Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

BCS CISMP-V9 Exam - Topic 2 Question 86 Discussion

Posted by Pamella on Sep 13, 2024 at 09:49 PM

One traditional use of a SIEM appliance is to monitor for exceptions received via syslog.

What system from the following does NOT natively support syslog events?

Suggested Answer: B

Syslog is a standard for message logging and allows devices to send event notification messages across IP networks to event message collectors - also known as Syslog servers or SIEM (Security Information and Event Management) systems. Native support for syslog is commonly found in various network devices and Unix/Linux-based systems.

Enterprise Wireless Access Points,Linux Web Server Appliances, andEnterprise Stateful Firewallstypically have built-in capabilities to generate and send syslog messages to a SIEM system for monitoring and analysis.

Windows Desktop Systems, on the other hand, do not natively support syslog because Windows uses its own event logging system known as Windows Event Log.While it is possible to configure Windows systems to send logs to a SIEM appliance, this usually requires additional software or agents to translate Windows Event Log messages into syslog format before they can be sent1.


Get Premium CISMP-V9 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
39 comments · newest first
ST
Staci 11 months ago
I thought all firewalls supported syslog events. Interesting!
LA
Laurel 11 months ago
Enterprise Wireless Access Points usually handle syslog too.
LA
Launa 11 months ago
Wait, are you sure about that? I thought they could be configured for it.
TE
Terrilyn 12 months ago
Totally agree, it's definitely not built-in.
DA
Dana 12 months ago
Windows Desktop Systems don't natively support syslog.
TY
Ty 1 year ago
I vaguely recall that enterprise wireless access points might not support syslog out of the box, but I’m not completely confident.
FL
Floyd 1 year ago
I’m leaning towards the Windows Desktop Systems as the answer, but I could be mixing it up with something else.
NI
Nikita 1 year ago
I practiced a similar question where we had to identify which devices support syslog, and I feel like firewalls usually do.
ZA
Zachary 1 year ago
I think I remember that Windows systems can log events, but I'm not sure if they use syslog natively.
TO
Tori 1 year ago
I'm pretty confident the answer is B. Windows Desktop Systems don't natively support syslog, while the other options like Linux servers and network devices typically do. This seems like a straightforward question.
DE
Desire 1 year ago
Okay, let's see. Enterprise Wireless Access Points, Windows Desktop Systems, and Linux Web Server Appliances all seem like they would support syslog. I'm guessing the Enterprise Stateful Firewall is the one that doesn't natively support it.
CA
Carlee 1 year ago
Hmm, I'm a bit unsure about this one. I know syslog is a common logging protocol, but I'm not sure which of these systems wouldn't support it natively. I'll have to think this through.
BR
Britt 1 year ago
This looks like a straightforward question about syslog support. I'll think through the options carefully and choose the one that doesn't natively support syslog.
RO
Rosio 1 year ago
This looks tricky, but I'm going to give it my best shot. I'll start by considering the purpose and behavior of each string method.
LA
Lauran 2 years ago
I'm going with D) Enterprise Stateful Firewall. Those things are so complex, I bet they have their own proprietary logging system.
FR
Francoise 2 years ago
Enterprise Wireless Access Point? Come on, even my grandma's router has syslog these days. That's gotta be the easy one.
NA
Nakita 2 years ago
Haha, Windows not supporting syslog? That's like a fish not swimming. Gotta be the right answer!
MI
Mitzie 2 years ago
↳ replying to Nakita
C) Linux Web Server Appliances.
AN
Anjelica 2 years ago
↳ replying to Nakita
B) Windows Desktop Systems.
KE
Kenny 2 years ago
↳ replying to Nakita
C) Linux Web Server Appliances.
BA
Barb 2 years ago
↳ replying to Nakita
B) Windows Desktop Systems.
KR
Kris 2 years ago
↳ replying to Nakita
A) Enterprise Wireless Access Point.
SK
Skye 2 years ago
↳ replying to Nakita
A) Enterprise Wireless Access Point.
AN
Annett 2 years ago
That makes sense, Windows Desktop Systems are not typically used for syslog monitoring.
RO
Royal 2 years ago
I disagree, I believe the answer is B) Windows Desktop Systems because they do not natively support syslog events.
AN
Annett 2 years ago
I think the answer is A) Enterprise Wireless Access Point.
LA
Lashandra 2 years ago
Hmm, I'm not so sure about that. I thought all enterprise-grade systems would have syslog support these days. Maybe the firewall is the odd one out here.
SH
Sharen 2 years ago
I'm pretty sure the answer is B) Windows Desktop Systems. Syslog is a Linux/Unix-based logging protocol, so Windows desktops wouldn't natively support it.
GL
Glendora 2 years ago
↳ replying to Sharen
That's correct, Linux Web Server Appliances do support syslog events.
AH
Ahmed 2 years ago
↳ replying to Sharen
C) Linux Web Server Appliances.
NI
Nickolas 2 years ago
↳ replying to Sharen
I agree, Windows Desktop Systems do not natively support syslog events.
JO
Johnna 2 years ago
↳ replying to Sharen
D) Enterprise Stateful Firewall.
VI
Viki 2 years ago
↳ replying to Sharen
C) Linux Web Server Appliances.
CA
Carma 2 years ago
↳ replying to Sharen
B) Windows Desktop Systems.
AI
Aimee 2 years ago
↳ replying to Sharen
Good to know for monitoring exceptions with a SIEM appliance.
CO
Coletta 2 years ago
↳ replying to Sharen
A) Enterprise Wireless Access Point.
LO
Louvenia 2 years ago
↳ replying to Sharen
So, the correct answer is B) Windows Desktop Systems.
RU
Ruby 2 years ago
↳ replying to Sharen
That makes sense, syslog is more commonly used in Linux/Unix environments.
VI
Viki 2 years ago
↳ replying to Sharen
I think you're right, Windows Desktop Systems don't natively support syslog.
0/2000 characters

Save Cancel