300-410 Network Logging and Syslog Practice Test 4 — 15 Questions

Question 1

A network engineer runs the following command to troubleshoot a Network Logging and Syslog issue:

R1# show ip route summary

Output:
Route Source    Networks    Subnets    Overhead    Memory (bytes)
connected       0           2          0           0
static          0           0          0           0
ospf 1          5           10         0           0
bgp 65001       3           5          0           0

Total           8           17         0           0

What does this output indicate?

Accepted Answer

The routing table contains 8 networks and 17 subnets, with OSPF contributing the most routes.. The output shows the routing table summary, including the number of networks and subnets from each routing protocol. This helps in understanding the routing table size and protocol contributions.

Answer

The router has a routing table with 25 total routes.

Answer

The router is using BGP as the primary routing protocol.

Answer

The router has no static routes configured.

Question 2

A network engineer runs the following command to troubleshoot a Network Logging and Syslog issue:

R1# show mpls ldp neighbor detail

Output:
Peer LDP Ident: 10.0.0.2:0, Local LDP Ident: 10.0.0.1:0
    TCP connection: 10.0.0.2.646 - 10.0.0.1.646
    State: Oper; Msgs sent/rcvd: 100/100; Downstream
    Up time: 00:10:00
    LDP discovery sources:
        GigabitEthernet0/0, Src IP addr: 10.0.0.2
    Addresses bound to peer LDP Ident:
        10.0.0.2        10.1.1.2        10.2.2.2

What does this output indicate?

Accepted Answer

The router has an operational LDP session with neighbor 10.0.0.2, with addresses 10.0.0.2, 10.1.1.2, and 10.2.2.2.. The output shows detailed LDP neighbor information, including TCP connection details, state, and addresses bound to the peer. This indicates a functioning LDP session.

Answer

The router is experiencing an LDP authentication failure.

Answer

The router is using UDP for LDP discovery.

Answer

The router has only one LDP neighbor.

Question 3

A network engineer runs the following command to troubleshoot a Network Logging and Syslog issue:

R1# show ip nhrp detail

Output:
10.1.1.1/32 via 10.0.0.2, Tunnel0 created 00:05:00, expire 01:55:00
    Type: dynamic, Flags: authoritative
    NBMA address: 192.168.1.2
10.2.2.2/32 via 10.0.0.3, Tunnel0 created 00:04:00, expire 01:56:00
    Type: dynamic, Flags: authoritative
    NBMA address: 192.168.1.3

What does this output indicate?

Accepted Answer

The router has two NHRP mappings for dynamic spoke-to-spoke tunnels via Tunnel0.. The output shows NHRP cache entries with mappings between tunnel IP and NBMA addresses. This is typical for DMVPN spoke-to-spoke communication.

Answer

The router is using static NHRP mappings.

Answer

The router is experiencing NHRP authentication failures.

Answer

The router has no NHRP entries.

Question 4

A network engineer runs the following command to troubleshoot a Network Logging and Syslog issue:

R1# show crypto engine connections active

Output:
Crypto Engine Connections

ID  Type              Algorithm           State       Connection-ID
    1  IPsec             AES256-SHA         Active      100
    2  IPsec             AES256-SHA         Active      101
    3  ISAKMP            SHA                 Active      200

What does this output indicate?

Accepted Answer

The router has two active IPsec tunnels and one active ISAKMP session.. The output shows active crypto engine connections, including IPsec and ISAKMP sessions. This indicates that the router is processing encrypted traffic.

Answer

The router is experiencing IPsec authentication failures.

Answer

The router has no active crypto connections.

Answer

The router is using only IPsec and no ISAKMP.

Question 5

A network engineer runs the following command to troubleshoot a Network Logging and Syslog issue:

R1# show policy-map control-plane input class class-default

Output:
  Class-map: class-default (match-any)
    0 packets, 0 bytes
    5 minute offered rate 0 bps, drop rate 0 bps
    Match: any
    police:
        cir 1000000 bps, bc 31250 bytes
        conformed 0 packets, 0 bytes; actions:
            transmit
        exceeded 0 packets, 0 bytes; actions:
            drop
        violated 0 packets, 0 bytes; actions:
            drop

What does this output indicate?

