LFCS Certification LFCS Log Management and Monitoring 2

Question 1

What is the default rsyslog main configuration file path?

Accepted Answer

/etc/rsyslog.conf

Answer

/etc/syslog.conf

Answer

/etc/log/rsyslog.conf

Answer

/etc/rsyslog/rsyslog.conf

Question 2

In rsyslog filter syntax, which facility keyword represents kernel-generated messages?

Accepted Answer

kern

Answer

kernel

Answer

sys

Answer

klog

Question 3

Which rsyslog severity level is more critical than 'err' but less critical than 'alert'?

Accepted Answer

crit

Answer

alert

Answer

err

Answer

warn

Question 4

Which rsyslog rule forwards all facility/severity combinations to a remote UDP syslog server at 192.168.1.1?

Accepted Answer

*.* @192.168.1.1

Answer

*.* forward:192.168.1.1

Answer

remote=192.168.1.1

Answer

*.* | syslog 192.168.1.1

Question 5

Where should application-specific rsyslog configuration snippets be placed?

Accepted Answer

/etc/rsyslog.d/

Answer

/etc/rsyslog.conf.d/

Answer

/var/log/rsyslog.d/

Answer

/etc/syslog.d/

Question 6

What command reloads rsyslog to apply configuration changes without a full service restart?

Accepted Answer

systemctl reload rsyslog

Answer

rsyslogd -HUP

Answer

rsyslog --reload

Answer

service rsyslog refresh