mediumMultiple Choice
300-410 Practice Question: Runs the following command to troubleshoot an EEM…
A network engineer runs the following command to troubleshoot an EEM issue:
R1# show event manager history events
Event History: Event Type : syslog Time : Mar 1 00:05:23 Pattern : OSPF-5-ADJCHG Trigger count : 1
Event Type : timer Time : Mar 1 00:06:00 Timer Type : absolute Timer Name : MY-TIMER Trigger count : 1
What does this output indicate?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Two events have triggered EEM applets: a syslog event matching 'OSPF-5-ADJCHG' and an absolute timer named 'MY-TIMER'.
The output shows the event history for EEM. It lists events that have triggered EEM applets. Each entry shows the event type (syslog, timer, etc.), the time it occurred, specific details (pattern for syslog, timer type and name for timer), and the number of times that event triggered an applet. This helps in troubleshooting which events are being matched.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Two events have triggered EEM applets: a syslog event matching 'OSPF-5-ADJCHG' and an absolute timer named 'MY-TIMER'.
Why this is correct
The history output lists two triggered events: a syslog event matching the OSPF-5-ADJCHG pattern and an absolute timer named MY-TIMER, each with a trigger count of one. This directly satisfies the stem's request to interpret the displayed event history.
- ✗
Two EEM applets are currently registered: one for syslog and one for timer.
Why it's wrong here
History events record past triggers, not currently registered applets; registration is shown by show event manager policy registered. Two events fired once each, which does not establish that two applets remain registered on the device.
- ✗
The OSPF-5-ADJCHG syslog event triggered an applet that executed a timer.
Why it's wrong here
The history lists two independent events, each with trigger count 1; nothing shows the syslog event launching an applet that started the timer. Correlating a syslog trigger to an applet action requires the applet configuration, not this event history output.
- ✗
The timer event is a countdown timer that triggered after 5 minutes and 23 seconds.
Why it's wrong here
The output lists an absolute timer named MY-TIMER that fired at 00:06:00, not a countdown of five minutes twenty-three seconds; that figure is the syslog event's timestamp. Countdown timers appear as Timer Type: countdown, which this entry does not show.
Visual reference
Quick reference
Routing Protocol Comparison
| Protocol | Metric | Max Hops | Algorithm | Type |
|---|---|---|---|---|
| RIP v2 | Hop count | 15 | Bellman-Ford | Distance vector |
| OSPF | Cost (bandwidth) | Unlimited | Dijkstra (SPF) | Link state |
| EIGRP | Composite metric | Unlimited | DUAL | Hybrid |
| IS-IS | Cost | Unlimited | Dijkstra | Link state |
| BGP | Policy / attributes | Unlimited | Path vector | Path vector |
RIP's 15-hop limit makes it unsuitable for large networks. OSPF and EIGRP dominate modern enterprise deployments.
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,401-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.