CCNA 200-125 Exam: Syslog Questions With Answers

Rate this post
  1. Which logging command can enable administrators to correlate syslog messages with millisecond precision?
    • A. logging buffered 4
    • B. logging host 10.2.0.21
    • C. logging console
    • D. service timestamps log datetime msec*
    • E. logging monitor

    Show (Hide) Explanation/Reference
    The “service timestamps log” command configures the system to apply a time stamp to logging messages. The time-stamp format for datetime is MMM DD HH:MM:SS, where MMM is the month, DD is the date, HH is the hour (in 24-hour notation), MM is the minute, and SS is the second. With the additional keyword msec, the system includes milliseconds in the time stamp, in the format HH:DD:MM:SS.mmm, where .mmm is milliseconds.
  2. If you configure syslog messages without specifying the logging trap level, which log messages will the router send?
    • A. informational messages only
    • B. warning and error conditions only
    • C. normal but significant conditions only
    • D. error conditions only
    • E. all levels except debugging*

    Show (Hide) Explanation/Reference
    Syslog levels are listed below

    Level Keyword Description
    0 emergencies System is unusable
    1 alerts Immediate action is needed
    2 critical Critical conditions exist
    3 errors Error conditions exist
    4 warnings Warning conditions exist
    5 notification Normal, but significant, conditions exist
    6 informational Informational messages
    7 debugging Debugging messages

    The highest level is level 0 (emergencies). The lowest level is level 7. By default, the router will send informational messages (level 6). That means it will send all the syslog messages from level 0 to 6.

  3. If you are configuring syslog messages specifying „logging trap warning‟, which log messages will the router send?
    • A. 0-4*
    • B. 0-5
    • C. 0-2
    • D. 0-6
    • E. 0-1

    Show (Hide) Explanation/Reference
    Syslog levels are listed below

    Level Keyword Description
    0 emergencies System is unusable
    1 alerts Immediate action is needed
    2 critical Critical conditions exist
    3 errors Error conditions exist
    4 warnings Warning conditions exist
    5 notification Normal, but significant, conditions exist
    6 informational Informational messages
    7 debugging Debugging messages

    If we specify “logging trap warning” then logging messages from “emergencies” to “warnings” are sent out.

  4. If you configure syslog messages without specifying the logging trap level, which log messages will the router send?
    • A. 0-4
    • B. 0-5
    • C. 0-2
    • D. 0-6*
    • E. 0-1

    Show (Hide) Explanation/Reference
    Syslog levels are listed below:

    Level Keyword Description
    0 emergencies System is unusable
    1 alerts Immediate action is needed
    2 critical Critical conditions exist
    3 errors Error conditions exist
    4 warnings Warning conditions exist
    5 notification Normal, but significant, conditions exist
    6 informational Informational messages
    7 debugging Debugging messages

    The highest level is level 0 (emergencies). The lowest level is level 7. By default, the router will send informational messages (level 6). That means it will send all the syslog messages from level 0 to 6.

  5. Two statements about syslog logging?
    • A. Syslog logging is disabled by default
    • B. Messages are stored in the internal memory of device*
    • C. Messages can be erased when device reboots*
    • D. Messages are stored external to the device
    • E. ?
    • F. ?

    Show (Hide) Explanation/Reference
    By default if we type “show logging” command we will see the Syslog logging has been enabled -> A is not correct.

    The syslog messages are stored in the internal buffer of the device. The buffer size is limited to few kilobytes. However, when the device reboots, these syslog messages are lost -> B is correct; C is correct; D is not correct.

  6. Refer to the exhibit. What is the cause of the Syslog output messages?

    • A. The EIGRP neighbor on Fa0/1 went down due to a failed link.
    • B. The EIGRP neighbor connected to Fa0/1 is participating in a different EIGRP process, causing the adjacency to go down.
    • C. A shut command was executed on interface Fa0/1, causing the EIGRP adjacency to go down.*
    • D. Interface Fa0/1 has become error disabled, causing the EIGRP adjacency to go down.

    Show (Hide) Explanation/Reference
    From the second line of the output, we learned that Fa0/1 interface was shut down so we see the “changed state to administratively down”. The third and fourth line is the result of this action, which cause Fa0/1 interface “changed state to down” and the EIGRP neighbor relationship with 10.10.11.2 was down.
  7. What command instructs the device to timestamp Syslog debug messages in milliseconds?
    • A. service timestamps log datetime localtime
    • B. service timestamps debug datetime msec*
    • C. service timestamps debug datetime localtime
    • D. service timestamps log datetime msec

    Show (Hide) Explanation/Reference
    The “service timestamps debug” command configures the system to apply a time stamp to debugging messages. The time-stamp format for datetime is MMM DD HH:MM:SS, where MMM is the month, DD is the date, HH is the hour (in 24-hour notation), MM is the minute, and SS is the second. With the additional keyword msec, the system includes milliseconds in the time stamp, in the format HH:DD:MM:SS.mmm, where .mmm is milliseconds

    (Reference: http://www.cisco.com/c/en/us/td/docs/ios/fundamentals/command/reference/cf_book/cf_r1.html#wp1030116)

  8. A network administrator enters the following command on a router: logging trap 3. What are three message types that will be sent to the Syslog server? (Choose three)
    • A. informational
    • B. emergency*
    • C. warning
    • D. critical*
    • E. debug
    • F. error*

Related Articles


Leave a Reply

avatar

Send this to a friend