CompTIA Network+ (N10-009)Network OperationsMedium
A technician reviewing centralized syslog messages notices entries tagged with facility code 4. According to standard syslog facility definitions, what type of messages does this facility represent?
- ASecurity/authorization messages
- BKernel messages
- CLocal use 4 messages
- DMail system messages
Show answer & explanationAnswer & explanation
Correct answer: A. Security/authorization messages
In the standard syslog facility numbering, facility code 4 is designated for security/authorization messages, which is separate from facility 0 (kernel), facility 2 (mail), and facilities 16-23 (local0-local7).
Why the other options are wrong
- B. Kernel messages use facility code 0.
- C. Local use facilities are numbered 16 through 23 (local0-local7), not 4.
- D. Mail system messages use facility code 2.
Syslog Facility Codes
Facility codes in syslog classify the source or category of a log message (e.g., kernel, mail, security), separate from the severity level.
- Facility 0 = kernel, 2 = mail, 4 = security/authorization
- Local facilities range 16-23 (local0-local7)
- Facility and severity together form the syslog message header
Memory trick: Facility tells WHO sent it; severity tells HOW BAD it is.