4.5 Describe the Use of Syslog Features, Including Facilities and Severity Levels 200-301 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   In syslog, what is the purpose of the facility value in a log message?

   • AIt identifies the type of process or subsystem that generated the message
   • BIt indicates the severity or urgency of the event
   • CIt specifies the IP address of the device that sent the message
   • DIt defines the format of the message body
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A network engineer is configuring a Cisco router to send syslog messages to a central server. The engineer wants to ensure that only messages that indicate a serious problem, such as a critical condition, are sent to the server, while less severe messages are stored locally on the router. Which configuration would achieve this?

   • Alogging trap 3
   • Blogging trap 2
   • Clogging trap 5
   • Dlogging trap 4
   Reveal Solution Discussion Select an answer first
4. 23expert · medium

   A network administrator is designing a monitoring solution for a large enterprise network. The administrator needs to collect detailed logs of all configuration changes for compliance auditing and also needs to receive real-time alerts for security events. The administrator is concerned about the network bandwidth consumed by monitoring traffic. Which approach best balances the requirements?

   • AUse SNMP to collect configuration change logs and syslog for security alerts
   • BUse only SNMP for both configuration change logs and security alerts
   • CUse syslog to send all configuration change messages to a central server, and use SNMP traps for security alerts
   • DUse only syslog for both configuration change logs and security alerts
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A network administrator is configuring a Cisco router to send syslog messages to a central server. The administrator wants to categorize messages from different sources, such as interface events, routing protocol events, and security events, so that they can be filtered on the server. Which syslog feature should the administrator use?

   • ASeverity levels
   • BLogging buffer size
   • CMessage timestamps
   • DFacility codes
   Reveal Solution Discussion Select an answer first
6. 25expert · medium

   A network administrator is configuring syslog on a Cisco router. The administrator wants to send syslog messages to two different servers: one for security monitoring and one for general troubleshooting. The security team wants to receive only security-related messages, while the troubleshooting team wants to receive all messages. Which approach should the administrator take?

   • AConfigure one logging host and use a syslog relay to forward messages to the other server
   • BConfigure two logging hosts with different trap levels
   • CConfigure one logging host and filter messages on the server
   • DConfigure one logging host and use SNMP traps for security messages
   Reveal Solution Discussion Select an answer first