If the goal of an administrator is to prevent messages logged to syslog from being changed or deleted, which action will best achieve this?

Sending syslog messages to another server with protected access

Making the syslog message file read$-$only

Copying down the size of the syslog message file and verifying it

Logging with the "security" facility and priority of "warning" or higher