CompTIA Security+ Certification SY0-601: The Total Course - Configuring Linux Log Forwarding

This video tutorial explains how to configure syslog forwarding between two Linux hosts. It covers setting up a centralized syslog server to receive log entries and configuring a log client to forward logs. The tutorial includes editing configuration files, restarting services, and verifying the setup using commands like netstat and logger. The importance of having a centralized log repository for security and data integrity is also discussed.

What is the primary purpose of configuring syslog forwarding between two Linux hosts?

• To increase storage capacity

• To improve network speed

• To centralize log management

• To enhance the graphical user interface

Which file needs to be edited to configure the centralized logging host to receive log entries?

• /etc/rsyslog.conf

• /etc/hosts

• /etc/passwd

• /etc/network/interfaces

What port is typically used for syslog UDP connectivity?

• 443

• 22

• 80

• 514

What command is used to check the status of the syslog service?

• service rsyslog enable

• service rsyslog status

• service rsyslog stop

• service rsyslog start

What directive is added to the log client configuration to forward all log entries?

• *.*

• kern.warn

• auth.info

• mail.err

Which command is used to create a custom log entry for testing?

• echo

• logger

• print

• write

Why is it important to have a centralized copy of log messages?

• To reduce server load

• To simplify user management

• To prevent data loss in case of corruption or attacks

• To increase system performance