hardMultiple ChoiceObjective-mapped
300-410 Configures EEM to monitor memory usage on R1 Practice Question
A network engineer configures EEM to monitor memory usage on R1. R1 has: event manager applet MEM-MONITOR event snmp oid 1.3.6.1.4.1.9.9.48.1.1.1.6.1 get-type exact entry-op gt entry-val 90 poll-interval 10 action 1.0 cli command "enable" action 2.0 cli command "show processes memory" action 3.0 syslog msg "High memory usage detected". After a few days, the engineer notices that the applet never triggers, even though memory usage exceeds 90%. Router R2 shows: memory usage is at 95%, but no syslog from EEM. What is the root cause?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The SNMP OID is for free memory, and the condition checks if free memory is greater than 90%, which is not met when memory is low.
The SNMP OID used (1.3.6.1.4.1.9.9.48.1.1.1.6.1) is for the free memory, not used memory. The applet checks if free memory is greater than 90%, which is false when memory is low. The correct OID should be for used memory or the comparison operator should be 'lt' for free memory below 10%.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The SNMP OID is for free memory, and the condition checks if free memory is greater than 90%, which is not met when memory is low.
Why this is correct
The OID returns free memory; the applet triggers only when free memory >90%, which never happens when memory is high.
- ✗
The poll-interval of 10 seconds is too short and causes the applet to be suppressed.
Why it's wrong here
A short poll interval does not prevent triggering; the condition is never true.
- ✗
The SNMP community string is not configured, so the OID cannot be polled.
Why it's wrong here
No mention of SNMP community; the issue is the OID logic.
- ✗
The applet requires 'event manager applet MEM-MONITOR trigger' to start.
Why it's wrong here
The applet is configured with an event trigger; no additional trigger command is needed.
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,966 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.