Due to a recent change in company policy, all users managing network infrastructure devices must use SSH v2 and all administrative activity must be collected on a central store. Which of the…

A network intrusion detection system monitors traffic for malicious patterns and generates alerts but does not collect or store administrative session logs from network devices.

A traffic analysis tool examines network flow data for performance or security insights but is not designed to aggregate device-level administrative logs.

A syslog server receives log messages sent via the Syslog protocol (UDP/TCP port 514) from routers, switches, and other network devices, storing them in a central repository. This allows administrators to retain and audit SSH session activity and configuration changes from all infrastructure devices in a single location as required by the new policy.

A network sniffer captures raw packets on a specific segment in real time but does not provide persistent, centralized log collection from multiple devices.