Home > Syslog Questions

Syslog Questions

January 4th, 2016 Go to comments

Question 1

Where are Syslog messages stored in a router? (Choose three)

A. Flash
B. Syslog Servers
C. TFTP
D. Logging buffer on RAM
E. Console terminal

Answer: B D E

Explanation

By default, switches send the output from system messages and debug privileged EXEC commands to a logging process. The logging process controls the distribution of logging messages to various destinations, such as the logging buffer (on RAM), terminal lines (console terminal), or a UNIX syslog server, depending on your configuration. The process also sends messages to the console.

(Reference: http://www.cisco.com/en/US/docs/switches/lan/catalyst2950/software/release/12.1_9_ea1/configuration/guide/swlog.html#wp1024032)

Note: Syslog messages can be written to a file in Flash memory although it is not a popular place to use. We can configure this feature with the command logging file flash:filename.

Question 2

You have configured Syslog to store level 3 trap. Which type of logs would be created? (Choose four)

A. Emergencies
B. Alerts
C. Errors
D. Warnings
E. Notification
F. Critical

Answer: A B C F

Explanation

The Message Logging is divided into 8 levels as listed below:

Level Keyword Description
0 emergencies System is unusable
1 alerts Immediate action is needed
2 critical Critical conditions exist
3 errors Error conditions exist
4 warnings Warning conditions exist
5 notification Normal, but significant, conditions exist
6 informational Informational messages
7 debugging Debugging messages

The highest level is level 0 (emergencies). The lowest level is level 7. If you specify a level with the “logging console level” command, that level and all the higher levels will be displayed. For example, by using the “logging console warnings” command, all the logging of emergencies, alerts, critical, errors, warnings will be displayed.

In this question level 3 trap is configured so Emergencies, Alerts, critical and Errors messages are displayed.

Question 3

Which of the following command tell the router to include milliseconds in the time stamp of Syslog debug messages?

A. service log timestamps datetime local
B. service timestamps debug datetime msec
C. service timestamps debug datetime localtime
D. service log timestamps datetime msec

 

Answer: B

Explanation

The “service timestamps debug” command configures the system to apply a time stamp to debugging messages. The time-stamp format for datetime is MMM DD HH:MM:SS, where MMM is the month, DD is the date, HH is the hour (in 24-hour notation), MM is the minute, and SS is the second. With the additional keyword msec, the system includes milliseconds in the time stamp, in the format HH:DD:MM:SS.mmm, where .mmm is milliseconds

(Reference: http://www.cisco.com/c/en/us/td/docs/ios/fundamentals/command/reference/cf_book/cf_r1.html#wp1030116)

Question 4

What is the default level of Syslog facility?

A. local4
B. local5
C. local6
D. local7
E. local3

 

Answer: D

Question 5

The network administrator issued the following command on a router:

TUT_ROUTER(config)# logging trap 4

Which Syslog messages will be sent to the administrator? (Choose four)

A. Emergency
B. Notice
C. Alert
D. Error
E. Warning

 

Answer: A C D E

Explanation

The Message Logging is divided into 8 levels as listed below:

Level Keyword Description
0 emergencies System is unusable
1 alerts Immediate action is needed
2 critical Critical conditions exist
3 errors Error conditions exist
4 warnings Warning conditions exist
5 notification Normal, but significant, conditions exist
6 informational Informational messages
7 debugging Debugging messages

If you specify a level with the “logging trap level” command, that level and all the higher levels will be logged. For example, by using the “logging trap 4” command, all the logging of emergencies, alerts, critical, errors, warnings will be logged.

Question 6

The network administrator issued the following command on a router:

TUT_ROUTER(config)# logging trap 3

Which Syslog messages will be sent to the administrator? (Choose three)

A. informational
B. emergency
C. warning
D. critical
E. debug
F. error

 

Answer: B D F

Comments
  1. No comments yet.
  1. No trackbacks yet.
Add a Comment