312-50V11 · Question #490
It is a widely used standard for message logging. It permits separation of the software that generates messages, the system that stores them, and the software that reports and analyzes them. This prot
The correct answer is C. SYSLOG. Syslog is the standard protocol for centralized event message logging, enabling separation between message generation, storage, and analysis systems.
Question
It is a widely used standard for message logging. It permits separation of the software that generates messages, the system that stores them, and the software that reports and analyzes them. This protocol is specifically designed for transporting event messages. Which of the following is being described?
Options
- ASNMP
- BICMP
- CSYSLOG
- DSMS
How the community answered
(48 responses)- A4% (2)
- B2% (1)
- C94% (45)
Why each option
Syslog is the standard protocol for centralized event message logging, enabling separation between message generation, storage, and analysis systems.
SNMP (Simple Network Management Protocol) is used for monitoring and managing network devices, not for transporting event log messages.
ICMP (Internet Control Message Protocol) is used for network diagnostics and error reporting between hosts, not for structured event message logging.
Syslog, defined in RFC 5424, is a widely adopted standard that allows devices and applications to send event messages to a centralized logging server. It decouples the log-generating software, the storage mechanism, and the reporting tools, making it the standard for event transport in network and security operations. It operates over UDP port 514 (or TCP/TLS for reliable delivery) and is universally supported across operating systems and network devices.
SMS (Short Message Service) is a mobile telephony text messaging service and is not a protocol used for system or network event logging.
Concept tested: Syslog protocol for centralized event logging
Source: https://datatracker.ietf.org/doc/html/rfc5424
Topics
Community Discussion
No community discussion yet for this question.