Network Logs Monitoring and Analysis CCT Practice Questions (Page 11)

Questions 51–55

1. 51application · medium

   A company collects logs that contain user IP addresses and URLs visited. They want to use these logs for security analysis but must comply with privacy regulations. What is the best practice?

   • AShare the logs with all employees for transparency.
   • BCollect as much data as possible for future analysis.
   • CMinimize data collection to only what is necessary and restrict access to authorized personnel.
   • DStore logs in plain text to avoid encryption overhead.
   Reveal Solution Discussion Select an answer first
2. 52application · medium

   Users report that a web application is intermittently slow. The analyst checks the application logs and finds repeated timeout errors connecting to the database server. What should the analyst do next to pinpoint the root cause?

   • ACorrelate the timestamps of the timeout errors with database server logs and network device logs.
   • BRestart the database server immediately to resolve the issue.
   • CIncrease the application's timeout setting to avoid errors.
   • DCheck the web server's access log for user requests.
   Reveal Solution Discussion Select an answer first
4. 53foundation · easy

   Which component of the ELK stack is responsible for visualizing log data through dashboards and charts?

   • AKibana
   • BElasticsearch
   • CLogstash
   • DBeats
   Reveal Solution Discussion Select an answer first
5. 54application · medium

   A small company runs a mix of Linux servers, a firewall appliance, and Windows workstations. The security team needs to centralize logs for incident response but has limited budget and no dedicated SIEM. Which approach best meets the requirement while keeping operational overhead low?

   • AUse a cloud-based log management service that requires per-GB ingestion fees and complex setup.
   • BInstall a full SIEM platform on a powerful server and forward all logs to it using proprietary agents.
   • CConfigure each device to send syslog to a central Linux server running rsyslog with separate file per source.
   • DHave each system store logs locally and only pull them manually when an incident occurs.
   Reveal Solution Discussion Select an answer first
6. 55foundation · easy

   Which method is commonly used to search for specific patterns or keywords in log files from the command line?

   • Anetstat
   • Btraceroute
   • Cgrep
   • Dping
   Reveal Solution Discussion Select an answer first