300-445 Question 221
Select 3You are tasked with configuring an alert system for a large enterprise network using SNMP, syslog, and NetFlow to monitor key network conditions. The organization wants immediate alerts in the following scenarios: 1) A significant increase in TCP retransmissions due to congestion, 2) A drop in performance or throughput on critical MPLS links, and 3) Anomalies in the BGP routing table, such as frequent route flapping. Which of the following configurations would you implement to meet these requirements?
- A
Create an SNMP threshold-based alert for high interface error counters and packet drops on MPLS links.
- B
Configure syslog-based alerts for TCP retransmission events exceeding a predefined threshold.
- C
Set up a NetFlow alert to detect changes in BGP route stability, including route flaps.
- D
Enable SNMP traps to monitor overall internet insights and connectivity issues.
- E
Configure an SNMP alert for VPN tunnel establishment and teardown events.
Show answer and explanation
Correct answers: A, B, C
Explanation
The correct answers involve using appropriate tools and configurations (SNMP, syslog, and NetFlow) to set alerts for the specified network conditions: congestion, MPLS link performance, and BGP route anomalies. SNMP is used for tracking interface error counters, syslog for monitoring TCP retransmissions, and NetFlow for analyzing BGP route stability. The other options address unrelated scenarios or broader monitoring tasks not specified in the question.
- A. Correct.
This option is correct because SNMP can track interface error counters and packet drops, which are indicators of performance or throughput drops on MPLS links.
- B. Correct.
This option is correct as syslog can be used to monitor TCP retransmission events, which are critical for identifying congestion issues.
- C. Correct.
This option is correct since NetFlow can be utilized to detect anomalies in BGP route stability, such as route flapping, by analyzing routing data.
- D. Incorrect.
This option is incorrect because monitoring overall internet insights is not specific to the three scenarios mentioned in the question.
- E. Incorrect.
This option is incorrect as VPN tunnel establishment and teardown events are unrelated to the scenarios described in the question.