Home > CCNA – Syslog Questions

CCNA – Syslog Questions

March 25th, 2015 Go to comments

If you are not sure about Syslog, please read our Syslog tutorial.

Question 1

Explanation

By default, switches send the output from system messages and debug privileged EXEC commands to a logging process. The logging process controls the distribution of logging messages to various destinations, such as the logging buffer (on RAM), terminal lines (console terminal), or a UNIX syslog server, depending on your configuration. The process also sends messages to the console.

(Reference: http://www.cisco.com/en/US/docs/switches/lan/catalyst2950/software/release/12.1_9_ea1/configuration/guide/swlog.html#wp1024032)

Note: Syslog messages can be written to a file in Flash memory although it is not a popular place to use. We can configure this feature with the command logging file flash:filename.

Question 2

Explanation

The Message Logging is divided into 8 levels as listed below:

Level Keyword Description
0 emergencies System is unusable
1 alerts Immediate action is needed
2 critical Critical conditions exist
3 errors Error conditions exist
4 warnings Warning conditions exist
5 notification Normal, but significant, conditions exist
6 informational Informational messages
7 debugging Debugging messages

The highest level is level 0 (emergencies). The lowest level is level 7. If you specify a level with the “logging console level” command, that level and all the higher levels will be displayed. For example, by using the “logging console warnings” command, all the logging of emergencies, alerts, critical, errors, warnings will be displayed.

In this question level 3 trap is configured so Emergencies, Alerts, critical and Errors messages are displayed. Although this question only requires to choose 3 correct answers but maybe something is missing here.

Question 3

Question 4

Explanation

The “service timestamps debug” command configures the system to apply a time stamp to debugging messages. The time-stamp format for datetime is MMM DD HH:MM:SS, where MMM is the month, DD is the date, HH is the hour (in 24-hour notation), MM is the minute, and SS is the second. With the additional keyword msec, the system includes milliseconds in the time stamp, in the format HH:DD:MM:SS.mmm, where .mmm is milliseconds

(Reference: http://www.cisco.com/c/en/us/td/docs/ios/fundamentals/command/reference/cf_book/cf_r1.html#wp1030116)

Question 5

Question 6

Explanation

The Message Logging is divided into 8 levels as listed below:

Level Keyword Description
0 emergencies System is unusable
1 alerts Immediate action is needed
2 critical Critical conditions exist
3 errors Error conditions exist
4 warnings Warning conditions exist
5 notification Normal, but significant, conditions exist
6 informational Informational messages
7 debugging Debugging messages

If you specify a level with the “logging trap level” command, that level and all the higher levels will be logged. For example, by using the “logging trap 4” command, all the logging of emergencies, alerts, critical, errors, warnings will be logged.

Question 7

Comments (50) Comments
Comment pages
  1. Rob
    July 31st, 2014

    Question 2 is asked wrong – it asks for 3 logs then choose 4
    Syslog was configured with a level 3 trap. Which 3 types of logs would be generated (choose four)
    Direct from cisco –
    For example, if you enter a command that specifies severity level 3, the ACE applies the command results to messages with a severity level of 0, 1, 2, and 3.

    Table 1-1 lists the log message severity levels.

    Table 1-1 Log Message Severity Levels
    Level Number

    Level Keyword

    Description

    0 emergency
    System unusable (for example, the ACE has shut down and cannot be restarted, or it has experienced a hardware failure).

    1 alert
    Immediate action needed (for example, one of the ACE subsystems is not running).

    2 critical Critical condition (for example, the ACE has encountered a critical condition that requires immediate attention).

    3 error
    Error condition (for example, error messages about software or hardware malfunctions).

  2. A
    August 6th, 2014

    q5. The answer should be level 6 (informational), right?, In tutorial it is mentioned that. “By default, syslog servers receive informational messages (level 6)”
    Somebody please confirm
    Thank You

  3. Sandy6933
    August 8th, 2014

    Thanks for the awesome questions!

