Question

Difficulty: MediumNetwork Host Services and Server Roles

A systems technician is configuring a dedicated host to consolidate system event log messages and alert outputs generated by managed network switches and routers. Which of the following server roles should the technician enable to gather these centralized logs?

  1. Syslog serverAnswer
  2. B
    DHCP server
  3. C
    DNS server
  4. D
    Web server

Answer

Deploying a Syslog server role allows network hardware to transmit event telemetry and log files to a central host for monitoring and audit analysis.
A Syslog server acts as a centralized repository for receiving and storing diagnostic, security, and operational logging data sent from switches, routers, firewalls, and other network hardware.

Step-by-Step Solution

1
Identify the primary operational requirement.
The requirement is to collect, aggregate, and store event messages and system alerts from switches and routers.
Centralizing infrastructure telemetry requires a service capable of receiving standard event log streams.
2
Evaluate candidate server roles for log aggregation capabilities.
Syslog is the standard protocol and host service used for central logging across network devices.
Syslog operating on UDP port 514 allows endpoints and network appliances to forward log data to a single logging host.

Key Concept

Syslog Server Role and Centralized Logging
Rate this question