Exam 350-401 topic 1 question 344 discussion

A is correct. See below. Only these keywords are available: Router1(config-applet)#action 1 syslog ? facility Facility string filter Filter destination of syslog message msg Syslog message priority Priority of syslog message

correct answer A

A is correct

According to this source, the answer should be C since we're looking for change in the network Link https://learningnetwork.cisco.com/s/article/understanding-cisco-eem-by-examples-part-1

A. action 1 syslog msg 'OSPF ROUTING ERROR'

syslog pattern is an event you'd be looking for to trigger applying the actions, NOT the actions themselves So C is clearly wrong

you need to specify the action to be taken. In this case, the desired action is to send a syslog message. The correct syntax for sending a syslog message is: action 1 syslog msg <message> Therefore, the correct command to use in this scenario would be: action 1 syslog msg OSPF ROUTING ERROR

clearly A.

The engineer should use the following action in the EEM applet: event manager applet LogMessage event routing ospf state change action 1.0 syslog msg "OSPF process changed in network due to trouble" This applet will trigger a syslog message whenever a change happens in the OSPF process in the network. The "event routing ospf state change" command will trigger the applet when a change occurs in the OSPF process, and the "action 1.0 syslog msg" will send a syslog message with the specified text.

Provided answer is correct

! event manager applet LogMessage event routing network 2.2.2.2/32 type all action 1.0 syslog msg "BGP route has been changed" ! cisco_R5#show ip route 2.2.2.2 Routing entry for 2.2.2.2/32 Known via "bgp 5", distance 20, metric 0 Tag 3, type external Last update from 192.168.255.22 00:21:19 ago Routing Descriptor Blocks: * 192.168.255.22, from 192.168.255.3, 00:21:19 ago ... cisco_R5#clear ip bgp 3 cisco_R5# *Dec 20 18:58:12.733: %BGP-3-NOTIFICATION: sent to neighbor 192.168.255.3 6/4 (Administrative Reset) 0 bytes *Dec 20 18:58:12.738: %BGP-5-ADJCHANGE: neighbor 192.168.255.3 Down User reset *Dec 20 18:58:12.738: %BGP_SESSION-5-ADJCHANGE: neighbor 192.168.255.3 IPv4 Unicast topology base removed from session User reset cisco_R5# *Dec 20 18:58:12.739: %HA_EM-6-LOG: LogMessage: BGP route has been changed *Dec 20 18:58:13.419: %BGP-5-ADJCHANGE: neighbor 192.168.255.3 Up cisco_R5# *Dec 20 18:58:13.430: %HA_EM-6-LOG: LogMessage: BGP route has been changed cisco_R5#

I really think it's pattern. check out the dock. We're not looking for an exact message, we are looking for this pattern with the extra information.

The provided answer is correct. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/eem/command/eem-cr-book/eem-cr-a2.html