Objective 2.1 Analyze Logs for Signs of Attack. CYBERSEC-FIRST-RESPONDER Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which visualization type is most appropriate for showing the number of security events over time to identify a spike in activity?

   • APie chart
   • BScatter plot
   • CTable
   • DLine chart
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which log file is most likely to contain information about HTTP requests, such as URLs requested, response codes, and user agents?

   • AKernel log
   • BSystem log
   • CAuthentication log
   • DWeb-server log
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   An analyst is searching logs for indicators of a web shell. Which search query would be most effective in finding common web shell patterns?

   • ASearch for requests from a single IP
   • BSearch for all POST requests
   • CSearch for requests with a 200 status code
   • DSearch for requests containing 'cmd' or 'eval' in the URL
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which pattern in authentication logs is commonly associated with a brute-force attack?

   • AA user logging in from two different locations simultaneously
   • BA large number of failed login attempts from the same source IP in a short time
   • CA successful login after a system reboot
   • DA single successful login from a new device
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A security analyst wants to create a dashboard that shows the top 10 source IPs generating the most failed login attempts in the last 24 hours. Which visualization would best display this data?

   • AA scatter plot of IPs and counts
   • BA line chart showing counts over time
   • CA horizontal bar chart sorted by count
   • DA pie chart showing proportions
   Reveal Solution Discussion Select an answer first