Local vs. Centralized Log Management SCE Practice Questions (Page 8)

Questions 36–40

1. 36expert · hard

   A company is evaluating log management options. They have a small IT team, but they also need to meet strict compliance requirements that demand tamper-evident logs. The network is reliable. Which approach best balances operational overhead and security?

   • ACentralized log management with write-once, read-many (WORM) storage to prevent tampering.
   • BCentralized log management without any special storage controls.
   • CLocal log management on each server with file permissions to restrict access.
   • DLocal log management and manual backups to external drives.
   Reveal Solution Discussion Select an answer first
2. 37foundation · easy

   Which scenario is best suited for centralized log management?

   • AA small office with one file server and no IT staff
   • BA standalone development machine in a lab
   • CA single laptop used by a home user
   • DAn enterprise with multiple servers and a security operations center
   Reveal Solution Discussion Select an answer first
4. 38foundation · easy

   Which of the following is a suitable use case for local log management?

   • AA single-purpose device that is not connected to the corporate network
   • BA company that wants to use machine learning to detect anomalies across all systems
   • CAn organization that must meet strict compliance requirements for log retention
   • DA multi-site organization that needs to correlate security events
   Reveal Solution Discussion Select an answer first
5. 39application · medium

   A company has centralized all logs into a single SIEM. Recently, the SIEM went down, and the security team could not access any logs during the outage. What is the primary lesson from this incident?

   • ACentralized log management is difficult to analyze.
   • BCentralized log management is too expensive.
   • CCentralized log management introduces a single point of failure.
   • DCentralized log management is not scalable.
   Reveal Solution Discussion Select an answer first
6. 40foundation · easy

   Compared to centralized log management, local log management typically has:

   • ABetter security because logs are encrypted in transit
   • BEasier correlation of events across systems
   • CHigher scalability because logs are distributed
   • DLower operational overhead because no central infrastructure is needed
   Reveal Solution Discussion Select an answer first