Which of the following are syslog facilities? (Choose two.)

Question

Options

• Alocal5
• Baccounting
• Cmail
• Dpostmaster
• Eremote

• A
  83% (49)
• B
  10% (6)
• D
  2% (1)
• E
  5% (3)

Explanation

local5 and mail are both defined syslog facilities in the RFC 3164/5424 standard. Syslog uses numeric facility codes to categorize log sources: mail (facility 2) covers mail system messages, and local0 through local7 are reserved for custom/local use by administrators - local5 is facility 21.

Why the distractors are wrong:

• B. accounting - not a syslog facility; accounting/auditing functions may generate logs, but "accounting" is not a recognized facility keyword
• D. postmaster - a conventional email role/alias (recipient of admin mail), not a syslog facility
• E. remote - not a facility; syslog can send logs to a remote host, but "remote" describes a destination, not a source facility

Memory tip: Know the core named facilities (kern, user, mail, daemon, auth, syslog, lpr, news, uucp, cron, ftp) plus the local0–local7 range. On the exam, watch for plausible-sounding decoys like "accounting" or "remote" that describe logging concepts rather than actual facility keywords defined in the syslog standard.

No community discussion yet for this question.