Question

how does syslog prevent log file tampering? log messages are encrypted log messages are copied and backed up regularly log messages are generated in one place and stored in another log messages are password protected

Explanation:

Syslog prevents log tampering primarily by centralizing logs: generating them on source devices and storing them on a separate, secure server. This separation means attackers can’t easily alter logs on the storage server if they compromise the source. Encryption, backups, and password protection are not core syslog tampering prevention methods (backups help recover but don’t prevent tampering; encryption secures transmission, not storage tampering; password protection is access control, not unique to syslog’s tampering prevention).

Answer:

Log messages are generated in one place and stored in another