Question 170
At the Ironwood training campus, fault records from R-IRN-RT1 and R-CLR-RT2 arrive at the same syslog collector but their timestamps differ by minutes, hiding causal order. Which operational change most directly addresses the fault described?
Explanation
Correct Answer
The fault at the Ironwood training campus has a specific cause. Unsynchronized device time makes otherwise collected logs unreliable for cross-device event correlation. Synchronize network device clocks using approved time sources and include usable syslog timestamps. Confirm success against this result: Test events have consistent time order and reasonable timestamp skew across devices.
Incorrect Answers
This could help where conditional debug and router load is the issue, but not for the evidence reported at the Ironwood training campus. Unsynchronized device time makes otherwise collected logs unreliable for cross-device event correlation.
That change targets telemetry visibility versus only log events, not the reported syslog timestamp correlation fault at the Ironwood training campus. Unsynchronized device time makes otherwise collected logs unreliable for cross-device event correlation.
This could help where dhcp excluded-address pool is the issue, but not for the evidence reported at the Ironwood training campus. Unsynchronized device time makes otherwise collected logs unreliable for cross-device event correlation.