350-701 · Question #583
An administrator is testing new configuration on a network device. The network device had a previously established association with the NTP server but is no longer processing time updates. What is…
The correct answer is C. NTP authentication has been configured on the network device. The network device is no longer processing time updates from an NTP server, which indicates a failure in the NTP association, likely due to a mismatch in authentication configuration.
Question
An administrator is testing new configuration on a network device. The network device had a previously established association with the NTP server but is no longer processing time updates. What is the cause of this issue?
Options
- AThe server changed its time source to stratum 1.
- BThe network device is sending the wrong password to the server.
- CNTP authentication has been configured on the network device.
- DNTP authentication has been configured on the NTP server.
How the community answered
(62 responses)- A6% (4)
- B3% (2)
- C74% (46)
- D16% (10)
Why each option
The network device is no longer processing time updates from an NTP server, which indicates a failure in the NTP association, likely due to a mismatch in authentication configuration.
A server changing its time source to stratum 1 (a highly accurate source) would generally improve time synchronization, not cause it to stop.
This choice describes the symptom (wrong password) if authentication is misconfigured, but the root cause is that authentication itself was enabled on the device, requiring a password to be sent.
If NTP authentication has been configured on the network device, but not correctly matched on the NTP server or if the keys are mismatched, the device will fail to authenticate with the server and thus stop processing time updates, even if a previous association existed without authentication.
If NTP authentication was only configured on the NTP server, a client device without authentication configured would simply fail to establish an authenticated connection from the start, not lose an *established* unauthenticated association unless the server was configured to *require* authentication subsequently, which is a less direct cause than the client device's new configuration.
Concept tested: NTP authentication configuration issues
Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipapp_ntp/configuration/15-mt/ntp-15-mt-book/ntp-config-ntp-auth.html
Topics
Community Discussion
No community discussion yet for this question.