nerdexam
Cisco

350-401 · Question #1128

Which configuration saves the running configuration to the startup configuration and logs a "saving configuration automatically" message when a syslog message that contains "SYS-5- CONFIG_I" is receiv

The correct answer is C. event manager applet save_config event syslog pattern "SYS-5-CONFIG_I" period 1 action 1.0 cli command "end" action 2.0 cli command "write mem" action 3.0 syslog msg "saving configuration automatically". Option C is correct because it uses the proper EEM (Embedded Event Manager) applet structure: it defines the trigger using 'event syslog pattern' to match the SYS-5-CONFIG_I message, then includes 'action 1.0 cli command "end"' to exit configuration mode before writing memory (ne

Submitted by jaden.t· Mar 6, 2026Network Automation and Programmability / Infrastructure Management and Monitoring (CCNP ENCOR or CCNA Advanced)

Question

Which configuration saves the running configuration to the startup configuration and logs a "saving configuration automatically" message when a syslog message that contains "SYS-5- CONFIG_I" is received? A. B. C. D.

Exhibits

350-401 question #1128 exhibit 1
350-401 question #1128 exhibit 2
350-401 question #1128 exhibit 3
350-401 question #1128 exhibit 4

Options

  • Aevent manager applet save_config event syslog pattern "SYS-5-CONFIG_I" period 1 event track 1 action 1.0 cli command "write mem" action 2.0 syslog msg "saving configuration automatically"
  • Bevent manager applet save_config action 1.0 string match "SYS-5-CONFIG_I" save_config action 2.0 cli command "write mem" action 3.0 syslog msg "saving configuration automatically"
  • Cevent manager applet save_config event syslog pattern "SYS-5-CONFIG_I" period 1 action 1.0 cli command "end" action 2.0 cli command "write mem" action 3.0 syslog msg "saving configuration automatically"
  • Devent manager applet save_config event syslog pattern "SYS-5-CONFIG_I" period 1 action 1.0 cli command "write mem" action 2.0 syslog msg "saving configuration automatically"

How the community answered

(28 responses)
  • A
    4% (1)
  • B
    25% (7)
  • C
    61% (17)
  • D
    11% (3)

Explanation

Option C is correct because it uses the proper EEM (Embedded Event Manager) applet structure: it defines the trigger using 'event syslog pattern' to match the SYS-5-CONFIG_I message, then includes 'action 1.0 cli command "end"' to exit configuration mode before writing memory (necessary because the CONFIG_I event fires while the router may still be in config mode), followed by 'write mem' to save the config, and finally a syslog message. The 'end' command is critical to ensure the CLI is at privileged EXEC mode before executing 'write mem', otherwise the command may fail.

Topics

#EEM#Embedded Event Manager#Syslog#IOS Automation

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice