GIAC GCFA Exam - Topic 1 Question 14 Discussion

Actual exam question for GIAC's GCFA exam

Question #: 14
Topic #: 1

[All GCFA Questions]

John works as a Network Administrator for Perfect Solutions Inc. The company has a Linux-based network. John is working as a root user on the Linux operating system. He wants to forward all the kernel messages to the remote host having IP address 192.168.0.1. Which of the following changes will he perform in the syslog.conf file to accomplish the task?

Akern.* @192.168.0.1

B!*.* @192.168.0.1

C*.* @192.168.0.1

D!kern.* @192.168.0.1

Show Suggested Answer

Suggested Answer: A

by Timothy at May 08, 2022, 02:29 PM

Limited Time Offer

25%

Off

Get Premium GCFA Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Ling

4 months ago

Not sure if A is right, what if there are other filters?

upvoted 0 times

...

Denise

4 months ago

Wait, why not just use C? Seems easier.

upvoted 0 times

...

Coral

4 months ago

I thought it was B at first, but A makes more sense.

upvoted 0 times

...

Mitzie

4 months ago

Totally agree, A is the way to go.

upvoted 0 times

...

Carlee

5 months ago

Option A is the correct one!

upvoted 0 times

...

Solange

5 months ago

I feel like option D is saying to exclude kernel messages, which doesn't make sense for what John wants to do.

upvoted 0 times

...

Luann

5 months ago

I practiced a similar question before, and I think option C would log all messages, not just kernel ones. So, it can't be the answer.

upvoted 0 times

...

Shantay

5 months ago

I'm not entirely sure, but I think option B is too broad since it captures everything. That doesn't seem right for just kernel messages.

upvoted 0 times

...

Nancey

5 months ago

I remember that kernel messages are usually logged under the "kern" facility, so I think option A might be correct.

upvoted 0 times

...

Oretha

5 months ago

I’m a bit confused about option B; it seems too broad since it includes all messages, not just kernel ones.

upvoted 0 times

...

Kassandra

5 months ago

I practiced a similar question where we had to filter logs, and I feel like A is definitely the way to go.

upvoted 0 times

...

Timmy

5 months ago

I'm not entirely sure, but I remember something about using "kern.*" for kernel logs.

upvoted 0 times

...

Fanny

5 months ago

I think option A is the right choice since it specifically targets kernel messages.

upvoted 0 times

...

Vallie

5 months ago

Okay, I've got this! The solution is to use dynamic forms to conditionally show the relevant data fields based on the user's profile. That way, we can ensure the right information is displayed without having to manage multiple record types or page layouts. Seems like the most efficient approach to me.

upvoted 0 times

...

Lelia

5 months ago

I'm pretty confident that the clause mentioned is the hold-harmless clause. It protects the provider from suing the member, right?

upvoted 0 times

...

Carman

5 months ago

I think a list of specific securities is essential, but I'm unsure about the need for the FDIC statement.

upvoted 0 times

...