Examkin

Question

Difficulty: MediumNetwork Host Services and Server Roles

A systems administrator is configuring a centralized server to automatically receive and aggregate system diagnostic logs and status events generated by enterprise routers, switches, and firewalls across the organization. Which network server role should be installed on this host, and which default protocol port must be open to allow this log traffic?

  1. Syslog server using UDP port 514Answer
  2. B
    Syslog server using TCP port 53
  3. C
    DHCP server using UDP port 67
  4. D
    DNS server using APIPA port 169

Answer

The correct role is a Syslog server operating on UDP port 514.
Syslog is the standard service protocol utilized for central event logging, security auditing, and system monitoring across network devices, and it operates over UDP port 514 by default.

Step-by-Step Solution

1
Identify the primary network service function requested in the scenario.
The scenario requires collecting and aggregating system diagnostic logs from network appliances (routers, switches, firewalls).
Syslog is the standardized protocol designed specifically for central message and event logging across network devices.
2
Determine the default port and transport protocol standard for Syslog traffic.
Standard Syslog services listen for incoming log notifications over UDP port 514.
Firewall rules must explicitly permit UDP port 514 inbound to the logging host for messages to arrive successfully.

Key Concept

Syslog server role and default port (UDP 514)
Rate this question

Topics

Network Host Services and Server Roles

More questions from this topic