mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Notices that the syslog server at 10.1.1.100 is…
A network engineer notices that the syslog server at 10.1.1.100 is not receiving any log messages from a Cisco router running IOS-XE 16.9. The engineer has configured 'logging host 10.1.1.100' and 'logging trap debugging'. The router can ping the syslog server successfully. What is the most likely cause of the missing syslog messages?
⚠ Common exam trap
Cisco often tests the 'logging on' command as a hidden prerequisite that candidates overlook, assuming that configuring 'logging host' alone is sufficient to start sending syslog messages.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The 'logging on' command is not configured globally.
The 'logging on' command is required globally to enable syslog message generation on Cisco IOS-XE devices. Without it, the router will not send any log messages to any destination, including the configured syslog server at 10.1.1.100, even though the 'logging host' and 'logging trap debugging' commands are present. The successful ping confirms IP connectivity, so the issue is that logging is disabled at the global level.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The 'logging on' command is not configured globally.
Why this is correct
Correct because 'logging on' must be enabled to allow any syslog messages to be sent to a remote server. Without it, all syslog output is suppressed.
- ✗
The syslog server is using UDP port 514, but the router is sending over TCP.
Why it's wrong here
Incorrect because by default, Cisco IOS uses UDP port 514 for syslog unless explicitly configured with 'logging host <ip> transport tcp'.
- ✗
The 'logging source-interface' is set to a loopback that is not advertised in the routing table.
Why it's wrong here
Incorrect because while a missing source-interface can cause reachability issues, the default behavior uses the outgoing interface IP, which is reachable if the ping succeeds. The primary issue is more fundamental.
- ✗
The 'logging buffered' command is overriding the remote logging configuration.
Why it's wrong here
Incorrect because 'logging buffered' only affects local buffer logging and does not disable remote syslog; both can coexist.
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,966-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.