Question 1,041 of 1,819
Network Infrastructure and ConnectivityhardMultiple ChoiceObjective-mapped

Quick Answer

The answer is an unreachable or incorrectly configured DNS server. Host-A can ping its default gateway, proving that Layer 3 connectivity, the subnet mask, and the gateway are all functional; the failure to reach the internet therefore isolates the problem to name resolution. When you troubleshoot DNS server unreachable issues, remember that a workstation can have perfect IP connectivity yet still fail to browse the web if it cannot translate domain names. On the CCNA 200-301 v2 exam, this scenario tests your ability to distinguish between a Layer 3 connectivity fault and a DNS failure—a common trap is to immediately suspect the gateway or DHCP. The engineer’s ipconfig output likely shows a public DNS like 8.8.8.8, which corporate firewalls often block by policy. Memory tip: “If you can ping the gateway but not Google, check the DNS server.”

CCNA Network Infrastructure and Connectivity Practice Question

This 200-301 practice question tests your understanding of network infrastructure and connectivity. The scenario asks you to isolate a root cause — eliminate options that address a different problem before choosing. After answering, compare your reasoning against the explanation and wrong-answer breakdown below. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.

Exhibit

C:\Users\Admin>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : Host-A
   Primary Dns Suffix  . . . . . . . : 
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Ethernet0:

   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Intel(R) PRO/1000 MT
   Physical Address. . . . . . . . . : 00-50-56-8A-2B-1C
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::250:56ff:fe8a:2b1c%12(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.1.100(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Tuesday, October 5, 2023 10:00:00 AM
   Lease Expires . . . . . . . . . . : Wednesday, October 6, 2023 10:00:00 AM
   Default Gateway . . . . . . . . . : 192.168.1.1
   DHCP Server . . . . . . . . . . . : 192.168.1.1
   DNS Servers . . . . . . . . . . . : 8.8.8.8
   Primary WINS Server . . . . . . . : 
   NetBIOS over Tcpip. . . . . . . . : Enabled

A network engineer is troubleshooting an issue where a Windows 10 workstation (Host-A) cannot reach the internet, but can ping the local default gateway. The engineer runs 'ipconfig /all' on Host-A and reviews the output. What is the most likely cause of the problem?

Clue words in this question

Noticing these words before you look at the options changes how you read each choice.

  • Clue: "most likely"

    Why it matters: Probability qualifier — the question wants the most probable cause or outcome, not a guaranteed one. Eliminate low-probability options.

Question 1hardmultiple choice
Full question →

Exhibit

C:\Users\Admin>ipconfig /all

Windows IP Configuration

   Host Name . . . . . . . . . . . . : Host-A
   Primary Dns Suffix  . . . . . . . : 
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Ethernet0:

   Connection-specific DNS Suffix  . : 
   Description . . . . . . . . . . . : Intel(R) PRO/1000 MT
   Physical Address. . . . . . . . . : 00-50-56-8A-2B-1C
   DHCP Enabled. . . . . . . . . . . : Yes
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::250:56ff:fe8a:2b1c%12(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.1.100(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Lease Obtained. . . . . . . . . . : Tuesday, October 5, 2023 10:00:00 AM
   Lease Expires . . . . . . . . . . : Wednesday, October 6, 2023 10:00:00 AM
   Default Gateway . . . . . . . . . : 192.168.1.1
   DHCP Server . . . . . . . . . . . : 192.168.1.1
   DNS Servers . . . . . . . . . . . : 8.8.8.8
   Primary WINS Server . . . . . . . : 
   NetBIOS over Tcpip. . . . . . . . : Enabled

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

The DNS server is configured as a public DNS server that may be unreachable due to network policy or firewall.

Host-A can ping the default gateway, which confirms that Layer 3 connectivity to the local network is working and that the subnet mask and default gateway are correctly configured. The inability to reach the internet despite this connectivity points to a name resolution failure, likely caused by an incorrect or unreachable DNS server. A public DNS server (e.g., 8.8.8.8) may be blocked by corporate firewall policy, preventing Host-A from resolving internet domain names.

Key principle: Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

  • The subnet mask is incorrect.

    Why it's wrong here

    The subnet mask 255.255.255.0 is correct for a /24 network.

  • The default gateway is missing or incorrect.

    Why it's wrong here

    The default gateway is correctly set to 192.168.1.1.

  • The DNS server is configured as a public DNS server that may be unreachable due to network policy or firewall.

    Why this is correct

    The DNS server 8.8.8.8 is a public server; if not reachable from the local network, name resolution fails.

    Clue confirmation

    The clue word "most likely" in the question point toward this answer.

