CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ41

VerifiedSecure Software Deployment, Operations, Maintenance

You are the Security Manager for Tech Perfect Inc. The organization uses Syslog for computer-system management and security auditing, and for general informational, analysis, and debugging messages. You need to prevent a denial-of-service (DoS) attack against the Syslog server and avoid losing Syslog messages from other sources. What should you do to accomplish this task?

Explanation

Per-source rate limiting caps the number of Syslog messages or TCP connections a sender can generate during a defined interval. This prevents one source from exhausting Syslog-server resources and preserves the server’s capacity to receive messages from other sources. Rsyslog documents rate-limit intervals and message-burst limits, including per-source rate limiting.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!