A network administrator currently collects log files from several different servers. Which of the following would allow the network administrator to collect log files on a centralized host?

The correct answer is C. The network administrator should install and configure a syslog server. Syslog is the standard protocol (typically UDP port 514) used to forward log messages from network devices, servers, and applications to a centralized syslog server. It allows administrators to aggregate, store, and analyze logs from many sources in one place, simplifying…

Network operations

Question

Options

AThe network administrator should install and configure a traffic analysis server.
BThe network administrator should install and configure a DMZ server.
CThe network administrator should install and configure a syslog server.
DThe network administrator should install and configure a network sniffer.

How the community answered

(22 responses)

B
5% (1)
C
86% (19)
D
9% (2)

Explanation

Syslog is the standard protocol (typically UDP port 514) used to forward log messages from network devices, servers, and applications to a centralized syslog server. It allows administrators to aggregate, store, and analyze logs from many sources in one place, simplifying auditing and troubleshooting. A traffic analysis server analyzes network traffic patterns, not log files. A DMZ server hosts public-facing services. A network sniffer (packet analyzer) captures live traffic on the wire - it does not collect log files from remote hosts.

Topics

#syslog#centralized logging#log management

Community Discussion

No community discussion yet for this question.

Full N10-005 Practice