nerdexam
(ISC)2

301B · Question #23

301B Question #23: Real Exam Question with Answer & Explanation

Sign in or unlock 301B to reveal the answer and full explanation for question #23. The question stem and answer options stay visible for context.

Question

An LTM Specialist is tasked with ensuring that the syslogs for the LTM device are sent to a remote syslog server. The following is an extract from the config file detailing the node and monitor that the LTM device is using for the remote syslog server: monitor Syslog_15002 { defaults from udp dest 1.1.1.5002 } node 91.223.45.231 { monitor Syslog_15002 screen RemoteSYSLOG } There seem to be problems communicating with the remote syslog server. However, the pool monitor shows that the remote server is up. The network department has confirmed that there are no firewall rules or networking issues preventing the LTM device from communicating with the syslog server. The department responsible for the remote syslog server indicates that there may be problems with the syslog server. The LTM Specialist checks the BIG-IP LTM logs for errors relating to the remote syslog server. None are found. The LTM Specialist does a tcpdump: tcpdump -nn -s0 port 15002, with the following results: 21:28:36.395543 IP 192.168.100.100.44772 > 91.223.45.231.15002: UDP, length 19 21:28:36.429073 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 159 21:28:36.430714 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 181 21:28:36.440524 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 169 21:28:36.446547 IP 192.168.100.100.39499 > 91.223.45.231.15002: UDP, length 181 21:28:39.886343 IP 10.0.0.99.443 > 192.168.0.4.35345: R 1:1(0) ack 1 win 144 Note. 192.168.100.100 is the self IP of the LTM device. Why are there no errors in the remote syslog server log files?

Options

  • AThe -log option for tcpdump needs to be used.
  • BThe monitor type used is inappropriate.
  • CThe "verbose" logging option needs to be enabled for the syslog.
  • DWhen the remote syslog server fails, it returns to service before the timeout for the monitor has expired.

Unlock 301B to see the answer

You've previewed enough free 301B questions. Unlock 301B for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full 301B Practice