    Keep writing :)

  4. Des†rosiers
    August 9th, 2014

    Passed Marks: 975, 99.8% from 9tut no need to exert effort for latest dumps. Labs EIGRP, ACL Sim 1 & 2, practice all modifications coz it was given on random. 9tut is enough to pass the exam. GoodLuck. .

  5. Hamzaski
    August 11th, 2014

    Q5 the correct answer is level 6, you are right “A”

  6. Max
    August 12th, 2014

    Sorry, but in the Cisco Site Configuration Guide, says the following: By default, Cisco IOS devices, CatOS switches, and VPN 3000 Concentrators use facility local7.

    So, Which affirmation is correct? :(

    Level 6 or Level 7 is the default value?

  7. Johny
    August 12th, 2014

    Hi,
    The default value for “logging trap [severity-value]” is 6.
    The default value for “logging facility [facility-value]” is local7.

    Local7 is the correct answer for Q5.

  8. Max
    August 12th, 2014

    Thanks a lot Buddy “Johny”!

  9. belsiowest
    August 18th, 2014

    thanks Johny for the answer Q5

  10. kaja
    August 20th, 2014

    hello,
    please send me packet tracer and latest dumps.
    I am preparing my CCNA.
    email: tiankoy@live.ca

  11. Dosty
    September 5th, 2014

    Just passed my CCNA with 958. Question 3 present. Thanks to 9tut

  12. Hassan Bilal
    September 5th, 2014

    Passed CCNA on 5th September with 986. ACL1, ACL2(MOD.3) and Eigrp labs. All the question were from 9tut and Watson, thanks 9tut. Keep up the good work you are doing by providing study material.
    Q6 was in exam

  13. Rani
    September 6th, 2014

    Q4 in 5th Sep 2014 exam

  14. mustafe
    September 6th, 2014

    Rani/// what do mean Q4 ?

  15. RASUL
    September 7th, 2014

    Guys anyone can explain the answer for Q1.In reference link,it mentioned as syslog messages will be stored in NON-CONSOLE TERMINAL,CONSOLE LINE AND FLSH MEMORY,SYSLOG SERVER AND INTERNAL BUFFER…
    But here answer for Q1 includes console terminal and left Flash…Is it rit?How?

  16. Anonymous
    September 8th, 2014

    @RASUL

    That is a tricky one. The key is the word “popular”. It can be done, but usually it is not.

  17. Anonymous
    September 8th, 2014

    @RASUL

    I forgot your “how?” question. Flash memory has a very limited capacity, thus it would not be a very good place to store large log files.

  18. RASUL
    September 8th, 2014

    Thanks bro….Got it….

  19. Annon
    September 9th, 2014

    Found this useful
    “Do I Notice When Evenings Come Around Early”
    Debug, Informational, Notice, Warning, Error, Critical, Alert, Emergency

  20. HB
    September 16th, 2014

    Passed today with 958

    Q7 was on test

    thanx 9tut

  21. Vicente
    September 21st, 2014

    Hi Ammar,as I have stated ehlewsere I currently have access just to one Huawei switch so I cannot really try this anymore but the configuration should be really simple (as you can see in the article). Also your description is too generic and there could be a lot of problems that might be unrelated to the router config itself. I would suggest to check if the messages are actually arriving to the syslog PC, if your path is actually transmitting those messages and if your configuration on both ends is correct as well. Also it might be a good idea to check the documentation from Huawei (operations manual) as that will give you details and examples for the specific HW/SW.Hope that helps.

  22. in 2011
    September 24th, 2014

    in 2011 i was passed with 894

  23. khan
    September 24th, 2014

    plz send me latest dumbs m going for ccna exam email, bilawal.khan049@yahoo.com

  24. ;-)
    September 28th, 2014

    Hey gus, this Voucher is really hot ? Did anybody buy it ?

  25. Qasim
    September 30th, 2014

    Dear All
    Regarding all CISCO exams CCNA CCNA Security CCNP (Route Switch Tshoot) updated valid dumps & Exam discount vouchers available globally.
    1. CCNA 200-120 60 % discounted vouchers

    Regards,
    Qasim
    Network Engineer
    0347-3145824

  26. jevdawg
    September 30th, 2014

    isn’t the default level for syslog information which is level 6 how is 5 right someone please explain.

