mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Examine the following EEM applet configuration:…
Examine the following EEM applet configuration:
!--- event manager applet LOGIN_ALERT event syslog occurs 1 period 60 action 1.0 syslog msg "Login event detected" !---
What is the problem with this configuration?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The 'event syslog occurs' command is missing the required 'pattern' keyword.
The 'event syslog occurs' command requires a pattern to match against syslog messages. Without a pattern, the applet will never trigger because the event is not properly defined. The correct syntax is 'event syslog pattern <string> occurs <number> period <seconds>'.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The 'event syslog occurs' command is missing the required 'pattern' keyword.
Why this is correct
Correct. The event must specify a pattern to match; otherwise, the applet will not trigger.
- ✗
The period of 60 seconds is too short and will cause high CPU usage.
Why it's wrong here
Incorrect. The period value is valid; the issue is the missing pattern.
- ✗
The 'syslog msg' action cannot be used in the same applet as 'event syslog occurs'.
Why it's wrong here
Incorrect. The 'syslog msg' action can be used in any EEM applet.
- ✗
The applet will trigger on every syslog message, which is not the intended behavior.
Why it's wrong here
Incorrect. Without a pattern, the event is invalid and the applet will not trigger at all.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,966 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.