200-901 Cisco Platforms and Development Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  event interface

  Why it's wrong here

  Interface events fire on line-protocol or interface-state transitions, such as a link going down, not on log output. The applet would never trigger from the syslog message. It is the right trigger when you want automation driven by an interface coming up or going down.

• ✗

  event timer

  Why it's wrong here

  Timer events fire on a cron-like schedule or countdown, independent of any device output. No syslog message can start the applet. It is the correct trigger for periodic tasks, such as running a command every hour or after a fixed delay.

• ✗

  event cli match

  Why it's wrong here

  CLI match triggers on commands typed at the prompt, not on syslog messages generated by the device. The applet would react to operator input rather than the log event. It suits intercepting or authorising specific CLI commands.

• ✓

  event syslog pattern

  Why this is correct

  The event syslog pattern trigger fires the applet when an incoming syslog message matches a specified regular expression. That directly satisfies the requirement to react to a specific syslog message, unlike timer or interface-based triggers which cannot inspect log content.