CiscoCisco CCNP Enterprise (ENCOR) 350-401 Certification·EN·Updated 15 Aug 2026
Which EEM applet enables OSPF debugging when an OSPF neighborship goes down?
Choose an answer
Tap an option to check your answer.
Correct answer: event manager applet ENABLE_OSPF_DEBUG event syslog pattern "%OSPF-5-ADJCHG: Process 6, Nbr 1.1.1.1 on Serial0/0 from FULL to DOWN" action 1.0 cli command "enable" action 2.0 cli command "debug ip ospf event" action 3.0 cli command "debug ip ospf adj" action 4.0 syslog priority informational msg "ENABLE_OSPF_DEBUG".
Why this is the answer
The correct EEM applet uses the syslog pattern "%OSPF-5-ADJCHG: Process 6, Nbr 1.1.1.1 on Serial0/0 from FULL to DOWN" to trigger when an OSPF neighborship transitions from FULL to DOWN, indicating a problem. The action 1.0 cli command "enable" is crucial because debug commands often require privileged EXEC mode. Actions 2.0 and 3.0 then enable the relevant OSPF debugs (debug ip ospf event and debug ip ospf adj) to capture diagnostic information. Finally, action 4.0 logs a message indicating the applet was triggered.
Incorrect options either use the wrong syslog pattern (e.g., LOADING to FULL or an incorrect severity level like OSPF-1 instead of OSPF-5), which would not trigger on a neighborship going down, or they omit the enable command, which would prevent the debug commands from executing successfully.