4-8: Monitoring the Network

Question 1

The ______ protocol uses UDP port 514 and is the most common method to access system messages provided by networking devices.

Answer 1

syslog

Question 2

Which destination do Cisco routers and switches use by default when sending syslog messages for all severity levels?

Answer 2

console

Question 3

Refer to the exhibit. Which two conclusions can be drawn from the syslog message that was generated by the router?

Answer 3

1. This message is a level 5 notification message.
2. This message indicates that service timestamps have been configured.

Question 3

What are SNMP trap messages?

Answer 3

unsolicited messages that are sent by the SNMP agent and alert the NMS to a condition on the network

Question 5

Refer to the exhibit. From what location have the syslog messages been retrieved?

Answer 5

router RAM

Question 6

Which statement describes SNMP operation?

Answer 6

A set request is used by the NMS to change configuration variables in the agent device.

Question 6

A network administrator has issued the snmp-server user adminl admin v3 encrypted auth md5 abc789 priv des 256 key99 command. What are two features of this command? (Choose two.)

Answer 6

1. It uses the MD5 authentication of the SNMP messages.
2. It adds a new user to the SNMP group.

Question 7

How can SNMP access be restricted to a specific SNMP manager?

Answer 7

Define an ACL and reference it by using the snmp-server community command.

Question 7

What is the most common purpose of implementing NetFlow in a networked environment?

Answer 7

to support accounting and monitoring with consumer applications

Question 8

When logging is used, which severity level indicates that a device is unusable?

Answer 8

Emergency-Level 0

Question 9

What are the most common syslog messages?

Answer 9

linkup and link down messages

Question 9

A network administrator has issued the snmp-server user admin1 admin v3 encrypted auth md5 abc789 priv des 256 key99 command. What are two features of this command? (Choose two.)

Answer 9

1. It uses the MD5 authentication of the SNMP messages.
2. It adds a new user to the SNMP group.

Question 10

What is a difference between SNMP and NetFlow?

Answer 10

NetFlow collects more detailed traffic statistics on IP networks than SNMP does.

Question 11

Refer to the exhibit. What does the number 17:46:26.143 represent?

Answer 11

the time when the syslog message was issued

Question 13

A network administrator issues two commands on a router:
R1(config)# snmp-server host 10.10.50.25 version 2c campus
R1(config)# snmp-server enable traps
What can be concluded after the commands are entered?

Answer 13

If an interface comes up, a trap is sent to the server.

Question 16

A network administrator has issued the logging trap 4 global configuration mode command. What is the result of this command?

Answer 16

The syslog client will send to the syslog server any event message that has a severity level of 4 and lower.

Question 17

How does NetFlow function on a Cisco router or multilayer switch?

Answer 17

One user connection to an application exists as two NetFlow flows.

Question 18

When SNMPvl or SNMPv2 is being used, which feature provides secure access to MIB objects?

Answer 18

community strings

Question 19

While planning an upgrade, a network administrator uses the Cisco NetFlow utility to analyze data flow in the current network. Which protocol used the greatest amount of network time?

Answer 19

UDP-other

Question 20

Which SNMP feature provides a solution to the main disadvantage of SNMP polling?

Answer 20

SNMP trap messages

Question 21

Which two statements describe items to be considered in configuring NetFlow? (Choose two.)

Answer 21

1. Netflow can only be used in a unidirectional flow.
2. Netflow consumes additional memory.

Question 22

Which type of information can an administrator obtain with the show ip cache flow command?

Answer 22

the protocol that uses the largest volume of traffic

Question 23

What can be concluded from the produced output?

Answer 23

An ACL was configured to restrict SNMP access to an SNMP manager.

Question 24

A network technician has issued the service timestamps log datetime command in the configuration of the branch router. Which additional command is required to include the date and time in logged events?

Answer 24

Branch1# clock set 08:00:00 05 AUG 2013

Question 25

When SNMPv1 or SNMPv2 is being used, which feature provides secure access to MIB objects?

Answer 25

community strings