nerdexam
HP

HPE6-A78 · Question #90

The monitoring admin has asked you to set up an AOS-CX switch to meet these criteria: Send logs to a SIEM Syslog server at 10.4.13.15 at the standard TCP port (514) Send a log for all events at the…

The correct answer is A. Specify the "warning" severity level for the logging server. The task is to configure an AOS-CX switch to send logs to a SIEM Syslog server at IP address 10.4.13.15 using TCP port 514, with logs for events at the "warning" severity level or above (i.e., warning, error, critical, alert, emergency). The initial command entered is…

Implementing and Configuring Aruba Network Security

Question

The monitoring admin has asked you to set up an AOS-CX switch to meet these criteria:

Send logs to a SIEM Syslog server at 10.4.13.15 at the standard TCP port (514) Send a log for all events at the "warning" level or above; do not send logs with a lower level than "warning" The switch did not have any "logging" configuration on it. You then entered this command:

AOS-CX(config)# logging 10.4.13.15 tcp vrf default What should you do to finish configuring to the requirements?

Options

  • ASpecify the "warning" severity level for the logging server.
  • BAdd logging categories at the global level.
  • CAsk for the Syslog password and configure it on the switch.
  • DConfigure logging as a debug destination.

How the community answered

(30 responses)
  • A
    87% (26)
  • B
    3% (1)
  • C
    3% (1)
  • D
    7% (2)

Explanation

The task is to configure an AOS-CX switch to send logs to a SIEM Syslog server at IP address 10.4.13.15 using TCP port 514, with logs for events at the "warning" severity level or above (i.e., warning, error, critical, alert, emergency). The initial command entered is: AOS-CX(config)# logging 10.4.13.15 tcp vrf default This command configures the switch to send logs to the Syslog server at 10.4.13.15 using TCP (port 514 is the default for TCP Syslog unless specified otherwise) and the default VRF. However, this command alone does not specify the severity level of the logs to be sent, which is a requirement of the task. Severity Level Configuration: AOS-CX switches allow you to specify the severity level for logs sent to a Syslog server. The severity levels, in increasing order of severity, are: debug, informational, notice, warning, error, critical, alert, and emergency. The requirement is to send logs at the "warning" level or above, meaning warning, error, critical, alert, and emergency logs should be sent, but debug, informational, and notice logs should not.

Topics

#AOS-CX syslog#SIEM integration#logging severity#TCP syslog

Community Discussion

No community discussion yet for this question.

Full HPE6-A78 Practice