Examkin

Soru

Zorluk: ZorNetwork Logging and Auditing

A network engineer is troubleshooting log loss during periods of high link congestion. System logs sent from edge routers to a centralized collector are currently dropped during traffic spikes. The compliance team mandates that log transmission across the WAN link must guarantee delivery, avoid loss under network congestion, and encrypt log payloads in transit. Which configuration change best satisfies all technical and compliance requirements?

  1. Configure Syslog to use TCP port 6514 with TLS encryption enabled.Cevap
  2. B
    Configure Syslog to use UDP port 514 with SNMPv3 authPriv encryption.
  3. C
    Configure Syslog to use UDP port 6514 without authentication.
  4. D
    Migrate the logging transport to SNMPv2c using authNoPriv security mode over TCP port 514.

Cevap

Configure Syslog to use TCP port 6514 with TLS encryption enabled.
Configuring Syslog over TLS on TCP port 6514 satisfies both delivery assurance and confidentiality requirements. TCP provides connection-oriented transmission with error recovery and flow control to prevent packet loss during congestion, while TLS encrypts event data across untrusted network paths.

Adım Adım Çözüm

1
Identify transport reliability requirements
UDP (port 514) is connectionless and drops packets during buffer saturation, whereas TCP provides flow control and retransmission to guarantee log delivery under congestion.
The requirement explicitly demands preventing log loss during periods of network congestion.
2
Identify encryption requirements for audit logs
Standard Syslog over UDP port 514 is unencrypted. Syslog over TLS utilizes TCP port 6514 to encrypt log messages in transit across untrusted links.
Compliance mandates protecting log contents against eavesdropping.
3
Evaluate protocol security models
Syslog over TLS (TCP 6514) directly addresses both transport reliability and cryptographic protection requirements.
Alternative configurations using UDP or insecure SNMP versions (SNMPv2c) fail reliability or confidentiality criteria.

Anahtar Kavram

Syslog Transport and Encryption (TCP/6514 TLS)
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Network Logging and Auditing

Bu konudan daha fazla soru