nerdexam
Cisco

350-401 · Question #938

Refer to the exhibit. The administrator must extend the configuration of the switch to perform remote logging using syslog according to these requirements: - syslog server: 203.0.113.11 reachable thro

The correct answer is B. logging host 203.0.113.11 vrf Mgmt-vrf transport tcp D. logging trap notifications. To configure remote logging to a syslog server with reliable transport and a specific initial message severity, both the logging host and the trap level must be set.

Submitted by lucia.co· Mar 6, 2026Network Assurance

Question

Refer to the exhibit. The administrator must extend the configuration of the switch to perform remote logging using syslog according to these requirements:

  • syslog server: 203.0.113.11 reachable through Gi0/0
  • initial message severity: notifications
  • message transport: reliable

Which two commands must be added to the configuration to accomplish this goal? (Choose two.)

Exhibits

350-401 question #938 exhibit 1
350-401 question #938 exhibit 2

Options

  • Alogging monitor notifications
  • Blogging host 203.0.113.11 vrf Mgmt-vrf transport tcp
  • Clogging source-Interface GigabitEthernet0/0 vrf Mgmt-vrf
  • Dlogging trap notifications
  • Elogging host 203.0.113.11 vrf Mgmt-vrf

How the community answered

(56 responses)
  • A
    7% (4)
  • B
    79% (44)
  • C
    4% (2)
  • E
    11% (6)

Why each option

To configure remote logging to a syslog server with reliable transport and a specific initial message severity, both the logging host and the trap level must be set.

Alogging monitor notifications

The `logging monitor notifications` command controls the severity level of syslog messages displayed on the console (terminal monitor), not those sent to a remote syslog server.

Blogging host 203.0.113.11 vrf Mgmt-vrf transport tcpCorrect

The `logging host` command specifies the IP address of the syslog server, and adding `transport tcp` ensures reliable message delivery via TCP as required by the administrator.

Clogging source-Interface GigabitEthernet0/0 vrf Mgmt-vrf

The `logging source-Interface GigabitEthernet0/0 vrf Mgmt-vrf` command defines the source interface for syslog messages, but it is not explicitly required to fulfill the specified logging host, transport, or severity requirements.

Dlogging trap notificationsCorrect

The `logging trap notifications` command sets the minimum severity level for messages sent to the configured syslog server to 'notifications', fulfilling the requirement.

Elogging host 203.0.113.11 vrf Mgmt-vrf

The `logging host 203.0.113.11 vrf Mgmt-vrf` command specifies the syslog host, but without the `transport tcp` keyword, it would default to unreliable UDP transport, failing the 'reliable' requirement.

Concept tested: Cisco IOS Syslog configuration (host, transport, trap)

Source: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/system/messages/configuration/xe-16-10/sysmsg-xe-16-10-book/sysmsg-cfg-logging.html

Topics

#Cisco syslog configuration#IOS logging#Syslog trap levels#Reliable syslog transport

Community Discussion

No community discussion yet for this question.

Full 350-401 Practice