    Related concept

    Read the scenario before looking for a memorised answer.

  • The host has obtained an APIPA address (169.254.x.x).

    Why it's wrong here

    The IPv4 address is 192.168.1.100, which is a valid private address, not an APIPA address.

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.

The DNS server is configured as a public DNS server that may be unreachable due to network policy or firewall.Correct answer

Why this is correct

The DNS server 8.8.8.8 is a public server; if not reachable from the local network, name resolution fails.

The subnet mask is incorrect.Wrong answer — click to see why

Why this is wrong here

The subnet mask 255.255.255.0 is correct for a /24 network, so it is not the cause of the problem.

Why candidates choose this

Students often suspect subnet mask issues when connectivity fails, but here the mask is correct and the host can ping the gateway, indicating local connectivity works.

The default gateway is missing or incorrect.Wrong answer — click to see why

Why this is wrong here

The default gateway is correctly set to 192.168.1.1, and the host can ping it, so the gateway is not missing or incorrect.

Why candidates choose this

A missing or incorrect default gateway is a common cause of internet connectivity loss, but since the host can ping the gateway, this is not the issue.

The host has obtained an APIPA address (169.254.x.x).Wrong answer — click to see why

Why this is wrong here

The IPv4 address is 192.168.1.100, which is a valid private address, not an APIPA address (169.254.x.x). APIPA addresses are used when DHCP fails, but here the host has a proper address.

Why candidates choose this

APIPA addresses are a common cause of connectivity issues when DHCP fails, but the host's IP address is not in the APIPA range, so this is not the problem.

Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Common exam traps

Common exam trap: answer the scenario, not the keyword

The trap here is that candidates assume a successful ping to the gateway means all Layer 3 connectivity is fine, overlooking that DNS is a separate service that can fail even when IP connectivity is intact.

Detailed technical explanation

How to think about this question

When a host can ping an IP address (like the gateway) but cannot browse the internet, the issue is often DNS resolution. The 'ipconfig /all' output would show the configured DNS server; if it is a public DNS server (e.g., 8.8.8.8) and the corporate firewall blocks outbound DNS to external servers, the host will fail to resolve domain names. This is a common split-tunnel or DNS filtering scenario in enterprise networks, where internal DNS servers must be used for external resolution.

KKey Concepts to Remember

  • Read the scenario before looking for a memorised answer.
  • Find the constraint that changes the correct option.
  • Eliminate answers that are true in general but not in this case.

TExam Day Tips

  • Watch for words such as best, first, most likely and least administrative effort.
  • Review why wrong options are wrong, not only why the correct option is correct.

Key takeaway

Answer the scenario, not the keyword: identify the specific constraint before choosing the most familiar-sounding option.

Real-world example

How this comes up in practice

A network engineer segments a warehouse floor into three subnets: 20 scanners, 5 printers, and 2 management hosts. Picking the wrong mask wastes addresses or leaves too few usable hosts. Exam questions test whether you can apply CIDR notation, calculate block size, and identify the correct usable-host range for a given prefix.

What to study next

Got this wrong? Here's your next step.

Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.

Related practice questions

Related 200-301 practice-question pages

Use these pages to review the topic behind this question. This is how one missed question becomes focused revision.

Practice this exam

Start a free 200-301 practice session

Short sessions build daily habit. Longer sessions build exam-day stamina. Try a timed session to simulate real conditions.

FAQ

Questions learners often ask

What does this 200-301 question test?

Network Infrastructure and Connectivity — This question tests Network Infrastructure and Connectivity — Read the scenario before looking for a memorised answer..

What is the correct answer to this question?

The correct answer is: The DNS server is configured as a public DNS server that may be unreachable due to network policy or firewall. — Host-A can ping the default gateway, which confirms that Layer 3 connectivity to the local network is working and that the subnet mask and default gateway are correctly configured. The inability to reach the internet despite this connectivity points to a name resolution failure, likely caused by an incorrect or unreachable DNS server. A public DNS server (e.g., 8.8.8.8) may be blocked by corporate firewall policy, preventing Host-A from resolving internet domain names.

What should I do if I get this 200-301 question wrong?

Identify which exam domain this question belongs to, review the core concept, then practise similar questions from the same domain.

Are there clue words in this question I should notice?

Yes — watch for: "most likely". Probability qualifier — the question wants the most probable cause or outcome, not a guaranteed one. Eliminate low-probability options.

What is the key concept behind this question?

Read the scenario before looking for a memorised answer.

About these practice questions

Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →

How Courseiva writes practice questions · Editorial policy

Last reviewed: Jun 11, 2026

Question Discussion

Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.

Loading comments…

Sign in to join the discussion.

This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.