Objective 2.1 Analyze Logs for Signs of Attack. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A security team wants to use a cloud-based service to collect logs from their applications and infrastructure, with built-in dashboards and alerting. Which platform would best meet this need?

   • AELK stack
   • BWazuh
   • CGraylog
   • DDatadog
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of log aggregation in a security monitoring environment?

   • ATo encrypt log data in transit
   • BTo centralize logs from multiple sources into a single platform for analysis
   • CTo generate real-time alerts for all security events
   • DTo delete logs that are no longer needed
   Reveal Solution Discussion Select an answer first
4. 3expert · hard

   A company has a SIEM but is not collecting logs from its cloud-based Kubernetes clusters. The security team wants to include these logs in the SIEM for correlation. Which approach would be most efficient?

   • AUse a separate SIEM for cloud logs
   • BDisable logging in the clusters to reduce noise
   • CManually export logs from the clusters and upload them to the SIEM
   • DDeploy a log agent or sidecar in the Kubernetes clusters to forward logs to the SIEM
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary benefit of using dashboards and charts to visualize log data?

   • AThey make it easier to identify trends and anomalies in large datasets
   • BThey encrypt log data to protect it from unauthorized access
   • CThey reduce the storage space required for logs
   • DThey automatically block malicious IP addresses
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which method is commonly used to collect logs from multiple sources and forward them to a central log-analysis platform?

   • AUsing a syslog forwarder or agent on each source system
   • BConfiguring a firewall to log all traffic
   • CManually copying log files to a USB drive
   • DUsing a network sniffer to capture all packets
   Reveal Solution Discussion Select an answer first