  27. Anonymous
    October 6th, 2014

    Hi great blog,
    Thanks for all the posting help a lot.
    please anyone can help and send the latest dumps for ccna 200-120 to my email :
    Crypterdk@gmail.com
    thanking you in advance
    :-)

  28. Anonymous
    October 7th, 2014

    can anyone send me the latest dumps. my email darryadedi@gmail.com

  29. jp0427
    October 7th, 2014

    Question #7 on my exam last Sunday, 2014/10/5.

    Thanks a lot 9tut. Almost all questions were from here except for 2.
    Had the EIGRP and ACL 1 sims.

  30. Hi
    October 10th, 2014

    Hi everyone. pass my exam today 986. Sims ACL, ACL2 different IP – mode 3 – looking for Host B to get access to Web Server. EIGRP AS22.
    I think all question are in 9tut, 90% any way. I only study watson dumps and 9tut.
    Good luck to everyone!!
    Thanks 9tut.

  31. ALI AL-balawi
    October 11th, 2014

    ها أنا في بدايتي أشكركم

  32. Alex
    October 23rd, 2014

    Dear all
    Please anyone send a recently dump because the next week I Have the exam CCNA , my mail is alessandro1982to@gmail.com

    Thanks

  33. nikki
    October 25th, 2014

    Hello Alex by any chance did you get the recent dum , if u did can u send me a copy of it gutnyc@yahoo.com

    thanx

  34. AK
    October 30th, 2014

    Question 2 should read choose 3, not 4.
    regards,
    AK

  35. tanu
    November 1st, 2014

    @AK
    we should choose 4 in qsn no. 2 but ans should be a.b.e.c

  36. tanu
    November 1st, 2014

    i think if syslog configured with trap 3 then 4 log must be generate .

  37. Cedrick MEWO
    November 4th, 2014

    you got it tanu, with a trap level of four, we must have 4 logs.which are emergencie, critical,alerts and errors. there are four answers and no 3,all is good.

  38. mallocymar
    November 6th, 2014

    The syslog message severity level are generated according to their value. for level 3 logging trap set, 0,1,2,and 3 wld be sent to the syslog server if logging host x.x.x.x cmd is set.

  39. Hashim
    November 8th, 2014

    Q3 was in my exam….

  40. aria
    November 10th, 2014

    q3 in today exam

  41. guru
    November 12th, 2014

    Can someone pls shed light on question 6. What levels will be trapped if the administrator executes the command

    router(config)# logging trap 4 , how is the syslog calculated? Is “0 to 4” not suppose to be
    Emergencies
    Alerts
    Critical and
    Errors?

  42. Parth Shah
    November 12th, 2014

    Q 2 ,3 and 7 exam on 10th Nov’14

  43. charles churchil
    November 14th, 2014

    trap 3 asked

  44. Adriana
    November 17th, 2014

    guru..

    Critical is not an opción in this question…so (0to 4) Emergency, alerts, critical(no), error, and warning

  45. avi
    November 18th, 2014

    0 emergencies E Earth
    1 alerts A Align
    2 critical C Central
    3 errors E Elements
    4 warnings W When
    5 notification N Numbers
    6 informational I In
    7 debugging D Debug

    Earth Align Central Elements When Numbers In Debug

  46. pratik patel
    November 19th, 2014

    Hello every one,
    Going to take ccna 200-120 exam in 15 days.
    It would be highly appreciated if some one send me latest dumps and exam practice question.
    Thanks in advance.
    my email id : Preet2fun@yahoo.com

  47. Camzi
    November 19th, 2014

    0. Emergencies-Every
    1. Alerts- Animal
    2. Critical- Can
    3. Error- Easily
    4. Warning- Walk
    5. Notification- Near
    6. Information- Indian
    7. Debug- Dune

  48. as
    November 20th, 2014

    today i got passed all questions in 9tut only

  49. as
    November 20th, 2014

    q5 today exam

  50. Erika
    November 22nd, 2014

    Q3 were on my exam on 21th Nov’14

Comment pages