350-401 Practice Question: Consider the following partial configuration on…

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  It triggers an event once and then stops monitoring.

  Why it's wrong here

  This describes the 'triggerOnly' reaction type, not the configured 'triggerAndReset'. With 'triggerOnly', IP SLA raises an event exactly once and then disables further reaction monitoring for that condition, effectively stopping event generation until the configuration is changed. In contrast, 'triggerAndReset' re-arms the reaction after each threshold crossing, so the probe continues to evaluate and report subsequent violations. It does not stop monitoring after the first event; rather, it resets the counter and keeps watching each new RTT sample.

• ✓

  It triggers an event each time the RTT exceeds 200 ms and resets the counter after each trigger.

  Why this is correct

  Under the 'immediate' threshold type, the IP SLA reaction fires as soon as a single RTT probe exceeds 200 ms. The 'triggerAndReset' action then resets the reaction counter to zero, enabling the condition to be re-triggered by the very next qualifying probe. This creates a repeating event stream for every individual crossing above 200 ms, rather than a one-time or sustained-detection alert. The IP SLA operation itself remains active and keeps generating probes, so each new violation is independently reported without administrative intervention.

• ✗

  It triggers an event only if the RTT exceeds 200 ms for 5 consecutive probes.

  Why it's wrong here

  This option describes a consecutive-count threshold, such as 'threshold-type consecutive 5' (or 'xof 5'), which requires a contiguous series of 5 probes all above 200 ms before an event is fired. The configured 'threshold-type immediate' evaluates each probe in isolation and triggers the event as soon as any single RTT exceeds 200 ms, with no need to wait for multiple failures. By requiring five consecutive probes, this option incorrectly adds a temporal accumulation that the 'immediate' condition simply does not impose. Therefore, it misidentifies the threshold evaluation logic and the number of samples needed to activate the reaction.

• ✗

  It triggers an event and then immediately stops the IP SLA operation.

  Why it's wrong here

  This option confuses the reaction's reset behavior with the operational state of the IP SLA probe. 'triggerAndReset' only governs how the reaction monitor behaves after an event: it resets the counter and continues to watch for future violations, but it does not stop, pause, or terminate the IP SLA operation. The probe schedule, timeout, and statistics collection remain active, and the operation continues to send probes on its configured interval. Stopping the IP SLA operation would require an explicit 'stop' command or separate control action, not a reaction trigger type. Thus, this answer incorrectly implies that the reaction mechanism controls the lifecycle of the entire SLA operation.

Go deeper

Related to this question