CCNA Network Services and Security Practice Question
Why is the combination of strong authentication and centralized logging generally better than using either one alone?
⚠ Common exam trap
Avoid assuming that two controls can cover all security needs or that combining them simplifies architecture.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Authentication helps prevent unauthorized access, while centralized logging improves visibility and investigation.
The combination is better because strong authentication helps prevent unauthorized access, while centralized logging helps detect, review, and investigate activity across the environment. In plain language, one control focuses more on prevention, while the other improves visibility and accountability. Together they create a stronger security posture than either one alone. This is an important design mindset. Security is stronger when controls complement each other instead of trying to solve every problem with one mechanism. The correct answer is the one focused on prevention plus visibility.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Authentication helps prevent unauthorized access, while centralized logging improves visibility and investigation.
Why this is correct
This is correct because the two controls complement each other.
- ✗
They are redundant because both perform exactly the same function.
Why it's wrong here
Strong authentication and centralized logging serve distinct security functions—authentication verifies identity through factors like passwords or biometrics, while logging records events for audit and detection. They are not redundant because neither replaces the other’s mechanism; a log cannot authenticate a user, and authentication alone provides no forensic trail. This option is tempting because both are security controls, and in a scenario where only one control is required for compliance (e.g., a basic password policy without audit), choosing either alone could be acceptable, but the question explicitly asks why combining them is better.
When this WOULD be correct
In a question that asks about redundancy in security measures, where both strong authentication and centralized logging are framed as overlapping in function, option B could be correct if the context implies they provide similar protective benefits without additional layers.
- ✗
Centralized logging makes authentication unnecessary.
Why it's wrong here
This is wrong because logging does not replace access control.
When this WOULD be correct
In a scenario where a question asks if centralized logging can replace authentication in a specific context, such as a highly controlled environment where all users are trusted, this option could be considered correct. For example, if the question specifies a system that only allows access through a secure VPN with no external access, one might argue that logging alone suffices.
- ✗
Strong authentication removes the need for device event records.
Why it's wrong here
This is wrong because event records remain valuable even with strong access control.
When this WOULD be correct
In a scenario where the exam question asks if strong authentication alone can ensure complete security without any logging, option D could be correct. If the question emphasizes that strong authentication is sufficient for security, then it could imply that device event records are unnecessary.
Option-by-option analysis
Why each answer is right or wrong
Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The 200-301 exam frequently reuses these exact scenarios with slightly different constraints.
✓Authentication helps prevent unauthorized access, while centralized logging improves visibility and investigation.Correct answer▾
Why this is correct
This is correct because the two controls complement each other.
✗They are redundant because both perform exactly the same function.Wrong answer — click to see why▾
Why this is wrong here
Option B is incorrect because strong authentication and centralized logging serve distinct functions; authentication secures access while logging tracks and analyzes events, enhancing security and compliance.
★ When this WOULD be the correct answer
In a question that asks about redundancy in security measures, where both strong authentication and centralized logging are framed as overlapping in function, option B could be correct if the context implies they provide similar protective benefits without additional layers.
Why candidates choose this
Candidates may choose this option due to a misunderstanding of security principles, believing that multiple security measures can be redundant rather than complementary, leading to confusion about their distinct roles.
✗Centralized logging makes authentication unnecessary.Wrong answer — click to see why▾
Why this is wrong here
This option is incorrect because centralized logging does not eliminate the need for authentication; both are essential for a comprehensive security posture. Authentication verifies user identity, while logging tracks access and actions for auditing and incident response.
★ When this WOULD be the correct answer
In a scenario where a question asks if centralized logging can replace authentication in a specific context, such as a highly controlled environment where all users are trusted, this option could be considered correct. For example, if the question specifies a system that only allows access through a secure VPN with no external access, one might argue that logging alone suffices.
Why candidates choose this
Candidates may choose this option due to a misunderstanding of the roles of authentication and logging, believing that logging can inherently provide sufficient security without user verification.
✗Strong authentication removes the need for device event records.Wrong answer — click to see why▾
Why this is wrong here
This option is wrong because strong authentication does not eliminate the need for device event records; both are essential for comprehensive security management. Device event records provide critical insights into system activity, which strong authentication alone cannot address.
★ When this WOULD be the correct answer
In a scenario where the exam question asks if strong authentication alone can ensure complete security without any logging, option D could be correct. If the question emphasizes that strong authentication is sufficient for security, then it could imply that device event records are unnecessary.
Why candidates choose this
Candidates may choose this option due to a misunderstanding of security principles, believing that robust authentication alone suffices for security oversight, thus overlooking the importance of logging for accountability and forensic analysis.
Analysis generated from the official 200-301blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”
Go deeper
Related to this question
About these practice questions
Courseiva writes every 200-301 question from scratch — 1,389 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 200-301 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 200-301 exam.