Examkin

Question

Difficulty: MediumCommon Ports and Protocols

A network operations team is configuring intermediate Access Control Lists (ACLs) to allow perimeter routers to send standardized event logs to a central SIEM server located in the management VLAN. If the infrastructure relies on standard unencrypted log forwarding, which transport protocol and destination port combination must be allowed through the ACLs?

  1. UDP port 514Answer
  2. B
    TCP port 514
  3. C
    UDP port 161
  4. D
    TCP port 6514

Answer

UDP port 514 is the correct transport protocol and destination port for standard unencrypted Syslog forwarding.
Standard unencrypted Syslog log forwarding uses User Datagram Protocol (UDP) on port 514 to send event notifications to a log collector or SIEM server without incurring TCP connection setup overhead.

Step-by-Step Solution

1
Identify the standard protocol utilized by routers and switches to send system notifications and logs to a central collector.
The network protocol used for system log aggregation is Syslog.
Syslog is the defined RFC standard for transmitting event messages across IP networks.
2
Determine the transport layer protocol and destination port number for traditional unencrypted Syslog.
Unencrypted Syslog operates over User Datagram Protocol (UDP) on destination port 514.
UDP is selected for standard logging to ensure lightweight transmission without requiring connection handshakes or acknowledgement overhead.

Key Concept

Syslog transport protocol and port assignments
Estimated Time:1m 0s
Rate this question

Topics

Common Ports and Protocols

More questions from this topic