350-401 Question #1356: Real Exam Question with Answer & Explanation

Submitted by omar99· Mar 6, 2026Cisco CCNP ENCOR - Infrastructure Automation and Programmability / Network Management: Configuring EEM policies to automate responses to network events such as OSPF neighbor state changes.

Question

Drag and Drop Question An engineer must create an EEM script to enable OSPF debugging in the event the OSPF neighborship goes down. Options may be used more than once. Answer:

Explanation

The correct EEM applet structure requires: a policy name (ENABLE_OSPF_DEBUG) to identify the script, a syslog pattern matching the OSPF adjacency down event (^%OSPF-5-ADJ:Nbr 192.168.10.1 on Serial0/0 from FULL to DOWN), an action to enter enable mode ("enable"), and then the two debug commands ("debug ip ospf adj" and "debug ip ospf events") to capture adjacency and event details, followed by the event manager applet trigger using 'priority informational msg "ENABLE_OSPF_DEBUG"' to log the activation. This sequence follows the Cisco EEM applet syntax: event manager applet <name>, event syslog pattern <regex>, and action statements with CLI commands in the correct order. All options are used exactly once in this drag-and-drop because each element serves a unique and mandatory role in the complete EEM policy definition.

Topics

#Embedded Event Manager (EEM)#OSPF Troubleshooting#IOS Scripting#Network Automation

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice Browse All 350-401 Questions