mediumMultiple Choice
300-410 Practice Question: Runs the following command on Router R1: R1# show…
A network engineer runs the following command on Router R1:
R1# show event manager policy registered
No. Type Time Created Name 1 applet 00:01:23 UTC Mar 1 2025 OSPF_Neighbor_Down
R1# show ip ospf neighbor Neighbor ID Pri State Dead Time Address Interface 10.1.1.2 1 FULL/DR 00:00:36 192.168.1.2 GigabitEthernet0/0
Based on this output, what is the most likely conclusion?
⚠ Common exam trap
The trap is assuming that a registered EEM policy means it has executed — candidates must distinguish between policy registration (armed) and policy triggering (fired), and correlate with the actual neighbor state.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The EEM policy is registered but not yet triggered because the OSPF neighbor is up.
The output shows the EEM policy 'OSPF_Neighbor_Down' is registered (listed in 'show event manager policy registered'), but the OSPF neighbor table shows the neighbor 10.1.1.2 in FULL/DR state with a Dead Time of 36 seconds, meaning the neighbor is up and stable. Therefore, the EEM policy has not been triggered because its triggering condition (OSPF neighbor down) has not occurred. The policy is simply waiting for the event.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The OSPF neighbor is down.
Why it's wrong here
The neighbour state is FULL/DR, meaning the adjacency formed successfully and is stable. Down would be the conclusion if the state showed DOWN, INIT or EXSTART, or if the neighbour were absent from the table.
- ✗
The EEM policy has been triggered.
Why it's wrong here
Registration only confirms the applet exists; the FULL/DR neighbour with a healthy Dead Time shows no down event occurred, so no trigger fired. A triggered policy would be the conclusion if the neighbour had actually dropped.
- ✓
The EEM policy is registered but not yet triggered because the OSPF neighbor is up.
Why this is correct
The EEM applet OSPF_Neighbor_Down is registered and awaiting its trigger event, while the neighbour table shows 10.1.1.2 in FULL/DR state with 36 seconds of dead time remaining. Since the adjacency is established rather than down, the policy's syslog or SNMP trigger condition has not fired, satisfying the stem's requirement to explain the absence of policy execution.
- ✗
The EEM policy is misconfigured.
Why it's wrong here
The policy is registered and the neighbour shows FULL/DR with Dead Time counting down normally, so nothing indicates misconfiguration. Misconfiguration would be the conclusion if the applet failed to register or referenced invalid OSPF triggers.
Visual reference
Quick reference
Routing Protocol Comparison
| Protocol | Metric | Max Hops | Algorithm | Type |
|---|---|---|---|---|
| RIP v2 | Hop count | 15 | Bellman-Ford | Distance vector |
| OSPF | Cost (bandwidth) | Unlimited | Dijkstra (SPF) | Link state |
| EIGRP | Composite metric | Unlimited | DUAL | Hybrid |
| IS-IS | Cost | Unlimited | Dijkstra | Link state |
| BGP | Policy / attributes | Unlimited | Path vector | Path vector |
RIP's 15-hop limit makes it unsuitable for large networks. OSPF and EIGRP dominate modern enterprise deployments.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,401 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.