CCNA STP practice questions
Practise spanning tree, root bridge election, port roles and STP troubleshooting.
CCNA EtherChannel practice questions
Practise LACP, PAgP, port-channel behaviour and bundle requirements.
CCNA ACL practice questions
Practise standard and extended ACLs, permit/deny logic and traffic filtering.
CCNA NAT practice questions
Practise static NAT, dynamic NAT, PAT and inside/outside address translation.
Practice this exam
Start a free 200-301 practice session
Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.
FAQ
Questions learners often ask
What does this 200-301 question test?
Network Services and Security — This question tests Network Services and Security — DNS resolves domain names to IP addresses and is the first service to check when name resolution fails but IP connectivity works..
What is the correct answer to this question?
The correct answer is: Slow network performance: Network infrastructure — Works by IP but not by hostname indicates that name resolution is failing, pointing to DNS. No automatic address on the host means DHCP is not providing an IP, so DHCP is the likely problem. Logs that do not line up in time suggest inconsistent clocks, which is a symptom of NTP failure. No centralized device event view means log messages are not being aggregated, which is the role of Syslog.
What should I do if I get this 200-301 question wrong?
Review dNS resolves domain names to IP addresses and is the first service to check when name resolution fails but IP connectivity works., then practise related 200-301 questions on the same topic to reinforce the concept.
Are there clue words in this question I should notice?
Yes — watch for: "first", "most likely". Order matters here. You are being tested on which action comes before the others — not which action is generally useful.
What is the key concept behind this question?
DNS resolves domain names to IP addresses and is the first service to check when name resolution fails but IP connectivity works.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Keep practising
More 200-301 practice questions
- A switchport connected to another switch should carry multiple VLANs, but it was manually configured as an access port.…
- What problem is HSRP designed to solve?
- Which TWO statements correctly describe the causes or implications of CRC errors, runts, giants, or output errors as see…
- You are connected to R1. Configure IPv4 and IPv6 addressing on R1's interfaces and verify reachability to R2. The curren…
- Which TWO statements accurately describe how AI/ML concepts are applied to network operations in modern enterprise netwo…
- Which TWO switch port configurations are required when connecting a Cisco IP phone and a desktop PC to a single access p…
Last reviewed: Apr 12, 2026
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.