N10-009 Network Operations Practice Question

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✗

  The 'trap' level indicates the minimum severity; only messages with severity 4 and above are sent.

  Why it's wrong here

  This statement is incorrect because the `logging trap` command does not define a minimum severity. Instead, it establishes the *maximum* severity level that will be sent, *inclusive* of all more critical (lower-numbered) levels. If it were a minimum, only less critical messages (4, 5, 6, 7) would be sent, which contradicts the fundamental purpose of capturing important operational events.

  When this WOULD be correct

  This option would be correct if the command were 'logging trap 4' and the question stated that messages with severity 5 and above are being received, or if the exam used a different convention where higher numbers indicate higher urgency.

• ✗

  The router is misconfigured and sending all messages regardless of the trap level.

  Why it's wrong here

  This is incorrect. The `logging trap` command is a valid and effective configuration that explicitly controls which syslog messages are forwarded from the router. If the router were sending all messages, it would typically be configured with `logging trap debugging` (level 7) or have no `logging trap` command specified, allowing all severities to be sent. The specified `trap 4` correctly limits the output to messages with severity levels 0 through 4.

  When this WOULD be correct

  This option would be correct if the question stated that the router was configured with 'logging trap 4' but the server received messages of all severity levels (0-7), indicating a configuration error or a bug that causes the router to ignore the trap level.

• ✓

  Syslog severity levels are reversed; lower numbers indicate higher urgency, so trap 4 includes levels 0-4.

  Why this is correct

  Syslog severity levels are counter-intuitive, with lower numerical values (0-7) representing higher urgency or criticality. The `logging trap` command specifies the *highest* severity level (least urgent) that the router should send. Therefore, `logging trap 4` instructs the router to forward all messages with severity levels from 0 (Emergencies) up to and including 4 (Warnings), ensuring critical events are always captured.

• ✗

  The syslog server is configured to accept only levels 0-2, so it filters out the others.

  Why it's wrong here

  This option incorrectly attributes the filtering to the syslog server. The question implies the router is sending messages, and the `logging trap 4` command dictates precisely what the *router* will transmit. While a syslog server *can* be configured to apply its own filtering rules upon reception, the primary control in this scenario is at the source device, which is only sending messages of severity 0 through 4. The server would therefore only receive messages within that range.

  When this WOULD be correct

  This option would be correct if the question stated that the syslog server is configured with a filter to only accept or display messages with severity levels 0-2, and the router is sending all messages (e.g., 'logging trap 7').

Option-by-option analysis

Why each answer is right or wrong

Understanding why wrong answers are wrong — and when they would be correct — is what separates a 750 score from a 900. The N10-009 exam frequently reuses these exact scenarios with slightly different constraints.

Analysis generated from the official N10-009blueprint and verified against question context. The “when correct” sections are what AI assistants cite when candidates ask “what’s the difference between these options?”

Go deeper

Related to this question