350-401 SNMP and Syslog Practice Test 2 — 15 Questions

Question 1

A network engineer runs the following command on Router R4:

R4# show ip nat translations

Pro Inside global      Inside local       Outside local      Outside global
--- 192.168.1.10:1024  10.0.0.10:1024     203.0.113.5:80     203.0.113.5:80
tcp 192.168.1.10:1024  10.0.0.10:1024     203.0.113.5:80     203.0.113.5:80
--- 192.168.1.11:2048  10.0.0.11:2048     198.51.100.2:443   198.51.100.2:443

Based on this output, what can be concluded?

Accepted Answer

The translation for 10.0.0.10 is a static NAT entry.. The output shows NAT translations. The first entry has no protocol (---) indicating a static translation, while the second is a dynamic TCP translation (tcp). The inside global addresses are 192.168.1.10 and 192.168.1.11, mapping to inside local addresses 10.0.0.10 and 10.0.0.11. The outside addresses show the destinations. The key is that the first entry is static (no protocol) and the second is dynamic.

Answer

Both translations are dynamic NAT entries.

Answer

The router is performing PAT for both translations.

Answer

The outside global address is the same as the outside local address for both entries.

Question 2

A network engineer runs the following command on Router R5:

R5# show mpls ldp neighbor

Peer LDP Ident: 10.0.0.2:0, Local LDP Ident: 10.0.0.5:0
        TCP connection: 10.0.0.2.646 - 10.0.0.5.646
        State: Oper; Msgs sent/rcvd: 123/120; Downstream
        Up time: 01:23:45
        LDP discovery sources:
          GigabitEthernet0/0, Src IP addr: 10.0.1.2
        Addresses bound to peer LDP Ident:
          10.0.0.2        10.0.1.2        192.168.1.1

Based on this output, what can be concluded?

Accepted Answer

The LDP neighbor is reachable via GigabitEthernet0/0.. The output shows an LDP neighbor with peer LDP identifier 10.0.0.2:0. The state is 'Oper' (operational). The discovery source is GigabitEthernet0/0 with source IP 10.0.1.2. The peer's addresses include 10.0.0.2, 10.0.1.2, and 192.168.1.1. The key conclusion is that the LDP session is established and operational.

Answer

The LDP session is down because the state is 'Oper'.

Answer

The local LDP identifier is 10.0.0.2:0.

Answer

The LDP session has been up for 1 hour 23 minutes 45 seconds.

Question 3

A network engineer runs the following command on Router R6:

R6# show ip pim neighbor

PIM Neighbor Table
Mode: B - Bidir Capable, DR - Designated Router, N - Default DR Priority,
      S - State Refresh Capable, G - GenID Capable, L - DR Load Balancing Capable
Neighbor Address     Interface          Uptime    Expires    Mode
10.0.0.2             GigabitEthernet0/0 02:15:30  00:01:25   DR (DR)
10.0.0.3             GigabitEthernet0/0 02:15:28  00:01:27   B S

Based on this output, what can be concluded?

Accepted Answer

The neighbor 10.0.0.2 is the PIM Designated Router.. The output shows PIM neighbors on interface GigabitEthernet0/0. The neighbor 10.0.0.2 has mode 'DR (DR)', indicating it is the Designated Router on this segment. The neighbor 10.0.0.3 has mode 'B S', meaning it is Bidir capable and State Refresh capable. The key is that R6 itself is not the DR because the neighbor 10.0.0.2 is marked as DR.

Answer

Router R6 is the PIM Designated Router on this segment.

Answer

The neighbor 10.0.0.3 supports bidirectional PIM.

Answer

Both neighbors are capable of state refresh.

Question 4

Given the following SNMP configuration on a Cisco IOS-XE router:

snmp-server community public RO
snmp-server community private RW
snmp-server location Building-A
snmp-server contact admin@example.com
snmp-server enable traps snmp linkdown linkup
snmp-server host 192.168.1.100 version 2c public

What is the effect of this configuration?

Accepted Answer

The router will send SNMP traps to 192.168.1.100 using community string 'public' for linkdown and linkup events.. The configuration enables SNMPv2c with read-only (RO) and read-write (RW) community strings, sets location and contact information, enables linkdown and linkup traps, and sends traps to the NMS at 192.168.1.100 using community 'public'.

Answer

The router will send SNMP traps to 192.168.1.100 using community string 'private' for all SNMP traps.

Answer

The router will only accept SNMP read requests using community 'public' and write requests using community 'private'.

Answer

The router will send SNMPv3 traps to 192.168.1.100 using authentication.

Question 5

Consider the following partial syslog configuration on a Cisco IOS-XE switch:

logging host 10.10.10.1 transport udp port 514
logging trap 6
logging source-interface Loopback0
logging on

Which statement is true about this configuration?

Accepted Answer

Syslog messages will be sourced from the IP address of Loopback0 interface.. The configuration sends syslog messages to 10.10.10.1 via UDP port 514, with severity level 6 (Informational) and above, sourced from Loopback0, with logging enabled.

Answer

Syslog messages with severity level 7 (Debugging) will be sent to 10.10.10.1.

Answer

The syslog server must be configured to receive messages on TCP port 514.

