A Syslog server provides:

The correct answer is B. The ability to capture logs from multiple systems to a single system. Syslog servers are centralized logging aggregators - their primary purpose is to collect and store log messages from multiple devices (routers, firewalls, servers, switches) in one place, making administration and auditing far more manageable than checking each device…

Question

Options

AThe ability to create forensic log files from any system using IPSEC standards.
BThe ability to capture logs from multiple systems to a single system.
CServices to html clients for logging purposes.
DNone of the above.

How the community answered

(27 responses)

A
11% (3)
B
78% (21)
C
4% (1)
D
7% (2)

Explanation

Syslog servers are centralized logging aggregators - their primary purpose is to collect and store log messages from multiple devices (routers, firewalls, servers, switches) in one place, making administration and auditing far more manageable than checking each device individually. This is exactly what option B describes.

Why the distractors are wrong:

A is wrong because Syslog has nothing to do with IPsec. IPsec is a network security protocol for encrypting/authenticating IP traffic - a completely separate technology. Syslog uses UDP port 514 (or TCP for reliable delivery) and has its own RFC-defined format.
C is wrong because Syslog does not serve HTML clients. It uses its own protocol (RFC 5424/3164), not HTTP. Web-based log viewers may sit on top of a Syslog backend, but that's not what Syslog itself provides.
D is eliminated since B is correct.

Memory tip: Think of Syslog as a "drain" - all your devices pour their logs down into one central collection point. The word "central" is the key concept: one system, many sources.

Community Discussion

No community discussion yet for this question.

Full II0-001 Practice