Accepted Answer

The CoPP policy is policing control plane traffic at 1 Mbps, but no packets have been matched yet.. The output shows the CoPP policy for the control plane, with a policer that limits traffic to 1 Mbps. The counters show no traffic has been matched, which may indicate that the policy is not effective or no traffic is hitting the control plane.

Answer

The CoPP policy is dropping all control plane traffic.

Answer

The CoPP policy is not applied to the control plane.

Answer

The CoPP policy is using a class-map that matches all traffic.

Question 6

What is the default logging severity level for messages sent to the console in Cisco IOS-XE?

Accepted Answer

Level 7 (debugging). By default, Cisco IOS-XE logs messages with severity level 7 (debugging) and higher to the console.

Answer

Level 0 (emergencies)

Answer

Level 5 (notifications)

Answer

Level 4 (warnings)

Question 7

According to RFC 5424, which syslog severity level corresponds to 'Critical' conditions?

Accepted Answer

Severity 2. RFC 5424 defines severity level 2 as 'Critical' conditions.

Answer

Severity 0

Answer

Severity 1

Answer

Severity 3

Question 8

What is the default behavior of the 'logging buffered' command in Cisco IOS-XE when no severity level is specified?

Accepted Answer

It captures messages of severity 0 through 7.. When 'logging buffered' is configured without a severity level, it defaults to severity 7 (debugging), capturing all messages.

Answer

It captures only messages of severity 0 through 4.

Answer

It captures only messages of severity 0 through 5.

Answer

It captures only messages of severity 0 through 6.

Question 9

Which syslog facility code is used by default for Cisco IOS messages when sent to a syslog server?

Accepted Answer

Facility 20 (local4). Cisco IOS defaults to facility code 20 (local4) for syslog messages.

Answer

Facility 16 (local0)

Answer

Facility 23 (local7)

Answer

Facility 24 (no default)

Question 10

What is the default rate-limit interval for the 'logging rate-limit' command in Cisco IOS-XE?

Accepted Answer

1 second. The default rate-limit interval is 1 second, meaning the specified number of messages per second is allowed.

Answer

100 milliseconds

Answer

5 seconds

Answer

No default; it must be specified

Question 11

Which statement correctly describes the behavior of the 'logging synchronous' command on a Cisco IOS device?

Accepted Answer

It causes syslog messages to be displayed only after a carriage return.. The 'logging synchronous' command prevents syslog messages from interrupting console command output by buffering them until the user finishes typing.

Answer

It disables all syslog messages on the console line.

Answer

It changes the severity level of messages sent to the console.

Answer

It enables logging to a synchronous serial interface.

Question 12

What is the default size of the logging buffer in Cisco IOS-XE when 'logging buffered' is enabled without specifying a size?

Accepted Answer

4096 bytes. The default logging buffer size is 4096 bytes (4 KB) on most Cisco IOS-XE platforms.

Answer

1024 bytes

Answer

8192 bytes

Answer

16384 bytes

Question 13

Which syslog severity level is used for informational messages that are not errors but may be useful for monitoring?

Accepted Answer

Severity 6 (Informational). Severity 6 is defined as 'Informational' in RFC 5424, used for non-error messages.

Answer

Severity 5 (Notice)

Answer

Severity 7 (Debug)

Answer

Severity 0 (Emergency)

Question 14

What is the default port number used by syslog servers to receive UDP syslog messages?

Accepted Answer

UDP 514. RFC 5424 specifies UDP port 514 as the default for syslog messages.

Answer

UDP 162

Answer

TCP 514

Answer

UDP 161

Question 15

Drag and drop the steps to configure conditional debugging and syslog forwarding into the correct order, from first to last.

Accepted Answer

Enable logging to buffer. First, enable logging to a buffer to capture debug messages locally. Then, set the logging severity level to ensure debug messages are included. Next, configure the syslog server IP address. After that, enable logging to the remote syslog server. Finally, enable conditional debugging to limit debug output based on specific conditions.