hardMultiple SelectObjective-mapped
300-410 Practice Question: Which TWO statements about the 'log' keyword in…
Which TWO statements about the 'log' keyword in IPv4 ACL entries are correct? (Choose TWO.)
⚠ Common exam trap
Cisco often tests the misconception that the 'log' keyword logs every packet, when in fact it uses rate-limiting to avoid overwhelming the router's CPU.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The log message includes the source and destination IP addresses and the protocol.
When the 'log' keyword is configured on an ACL entry, the router generates a syslog message that includes the source and destination IP addresses, the protocol (e.g., TCP, UDP, ICMP), and for TCP/UDP, the source and destination port numbers. This logging provides essential information for troubleshooting and security monitoring.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The 'log' keyword causes the router to generate a syslog message for every packet that matches the ACE.
Why it's wrong here
Incorrect. The router logs the first match immediately, then rate-limits subsequent matches, typically logging once every 5 minutes.
- ✓
The log message includes the source and destination IP addresses and the protocol.
Why this is correct
Correct. The log entry typically shows the source IP, destination IP, protocol (e.g., TCP), and the interface where the match occurred.
- ✓
The 'log' keyword can be used with both permit and deny ACEs.
Why this is correct
Correct. You can log matches for both permit and deny entries, though logging denies is more common for troubleshooting.
- ✗
The 'log' keyword is only available in extended ACLs, not standard ACLs.
Why it's wrong here
Incorrect. The 'log' keyword is available in both standard and extended ACLs, though in standard ACLs it only logs the source IP.
- ✗
Using the 'log' keyword significantly improves router performance by offloading logging to the CPU.
Why it's wrong here
Incorrect. Logging consumes CPU resources and can degrade performance if used excessively, especially on high-traffic interfaces.
Visual reference
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,966-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.