A network technician is configuring centralized logging for multiple edge routers and firewalls. The security policy requires all network infrastructure devices to send event logs over UDP port 514 to a dedicated host for storage and analysis. Which of the following network host services must be deployed to fulfill this requirement?
- Syslog serverAnswer
- BDHCP server
- CWeb server operating on TCP port 443
- DAPIPA host service
Answer
The correct host service is a Syslog server, which receives and stores event messages sent from network infrastructure equipment over UDP port 514.
A Syslog server is designed specifically to gather, organize, and store event messages and system warnings generated by routers, switches, firewalls, and other network hosts. By default, syslog uses UDP port 514 to receive formatted log messages.
Step-by-Step Solution
Key Concept
Syslog Server Role and UDP Port 514