Answer

Only syslog messages with severity level 6 (Informational) will be sent.

Question 6

Given the following SNMPv3 configuration on a Cisco IOS-XE router:

snmp-server group ADMIN v3 priv write ADMINVIEW
snmp-server user admin ADMIN v3 auth sha cisco123 priv aes 128 cisco456
snmp-server view ADMINVIEW iso included

What is missing or incorrect in this configuration?

Accepted Answer

The view 'ADMINVIEW' includes the entire ISO tree, which might be too permissive for a restricted write view.. The SNMPv3 user 'admin' is configured with authentication (SHA) and privacy (AES 128), and the group 'ADMIN' is set with write access to view 'ADMINVIEW'. However, the view 'ADMINVIEW' only includes the 'iso' subtree, which is too broad and may not be appropriate for a restricted view. Additionally, the configuration lacks an 'snmp-server host' command to send traps or informs, but that is not strictly required for SNMP access.

Answer

The SNMPv3 user 'admin' must also specify an engine ID for the router.

Answer

The privacy password 'cisco456' must be at least 8 characters long.

Answer

The group 'ADMIN' must be configured with a read view to allow SNMP get operations.

Question 7

Examine this SNMP configuration snippet from a Cisco IOS-XE router:

snmp-server community MyComm RO 10
access-list 10 permit 192.168.1.0 0.0.0.255

What is the effect of this configuration?

Accepted Answer

SNMP read requests from any host in the 192.168.1.0/24 network using community 'MyComm' will be accepted.. The community string 'MyComm' is configured with read-only access and is restricted by access-list 10, which permits only the 192.168.1.0/24 network.

Answer

SNMP read and write requests from 192.168.1.0/24 using community 'MyComm' will be accepted.

Answer

Only SNMP requests from the 192.168.1.0/24 network are allowed, regardless of community string.

Answer

The access-list 10 is incomplete; it needs a deny statement to block other traffic.

Question 8

Given the following syslog configuration on a Cisco IOS-XE router:

logging buffered 4096 warnings
logging console warnings
logging monitor warnings
logging trap warnings

Which statement is true?

Accepted Answer

The router will store up to 4096 syslog messages in the internal buffer, but only those with severity 'warnings' or higher.. All four logging destinations (buffer, console, monitor, trap) are set to severity level 'warnings' (level 4). This means only messages with severity 0-4 are logged to each destination.

Answer

Syslog messages with severity 'debugging' (level 7) will be displayed on the console.

Answer

Syslog messages will be sent to a remote syslog server using the 'trap' facility.

Answer

The 'monitor' destination refers to logging to the console line.

Question 9

Consider this SNMP configuration on a Cisco IOS-XE switch:

snmp-server community public RO
snmp-server community private RW
snmp-server ifindex persist

What is the purpose of the 'snmp-server ifindex persist' command?

Accepted Answer

It prevents SNMP interface indices from changing after a router reload or interface configuration change.. The 'snmp-server ifindex persist' command ensures that SNMP interface indices (ifIndex) remain consistent across reboots, which is important for NMS systems that rely on stable interface identifiers.

Answer

It enables SNMP traps for interface status changes.

Answer

It forces SNMP to use persistent storage for community strings.

Answer

It allows SNMP to index interfaces by their names instead of numbers.

Question 10

What is the default syslog severity level for console logging on a Cisco IOS device?

Accepted Answer

debugging (level 7). The default console logging severity level is 'debugging' (level 7), meaning all messages are displayed on the console by default.

Answer

informational (level 6)

Answer

warnings (level 4)

Answer

errors (level 3)

Question 11

Which SNMP version introduced the use of a username and authentication/password framework, without encryption?

Accepted Answer

SNMPv3. SNMPv3 introduced a security model with usernames, authentication, and privacy, but SNMPv3 noAuthNoPriv provides authentication without encryption.

Answer

SNMPv1

Answer

SNMPv2c

Answer

SNMPv2u

Question 12

What is the default SNMP trap port number?

Accepted Answer

UDP 162. The default UDP port for SNMP traps is 162, as defined by IANA.

Answer

UDP 161

Answer

TCP 161

Answer

TCP 162

Question 13

Drag and drop the steps of SNMP trap generation and forwarding into the correct order, from first to last.

Accepted Answer

Agent detects event matching a trap condition. The SNMP agent monitors the device for a defined event, then builds a trap message including the OID and value, encapsulates it in a UDP packet, looks up the trap destination in the SNMP configuration, and finally forwards the packet to the NMS.

Question 14

Drag and drop the steps of syslog message generation and storage into the correct order, from first to last.

Accepted Answer

Application or kernel generates syslog message. A process or kernel generates a syslog message with a facility and severity, the syslogd daemon compares the severity to the configured logging level, then writes the message to the local buffer, optionally forwards it to a remote syslog server, and finally the message is stored or displayed.

Question 15

Drag and drop the steps of SNMPv3 secure agent configuration into the correct order, from first to last.

Accepted Answer

Enable SNMP agent with snmp-server command. First, you must enable the SNMP agent with snmp-server. Then define the SNMPv3 group and associate it with a security model. Next, create the user and assign authentication and privacy passwords. Finally, restrict access using an ACL to limit which NMS can poll the agent.