300-440 Question 269
Select 3A network engineer is troubleshooting intermittent connectivity issues on a router in a branch office. They suspect a routing loop might be occurring and decide to use logging mechanisms to gather more information. Which of the following steps should the engineer take to effectively troubleshoot the issue using logging features?
- A
Enable debugging for routing protocols and use conditional debug to limit output to a specific interface.
- B
Configure syslog to send logs to a remote server with a severity level of 'debug'.
- C
Enable timestamps on the router to associate log messages with specific times.
- D
Disable all logging except for local logging to conserve CPU resources during the investigation.
- E
Use the 'show log' command to review existing log messages stored in the local buffer.
Show answer and explanation
Correct answers: A, C, E
Explanation
To troubleshoot network issues effectively, it is essential to use logging features strategically. By enabling conditional debugging, the engineer can focus on specific interfaces or traffic. Using timestamps ensures log messages are correlated with specific events, which is critical for identifying patterns. Reviewing buffered logs using the 'show log' command provides immediate insights into recent network activity. Configuring syslog with a 'debug' severity level may overwhelm the system, and disabling other logging mechanisms limits the ability to gather meaningful data during the investigation.
- A. Correct.
Correct: Enabling debugging for routing protocols and using conditional debug reduces the amount of unnecessary output, allowing the engineer to focus on the specific interface or traffic causing the problem.
- B. Incorrect.
Incorrect: While configuring syslog is useful for long-term monitoring, setting the severity level to 'debug' for all messages can overwhelm the server and is not recommended for immediate troubleshooting.
- C. Correct.
Correct: Enabling timestamps ensures that log entries are associated with specific times, making it easier to correlate events and identify patterns during troubleshooting.
- D. Incorrect.
Incorrect: Disabling all logging except for local logging might conserve CPU resources, but it limits the ability to gather detailed information needed to troubleshoot effectively.
- E. Correct.
Correct: Using the 'show log' command allows the engineer to review buffered log messages, which can provide insights into recent events and help identify the root cause of the issue.