4.5 Describe the Use of Syslog Features, Including Facilities and Severity Levels 200-301 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which syslog facility code is commonly used by network devices for locally generated messages when no other facility is specified?

   • AFacility 4 (auth)
   • BFacility 23 (local7)
   • CFacility 16 (local0)
   • DFacility 0 (kern)
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A network engineer is configuring a Cisco router to send syslog messages to a central server. The engineer wants to receive messages about normal but significant events, such as a user logging in or a configuration change, but does not want to receive debug messages. Which severity level should be configured as the trap level?

   • Aerrors (3)
   • Binformational (6)
   • Cnotifications (5)
   • Ddebugging (7)
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which syslog severity level indicates a system is unusable and requires immediate attention?

   • ALevel 0 (Emergency)
   • BLevel 3 (Error)
   • CLevel 1 (Alert)
   • DLevel 2 (Critical)
   Reveal Solution Discussion Select an answer first
5. 19expert · hard

   A network engineer is troubleshooting a Cisco router that is not sending syslog messages to the remote server. The engineer has verified that the router's logging is enabled, the server is reachable, and the trap level is set to 7. The engineer also notices that the router's clock is not synchronized. What is the most likely cause of the issue?

   • AThe router's clock is not synchronized, so messages are not being generated.
   • BThe syslog server is configured to listen on a different port than the router is sending to.
   • CThe router's syslog messages are being sent to the console instead of the server.
   • DThe router's logging buffer is full, preventing messages from being sent.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A network engineer is troubleshooting a Cisco switch that is experiencing intermittent connectivity issues. The engineer wants to enable detailed logging to capture debug messages for a short period, but does not want to overwhelm the central syslog server with debug messages on a permanent basis. Which approach should the engineer take?

   • ATemporarily set the logging trap level to debugging, capture the needed messages, then set it back to a lower level
   • BIncrease the logging buffer size to store debug messages locally
   • CSet the logging trap level to debugging and leave it configured
   • DUse the logging console command to capture debug messages
   Reveal Solution Discussion Select an answer first