If the goal of an administrator is to prevent messages logged to syslog from being changed or deleted, which action will best achieve this?

a. Sending syslog messages to another server with protected access
b. Making the syslog message file read-only
c. Copying down the size of the syslog message file and verifying it
d. Logging with the "security" facility and priority of "warning" or higher