When handling logs that contain personal data, which measure is most important to comply with privacy regulations?

Anonymizing or pseudonymizing personal data where possible

Storing logs in an unencrypted database

Sharing logs with all employees

A company has a mix of network devices that send logs in different formats: syslog for routers, JSON for a cloud-based firewall, and CSV for a legacy application. The security team wants to query all logs from a single interface and detect patterns across the different sources. Which approach should be used?

Use a SIEM platform that ingests logs from all sources, normalizes them into a common schema, and provides a unified search interface.

Manually convert all logs to CSV and store them in a shared folder for analysis.

Deploy a separate log viewer for each source and have analysts switch between them.

Set up a syslog server and configure all devices to send logs in syslog format.

A security analyst needs to quickly search a large set of firewall logs for all connections to a specific internal IP address on port 443. Which tool/command is most appropriate for this task?

Use grep with a pattern matching the IP and port in the log file.

Open the log file in a spreadsheet application and use the filter feature.

Run a full SIEM query that requires complex configuration.

Use a packet capture tool like Wireshark to read the log file.

Which method is commonly used to forward syslog messages from multiple network devices to a central log collector?

Using FTP to transfer log files

EC-CouncilCertified Cybersecurity Technician

Domain 6Objective 3

Network Logs Monitoring and Analysis CCT Practice Questions (Page 5)

Part of the Network Monitoring and Troubleshooting domain, which makes up ~14% of our current practice bank.

56questions here

12free pages

10concepts

Questions 21–25

21foundation · easy
When handling logs that contain personal data, which measure is most important to comply with privacy regulations?
Select an answer first
22foundation · easy
Which log analysis technique involves comparing current log activity against a baseline of normal behavior to identify deviations?
Select an answer first
23application · medium
A company has a mix of network devices that send logs in different formats: syslog for routers, JSON for a cloud-based firewall, and CSV for a legacy application. The security team wants to query all logs from a single interface and detect patterns across the different sources. Which approach should be used?
Select an answer first
24application · easy
A security analyst needs to quickly search a large set of firewall logs for all connections to a specific internal IP address on port 443. Which tool/command is most appropriate for this task?
Select an answer first
25foundation · easy
Which method is commonly used to forward syslog messages from multiple network devices to a central log collector?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CCT

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CCT” is a trademark of its owner, used for identification only.

Network Logs Monitoring and Analysis CCT Practice Questions (Page 5)

Questions 21–25

When handling logs that contain personal data, which measure is most important to comply with privacy regulations?

Which log analysis technique involves comparing current log activity against a baseline of normal behavior to identify deviations?

A security analyst needs to quickly search a large set of firewall logs for all connections to a specific internal IP address on port 443. Which tool/command is most appropriate for this task?

Which method is commonly used to forward syslog messages from multiple network devices to a central log collector?

Keep studying — Network Monitoring and Troubleshooting