A network engineer is configuring syslog on a router to send logs to two different servers: one for security monitoring and one for troubleshooting. The engineer wants to send all logs to the security server but only warnings and higher to the troubleshooting server. Which configuration is correct?

logging host 192.168.1.10; logging host 192.168.1.11; logging trap informational; logging trap warnings on 192.168.1.11

logging host 192.168.1.10; logging host 192.168.1.11; logging trap informational; logging trap warnings

logging host 192.168.1.10; logging host 192.168.1.11; logging trap warnings

A network admin is configuring SNMPv3 on a router for a monitoring system that requires authentication and privacy. The admin wants to restrict the SNMP user to only view interface statistics. Which configuration is correct?

snmp-server group GRP v3 priv; snmp-server user monitor GRP v3 auth sha Secret123 priv aes 256 Secret456

snmp-server community monitor RO

snmp-server view ifview ifEntry included; snmp-server group GRP v3 auth read ifview; snmp-server user monitor GRP v3 auth sha Secret123

snmp-server view ifview ifEntry included; snmp-server group GRP v3 priv read ifview; snmp-server user monitor GRP v3 auth sha Secret123 priv aes 256 Secret456

A security policy requires that all network management traffic be encrypted and authenticated. The NMS supports SNMPv3 with authPriv. You need to configure the router to allow the NMS to read interface statistics. Which configuration is correct?

snmp-server group GRP v3 noauth; snmp-server user admin GRP v3

snmp-server group GRP v3 priv; snmp-server user admin GRP v3 auth sha Secret123 priv aes 256 Secret456

snmp-server group GRP v3 auth; snmp-server user admin GRP v3 auth sha Secret123

snmp-server community public RO

A network engineer is analyzing syslog messages from a router to identify a security incident. The engineer notices that the logs do not include the exact time of the events. What should the engineer do to ensure future logs have accurate timestamps?

Set the time zone with 'clock timezone'

Enable 'service timestamps log datetime'

Use 'logging buffered' to store logs locally

A network admin needs to send syslog messages from a router to a central log server for compliance. The log server is at 192.168.1.10. The admin wants to include timestamps and ensure that only messages with severity 'warning' and higher are sent. Which configuration achieves this?

logging host 192.168.1.10; logging console warnings

logging host 192.168.1.10; logging trap warnings; service timestamps log datetime

logging host 192.168.1.10; logging buffered warnings

logging host 192.168.1.10; logging trap informational; service timestamps log uptime

CCIE Enterprise Infrastructure

Domain 4Objective 3

System Management CCIE-ENTERPRISE-INFRASTRUCTURE Practice Questions (Page 6)

Part of the Infrastructure Security and Services domain, which accounts for 15% of the CCIE-ENTERPRISE-INFRASTRUCTURE exam. Cisco does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 1–2 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

8concepts

15%of the exam

Questions 26–30

26expert · hard
A network engineer is configuring syslog on a router to send logs to two different servers: one for security monitoring and one for troubleshooting. The engineer wants to send all logs to the security server but only warnings and higher to the troubleshooting server. Which configuration is correct?
Select an answer first
27expert · hard
A network admin is configuring SNMPv3 on a router for a monitoring system that requires authentication and privacy. The admin wants to restrict the SNMP user to only view interface statistics. Which configuration is correct?
Select an answer first
28application · medium
A security policy requires that all network management traffic be encrypted and authenticated. The NMS supports SNMPv3 with authPriv. You need to configure the router to allow the NMS to read interface statistics. Which configuration is correct?
Select an answer first
29expert · medium
A network engineer is analyzing syslog messages from a router to identify a security incident. The engineer notices that the logs do not include the exact time of the events. What should the engineer do to ensure future logs have accurate timestamps?
Select an answer first
30application · medium
A network admin needs to send syslog messages from a router to a central log server for compliance. The log server is at 192.168.1.10. The admin wants to include timestamps and ensure that only messages with severity 'warning' and higher are sent. Which configuration achieves this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCIE-ENTERPRISE-INFRASTRUCTURE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Cisco. “CCIE-ENTERPRISE-INFRASTRUCTURE” is a trademark of its owner, used for identification only.