CCNP Enterprise 350-401 Passing Score

Blank 1: event manager

Blank 2: applet

Blank 3: event syslog

Blank 4: pattern

Blank 5: mail server

The correct EEM structure begins with event manager applet Enable_Interface_And_Alert. This creates the Embedded Event Manager policy and names the applet. The trigger must detect a syslog message indicating that GigabitEthernet0/1 changed state to administratively down, so the event line must use event syslog pattern " Interface GigabitEthernet0/1, changed state to administratively down " . After the trigger occurs, the configured CLI actions enter enable mode, move into configuration mode, select the interface, issue no shutdown, and exit configuration mode. The final action sends an email alert. Cisco EEM mail syntax uses mail server followed by the SMTP server and mail parameters such as recipient, sender, subject, and body. The snippets must therefore form valid IOS EEM syntax, not just logical statements. This is an automation and operational-notification task: EEM reacts to a device event and performs corrective action while also communicating the incident. References/topics: ENCOR Automation, Embedded Event Manager, syslog event triggers, CLI action applets, operational alerting, SMTP notification.