LPIC-1 Exam 102 v5 (Linux Administrator) — Question 41

Which of the following entries in /etc/syslog.conf writes all mail related events to the file /var/log/maillog and sends all critical events to the remote server logger.example.com?

Answer options

• A. mail.* /var/log/maillog mail,crit @logger.example.org
• B. mail.* /var/log/maillog mail.crit syslog://logger.example.org
• C. mail /var/log/maillog mail.crit @logger.example.org
• D. mail.* /var/log/maillog mail.crit @logger.example.org
• E. mail * /var/log/maillog mail crit @logger.example.org

Correct answer: D

Explanation

Option D is correct because it specifies 'mail.*' to capture all mail-related events and correctly routes critical events to the remote server using the '@' notation. The other options either have incorrect syntax or do not properly specify the critical event forwarding as required.