Examkin

Question

Difficulty: HardNetwork Host Services and Server Roles

A network administrator is setting up centralized log management for an organization's network infrastructure. Edge routers, firewalls, and layer 3 switches must continuously transmit system events, audit trails, and status notifications to a central server using UDP port 514 for monitoring and archiving. Which network server role must be configured on the destination host to collect these log messages?

  1. Syslog serverAnswer
  2. B
    Domain Name System (DNS) server
  3. C
    Dynamic Host Configuration Protocol (DHCP) server
  4. D
    Simple Network Management Protocol (SNMP) server

Answer

Syslog server
A Syslog server is designed to act as a centralized log repository, accepting event notification messages, system logs, and security alerts sent from routers, firewalls, and switches over UDP port 514.

Step-by-Step Solution

1
Analyze the requirements described in the scenario
Identified the need to aggregate event messages, audit trails, and status alerts sent from infrastructure devices via UDP port 514.
Networking roles are defined by their functional capabilities and standard port assignments.
2
Compare network service roles against UDP port 514 and log aggregation functions
Syslog is the standard protocol for message logging and transport operating over UDP port 514.
Routers, switches, and firewalls use the Syslog protocol to forward event notification data to a central log collector.
3
Eliminate non-matching host service roles
DNS (port 53), DHCP (ports 67/68), and SNMP (ports 161/162) serve distinct network management or addressing roles and do not natively receive Syslog messages.
Proper protocol and port matching isolates the Syslog server role as the correct destination host service.

Key Concept

Syslog Server Role and Event Logging (UDP Port 514)
Estimated Time:1m 30s
Rate this question

Topics

Network Host Services and Server Roles

More questions from this topic