mediumMultiple Select
300-410 Practice Question: Which TWO commands would a network engineer use…
Which TWO commands would a network engineer use to verify that syslog messages are being sent to a remote syslog server? (Choose TWO.)
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
show logging
Option A, 'show logging', is correct because on Cisco IOS this command displays the local logging configuration (including the syslog server host address set with 'logging host') and the status of logging to that host, confirming whether messages are being sent to the remote syslog server. Option C, 'show running-config | include logging', is correct because it filters the running configuration for all logging-related lines, revealing the configured 'logging host <ip>' and 'logging trap' level that determine whether and where syslog messages are forwarded. Option B, 'debug logging', is not a valid verification command and would only generate additional debug output rather than confirm the syslog destination. Option D, 'ping <syslog-server-ip>', only tests IP reachability to the server and does not verify that syslog messages are actually being sent or logged. Option E, 'show ip route', merely displays the routing table and provides no information about syslog configuration or message transmission.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
show logging
Why this is correct
show logging displays the logging configuration plus a live tail of generated messages, including the destination host and severity. This confirms messages are actually being produced and forwarded, satisfying the requirement to verify syslog transmission to the remote server.
- ✗
debug logging
Why it's wrong here
debug logging enables conditional logging of messages generated locally on the device; it shows what the router logs, not whether those messages reach the remote server. It would be used to capture specific event detail during troubleshooting, not to confirm remote syslog receipt.
- ✓
show running-config | include logging
Why this is correct
Filtering the running configuration for logging lines reveals the configured hosts, trap severity, source-interface and transport settings. This confirms the router is configured to send syslog to the remote server, though it does not prove messages are actually generated.
- ✗
ping <syslog-server-ip>
Why it's wrong here
Ping tests IP reachability to the syslog server, confirming only that ICMP succeeds; it reveals nothing about whether logging host configuration or message transmission works. Ping is appropriate for basic connectivity troubleshooting, not verifying syslog delivery.
- ✗
show ip route
Why it's wrong here
show ip route displays the routing table, confirming a path exists toward the syslog server's network but not that syslog messages are transmitted or received. It is the correct command for verifying reachability routing, not for validating logging host configuration or message delivery.
Go deeper
Related to this question
About these practice questions
One of 1,401 original 300-410 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.