Skip to content
AvailabilitySign inBook a DemoJoin Waitlist
All CCNA topics

5.0 AI, Network Operations and Management

Syslog Messages, Severity & Facilities Practice Questions

Updated for CCNA v2.0

Reading IOS syslog message content, the eight severity levels, facilities, and logging commands.

CCNA v2.0 objective 5.6 · objective map

Author-reviewed by LabFabric · 25 September 2026 · Report a content issue

One solved question, so you can see how these are marked

What is the syslog severity level associated with the keyword 'errors'?

3

The eight levels are 0 emergencies, 1 alerts, 2 critical, 3 errors, 4 warnings, 5 notifications, 6 informational and 7 debugging. Lower numbers are more severe.

Every question in the set below is marked like this. The answers stay hidden until you pick one.

Find related practice in the CCNA path
All 9 Syslog Messages, Severity & Facilities questions in this set

Answers and explanations appear when you work through the set above.

  1. A router logs the message '%LINK-3-UPDOWN: Interface GigabitEthernet0/1, changed state to down'. What does the number 3 represent?

    • The severity level, meaning errors
    • The facility number
    • The interface number
    • The message sequence number

  2. A router is configured with 'logging trap warnings'. Which messages are sent to the syslog server?

    • Severity levels 0 through 4
    • Severity level 4 only
    • Severity levels 4 through 7
    • Severity levels 0 through 5

  3. Which message is most severe?

    • A level 1 alert
    • A level 3 error
    • A level 5 notification
    • A level 7 debugging message

  4. In the message '%SYS-5-CONFIG_I: Configured from console by admin', what does SYS identify?

    • The facility, the system component that produced the message
    • The severity level
    • The mnemonic describing the event
    • The syslog server address

  5. Which command sends syslog messages from a Cisco IOS device to a server at 192.0.2.50?

    • logging host 192.0.2.50
    • snmp-server host 192.0.2.50
    • ntp server 192.0.2.50
    • ip syslog 192.0.2.50

  6. Which IOS command displays the contents of the local logging buffer along with the current logging settings?

    • show logging
    • show log history
    • show syslog buffer
    • show running-config logging

  7. Which command adds a date and time stamp to each logged message so events can be correlated?

    • service timestamps log datetime msec
    • logging trap datetime
    • clock timestamps enable
    • logging facility datetime

  8. In the syslog protocol, what is the syslog facility used for?

    • It categorises the source of a message, and together with the severity forms the priority value
    • It sets the transport protocol used to send messages
    • It encrypts messages sent to the server
    • It limits how many messages the buffer stores

  9. By default, which transport and port does syslog use to reach a remote server?

    • UDP port 514
    • TCP port 22
    • UDP port 161
    • TCP port 443