QuestionQ82

Log Management

ABC is a highly reputed multinational company with multiple offices worldwide, and you work there as an L2 SOC Analyst. You are implementing a centralized logging solution to improve security monitoring. You are responsible for ensuring that log messages from routers, firewalls, and servers in multiple remote offices are efficiently collected and forwarded to a central syslog server. To simplify this process, an intermediate component is deployed to receive log messages from various devices and forward them to the primary syslog server. Which component in the syslog infrastructure performs this role?

  • A Syslog Relay
  • B Syslog Listener
  • C Syslog Collector
  • D Syslog Database
Explanation

A syslog relay receives messages from originators or other relays and forwards them to collectors or additional relays. This makes it the appropriate intermediate forwarding component between remote devices and a central syslog server.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!