hardMultiple SelectObjective-mapped
300-410 Practice Question: An engineer wants to use EEM to automatically…
An engineer wants to use EEM to automatically back up the running configuration to a TFTP server whenever a 'write memory' command is executed. Which TWO configuration steps are required? (Choose TWO.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Configure 'event cli pattern "write memory" sync no' under the applet.
The 'event cli' with 'sync no' is needed to avoid blocking the CLI. The 'action cli command' must use the 'copy running-config tftp:' command. The 'event manager applet' is correct, not 'event manager policy'. The 'event syslog' with pattern 'WRITE' is not precise enough. The 'action cli command' should not use 'enable' as a separate action because the applet runs in the same privilege level as the triggering user.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Configure 'event cli pattern "write memory" sync no' under the applet.
Why this is correct
Correct. This event triggers on the 'write memory' command without synchronizing, allowing the backup to proceed asynchronously.
- ✓
Use 'action cli command "copy running-config tftp://10.1.1.1/backup-config"' to perform the backup.
Why this is correct
Correct. This action executes the copy command to send the running config to the TFTP server.
- ✗
Define the applet using the 'event manager policy' command instead of 'event manager applet'.
Why it's wrong here
Incorrect. 'event manager policy' is used for Tcl policies, not CLI applets.
- ✗
Add an 'event syslog pattern "WRITE"' to detect the write memory operation.
Why it's wrong here
Incorrect. The syslog message for 'write memory' does not contain 'WRITE' consistently; using 'event cli' is more reliable.
- ✗
Include an 'action cli command "enable"' before the copy command to ensure privileged access.
Why it's wrong here
Incorrect. The applet inherits the privilege level of the user who triggered it; an explicit 'enable' is not required and may cause issues.
Go deeper
Related to this question
About these practice questions
One of 1,966 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.