350-401 Question #729: Real Exam Question with Answer & Explanation

Question

Refer to the exhibit. Which EEM script generates a critical-level syslog message and saves a copy of the running configuration to the bootflash when an administrator saves the running configuration to the startup configuration?

Options

• Aaction 1.0 cli command copy running-config bootflash:/current_config.txt
• Baction 1.0 cli command "enable"
• Caction 1.0 cli command copy running-config bootflash:/current_config.txt
• Daction 1.0 cli command "enable"

Explanation

An EEM script can be configured to detect when an administrator saves the running configuration to the startup configuration, subsequently logging a critical syslog message and backing up the running configuration.

Common mistakes.

• A. This action only saves the running configuration to bootflash, but it does not generate a critical-level syslog message as explicitly required by the question.
• C. This action only saves the running configuration to bootflash, but it does not generate a critical-level syslog message as explicitly required by the question, and it is a duplicate of option A.
• D. The action 1.0 cli command "enable" merely enters privileged EXEC mode and does not perform the required tasks of generating a syslog message or saving the configuration to bootflash.

Concept tested. EEM script configuration for auditing

Reference. https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/eem/configuration/15-mt/eem-15-mt-book/eem-cli-event.html

No community discussion yet for this question.