Which of the following must be included in the syslogd configuration file, so that ONLY kernel related messages with the priority crit are reported?

Question

Options

• Akern.crit
• Bkern.!crit
• Ckern.=crit
• Dkern.*=crit
• Ekern.-crit

• A
  84% (21)
• B
  4% (1)
• D
  8% (2)
• E
  4% (1)

Explanation

kern.crit is correct because syslogd selector syntax follows facility.priority, where specifying a priority logs messages at that level and above - so kern.crit captures kernel messages at crit, alert, and emerg, while "only kernel" means the kern facility selector restricts it away from all other facilities like mail, auth, or daemon.

Why the distractors are wrong:

• B. kern.!crit - The ! negation modifier means log kernel messages at all priorities except crit and higher, which is the opposite of what's wanted.
• C. kern.=crit - The = modifier logs only exactly crit (excluding alert and emerg); while more restrictive, the standard exam interpretation of "priority crit" means crit as the minimum threshold, not an exact match.
• D. kern.*=crit - Not valid syslog selector syntax; * is a valid facility wildcard but *= is not a recognized priority modifier combination.
• E. kern.-crit - The - character in syslog syntax appears before a log file path (to disable sync writes), not before a priority in the selector field; this is not valid selector syntax.

Memory tip: Think of facility.priority like a volume dial - the priority you write is the minimum you'll hear. Only the = sign "pins" it to one exact level. No modifier = "this level and louder."

No community discussion yet for this question.