CCNA Plan

IP Services

10% of the CCNA · blueprint 200-301 v1.1 (effective 2024-08-20)

Short answer

Domain 4.0 is 10% of the CCNA. It covers inside source NAT with static entries and pools, NTP client/server mode, the roles of DHCP and DNS, SNMP, syslog features and severity levels, configuring a DHCP client and relay agent, QoS forwarding per-hop behavior (classification, marking, queuing, policing, shaping), remote access with SSH, and the roles of TFTP and FTP.

Why it matters on this exam

Short, factual questions: a syslog level, a NAT term, an ip helper-address placement. Easy points if memorised.

Key concepts (objectives 4.1–4.9)

Common mistakes

Worked example

Host 192.168.1.10 behind a router with public 203.0.113.5 reaches a web server 198.51.100.7. Inside local = 192.168.1.10, inside global = 203.0.113.5, outside global = 198.51.100.7.

Original practice questions

IP ServicesDifficulty 2/5

Host 192.168.1.10 sits behind a router that translates it to 203.0.113.5 when reaching server 198.51.100.7. In NAT terminology, 203.0.113.5 is the:

  1. AInside global address
  2. BOutside local address
  3. COutside global address
  4. DInside local address
Show answer and rationale

Correct: A. 'Inside' refers to the host on the inside network; 'global' is how it appears on the outside. 192.168.1.10 is inside local, 203.0.113.5 is inside global, and 198.51.100.7 is outside global.

  • D — Inside local is the private address before translation.
  • B — Outside local is how the outside host appears inside (usually the same as outside global).
  • C — Outside global is the server's real public address.
IP ServicesDifficulty 2/5

Which syslog severity level corresponds to 'warnings'?

  1. A3
  2. B4
  3. C5
  4. D6
Show answer and rationale

Correct: B. Levels: 0 emergencies, 1 alerts, 2 critical, 3 errors, 4 warnings, 5 notifications, 6 informational, 7 debugging. 'logging trap 4' sends warnings and everything more severe.

  • A — 3 is errors.
  • C — 5 is notifications.
  • D — 6 is informational.
IP ServicesDifficulty 3/5

Clients on VLAN 20 cannot get addresses from a DHCP server on another subnet. Which configuration on the VLAN 20 router interface fixes this?

  1. Aip ospf network broadcast
  2. Bip dhcp excluded-address
  3. Cip helper-address <server-ip>
  4. Dip nat inside
Show answer and rationale

Correct: C. DHCP Discover is a broadcast that routers do not forward. 'ip helper-address' on the interface facing the clients relays the broadcast as unicast to the server (DHCP relay agent).

  • B — Excluded-address applies to a router acting as the DHCP server.
  • D — NAT does not relay broadcasts.
  • A — OSPF network type is unrelated.
All 3 IP Services questions →

2 flashcards for IP Services

Practice this topic

Blueprint-mapped questions with full rationales for every choice.

Start practice
Related areas: Network Fundamentals · Network Access · IP Connectivity · Security Fundamentals

Primary references

  1. CCNA Exam v1.1 (200-301) Exam Topics — Cisco Systems · primary · retrieved 2026-09-21, verified 2026-09-21
Last reviewed: 2026-09-21Next review by: 2026-11-20Draft — pending editorial reviewHow we verify facts