nerdexam
Cisco

700-281 · Question #22

Which of these is not used as a monitoring tool?

The correct answer is D. policy trace. Policy trace (D) is a diagnostic/troubleshooting tool used to trace how a specific policy (such as a firewall rule) is evaluated for a given packet - it's not a monitoring tool, because it doesn't continuously observe or alert on system state. CLI commands (A) are actively used…

Manage Cisco Web Security Appliances

Question

Which of these is not used as a monitoring tool?

Options

  • ACLI commands
  • Bemail alerts
  • CSNMP traps
  • Dpolicy trace

How the community answered

(22 responses)
  • B
    5% (1)
  • D
    95% (21)

Explanation

Policy trace (D) is a diagnostic/troubleshooting tool used to trace how a specific policy (such as a firewall rule) is evaluated for a given packet - it's not a monitoring tool, because it doesn't continuously observe or alert on system state.

CLI commands (A) are actively used for monitoring: administrators run commands like show interface, ping, or traceroute to inspect real-time system and network status. Email alerts (B) are a standard monitoring output mechanism, automatically notifying administrators when thresholds or events are triggered. SNMP traps (C) are core to network monitoring - devices send unsolicited trap messages to a management system (like Nagios or PRTG) when a notable event occurs, making them a cornerstone of proactive monitoring.

Memory tip: Think of "trace" as a one-shot forensic tool - you use it to investigate why a policy behaved a certain way on demand, not to watch a system over time. Monitoring tools observe continuously; tracing tools investigate retroactively.

Topics

#monitoring tools#SNMP traps#policy trace#alerting mechanisms

Community Discussion

No community discussion yet for this question.

Full 700-281 Practice