nerdexam
EC-Council

312-50V11 · Question #490

It is a widely used standard for message logging. It permits separation of the software that generates messages, the system that stores them, and the software that reports and analyzes them. This prot

The correct answer is C. SYSLOG. Syslog is the standard protocol for centralized event message logging, enabling separation between message generation, storage, and analysis systems.

Information Security and Ethical Hacking Fundamentals

Question

It is a widely used standard for message logging. It permits separation of the software that generates messages, the system that stores them, and the software that reports and analyzes them. This protocol is specifically designed for transporting event messages. Which of the following is being described?

Options

  • ASNMP
  • BICMP
  • CSYSLOG
  • DSMS

How the community answered

(48 responses)
  • A
    4% (2)
  • B
    2% (1)
  • C
    94% (45)

Why each option

Syslog is the standard protocol for centralized event message logging, enabling separation between message generation, storage, and analysis systems.

ASNMP

SNMP (Simple Network Management Protocol) is used for monitoring and managing network devices, not for transporting event log messages.

BICMP

ICMP (Internet Control Message Protocol) is used for network diagnostics and error reporting between hosts, not for structured event message logging.

CSYSLOGCorrect

Syslog, defined in RFC 5424, is a widely adopted standard that allows devices and applications to send event messages to a centralized logging server. It decouples the log-generating software, the storage mechanism, and the reporting tools, making it the standard for event transport in network and security operations. It operates over UDP port 514 (or TCP/TLS for reliable delivery) and is universally supported across operating systems and network devices.

DSMS

SMS (Short Message Service) is a mobile telephony text messaging service and is not a protocol used for system or network event logging.

Concept tested: Syslog protocol for centralized event logging

Source: https://datatracker.ietf.org/doc/html/rfc5424

Topics

#syslog#event logging#log management#network protocols

Community Discussion

No community discussion yet for this question.

Full 312-50V11 Practice