Local vs. Centralized Log Management SCE Practice Questions (Page 2)

Questions 6–10

1. 6expert · hard

   A company has centralized log management with a single SIEM. The SIEM goes down during a major security incident, and the security team cannot access any logs. The company had not implemented redundancy. What is the most effective way to mitigate this single point of failure in the future?

   • ADeploy a secondary SIEM in a different location and replicate logs to both.
   • BKeep logs only on the original SIEM and hope it does not fail again.
   • CSwitch to local log management on all servers.
   • DReduce the number of logs sent to the SIEM to lower the load.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   What is a benefit of local log management?

   • AIt allows correlation of events across systems
   • BIt reduces network dependency because logs are not transmitted
   • CIt simplifies compliance reporting
   • DIt provides a centralized view of all logs
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is a common challenge of centralized log management?

   • ANo need for storage management
   • BReduced visibility into system activity
   • CIncreased difficulty in correlating events
   • DHigh network bandwidth consumption due to log transmission
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A security operations center (SOC) is evaluating whether to centralize logs. They have a limited budget and need to justify the investment. Which benefit of centralized log management is most likely to justify the cost?

   • AImproved incident response through faster correlation of events across systems.
   • BGuaranteed protection of logs from tampering.
   • CElimination of the need for local log storage on individual systems.
   • DReduced network bandwidth because logs are sent once to a central location.
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which of the following is an advantage of centralized log management over local log management?

   • AIt requires less network bandwidth
   • BIt is simpler to set up than local log management
   • CIt eliminates the need for any log storage
   • DIt provides a single view for analyzing events across all systems
   Reveal Solution Discussion Select an answer first