mediumMultiple Choice
300-410 Practice Question: Runs the following command to troubleshoot an EEM…
A network engineer runs the following command to troubleshoot an EEM issue:
R1# show event manager policy active
No. Class Type Version Time Created Name 1 applet system 1.0 Mar 1 00:00:12 2025 TRACK-INTERFACE Event Type: syslog (pattern OSPF-5-ADJCHG) Action: cli command 'show ip route'
What does this output indicate?
⚠ Common exam trap
The trap is assuming 'policy active' means the policy is currently executing; it actually means the policy is registered and enabled, not that it has fired.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The EEM applet 'TRACK-INTERFACE' is active and will execute 'show ip route' when a syslog message matching 'OSPF-5-ADJCHG' is generated.
The output shows the EEM applet 'TRACK-INTERFACE' is active (registered) with a syslog event pattern 'OSPF-5-ADJCHG' and an action to run 'show ip route'. This means it will execute that CLI command when a matching syslog message is generated. The 'policy active' command lists registered policies, not execution history.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The EEM applet 'TRACK-INTERFACE' is active and will execute 'show ip route' when a syslog message matching 'OSPF-5-ADJCHG' is generated.
Why this is correct
The active policy list confirms the applet is registered and running. Its syslog event type with pattern OSPF-5-ADJCHG triggers the configured CLI action, so 'show ip route' runs whenever a matching OSPF adjacency-change syslog message appears.
- ✗
The EEM applet 'TRACK-INTERFACE' is currently executing and has run 'show ip route'.
Why it's wrong here
The output lists the applet's registered definition, not a live execution trace; 'show ip route' appears as configured action text, not captured output. No trigger has fired. This command is the right choice when confirming an applet is loaded and enabled, not when checking whether it has just run.
- ✗
The EEM applet 'TRACK-INTERFACE' has been triggered and the output of 'show ip route' is displayed.
Why it's wrong here
The listing displays the applet's configured action string, not the command's output; no syslog trigger has fired and no CLI result is captured here. Engineers expect 'active' to mean executing, but it denotes enabled registration. Use this command to verify an applet is loaded; use syslog or 'show event manager history events' to confirm execution.
- ✗
The EEM applet 'TRACK-INTERFACE' is inactive and needs to be enabled.
Why it's wrong here
The active policy list confirms the applet is registered and enabled; it is not inactive. The listing shows configuration, not runtime state, so no enablement is pending. Engineers confuse 'active' with 'running', but this command simply enumerates loaded policies, which is what you would check to verify an applet exists after creating it.
Visual reference
Quick reference
Routing Protocol Comparison
| Protocol | Metric | Max Hops | Algorithm | Type |
|---|---|---|---|---|
| RIP v2 | Hop count | 15 | Bellman-Ford | Distance vector |
| OSPF | Cost (bandwidth) | Unlimited | Dijkstra (SPF) | Link state |
| EIGRP | Composite metric | Unlimited | DUAL | Hybrid |
| IS-IS | Cost | Unlimited | Dijkstra | Link state |
| BGP | Policy / attributes | Unlimited | Path vector | Path vector |
RIP's 15-hop limit makes it unsuitable for large networks. OSPF and EIGRP dominate modern enterprise deployments.
Go deeper
Related to this question
About these practice questions
One of 1,401 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Cisco exam blueprint
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.