350-401 Question #517: Real Exam Question with Answer & Explanation

The correct answer is A: logging host 10.10.10.1 transport tcp port 1024. To configure a router to send logging messages to a syslog server reliably and using a non-well-known port, the configuration must specify TCP transport and a port number 1024 or higher.

Submitted by lars.no· Mar 6, 2026<must be one of the domains listed above>

Question

A network engineer must configure a router to send logging messages to a syslog server based on these requirements: uses syslog IP address: 10.10.10.1 uses a reliable protocol must not use any well-known TCP/UDP ports Which configuration must be used?

Options

Alogging host 10.10.10.1 transport tcp port 1024
Blogging origin-id 10.10.10.1
Clogging host 10.10.10.1 transport udp port 1023
Dlogging host 10.10.10.1 transport udp port 1024

Explanation

To configure a router to send logging messages to a syslog server reliably and using a non-well-known port, the configuration must specify TCP transport and a port number 1024 or higher.

Common mistakes.

B. The logging origin-id command configures the source identifier for syslog messages and does not specify the syslog server destination, transport protocol, or port.
C. This option uses UDP as the transport protocol, which is unreliable, and specifies port 1023, which is within the well-known port range, thus failing to meet the reliability and non-well-known port requirements.
D. This option uses UDP as the transport protocol, which is unreliable, failing the requirement for a reliable protocol, even though port 1024 is a non-well-known port.

Concept tested. Syslog configuration with TCP and custom port

Reference. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/esm/command/esm-cr-book/esm-cr-l1.html#wp2456382173

Topics

#Syslog configuration#Cisco IOS logging#TCP/UDP ports

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice Browse All 350-401 Questions