nerdexam
Cisco

350-401 · Question #1016

Which configuration filters out DOT1X messages in the format shown below from being sent toward Syslog server 10.15.20.33? Nov 20 13:47:32/553 %DOT1X-5-FAIL:Authentication failed for client (e04f.438e

The correct answer is B. logging discriminator DOT1X msg-body drops DOTX. The question asks for the correct logging discriminator configuration to filter out syslog messages that contain specific text related to DOT1X authentication failures.

Submitted by emma.c· Mar 6, 2026

Question

Which configuration filters out DOT1X messages in the format shown below from being sent toward Syslog server 10.15.20.33? Nov 20 13:47:32/553 %DOT1X-5-FAIL:Authentication failed for client (e04f.438e.de4f) on interface Gi1/0/1 AudtiSessionID 0A0B50A5000004543910739E

Options

  • Alogging discriminator DOT1X facility drops DOT1X
  • Blogging discriminator DOT1X msg-body drops DOTX
  • Clogging discriminator DOT1X mnemonics includes DOTX
  • Dlogging discriminator DOT1X mnemonics includes DOT1X

How the community answered

(39 responses)
  • A
    3% (1)
  • B
    74% (29)
  • C
    8% (3)
  • D
    15% (6)

Why each option

The question asks for the correct logging discriminator configuration to filter out syslog messages that contain specific text related to DOT1X authentication failures.

Alogging discriminator DOT1X facility drops DOT1X

The `facility` keyword filters based on the syslog facility code (e.g., LOCAL7, USER), not on the message content 'DOT1X'.

Blogging discriminator DOT1X msg-body drops DOTXCorrect

The `logging discriminator` command with `msg-body drops` allows filtering based on a regular expression match within the syslog message body. Specifying `DOTX` as the pattern effectively targets and drops messages containing related authentication failure text, such as 'DOT1X-5-FAIL' from the example.

Clogging discriminator DOT1X mnemonics includes DOTX

The `mnemonics` keyword filters based on the mnemonic code (e.g., FAIL), not on 'DOTX', and `includes` would retain messages rather than drop them.

Dlogging discriminator DOT1X mnemonics includes DOT1X

The `mnemonics` keyword filters based on the mnemonic code (e.g., FAIL), not on 'DOT1X', and `includes` would retain messages rather than drop them.

Concept tested: Cisco IOS logging discriminator configuration for syslog

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/esm/configuration/15-mt/esm-15-mt-book/esm-syslog-logging-disc.html

Topics

#Cisco IOS Logging#Syslog Configuration#Logging Discriminator#DOT1X Filtering

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice