Why is it a best practice to transmit logs over an encrypted channel (e.g., TLS) when sending them to a central collector?

To ensure that logs are stored in a format compatible with all SIEM tools.

To make logs easier to read by humans.

To prevent attackers from intercepting or tampering with log data in transit.

To reduce the bandwidth required for log transmission.

Why is it important to define a log retention policy?

To balance the need for historical data against storage costs and legal requirements.

To increase the volume of logs collected from all sources.

To ensure that logs are deleted immediately after analysis to reduce risk.

To make logs readable by humans without any parsing.

A company has multiple servers generating logs in different formats. They want to centralize these logs and make them searchable in one place. Which tool should they use?

A spreadsheet application to manually combine logs.

A file compression tool to store logs.

A log management platform that ingests, normalizes, and indexes logs.

A network packet analyzer to capture traffic.

A company is evaluating log management tools. They need to collect logs from multiple cloud services, on-premises servers, and network devices. They also need to perform real-time correlation and alerting. Which type of tool is best suited?

A centralized syslog server with no analysis capabilities.

A SIEM platform that supports multiple log sources and real-time correlation.

A database used to store logs for manual querying.

A simple log file viewer that can open multiple log files.

EC-CouncilSOC Essentials

Domain 5Objective 5

Logging and Log Management Tools SCE Practice Questions (Page 10)

Part of the Log Management domain, which makes up ~13% of our current practice bank. EC-Council does not publish an official question count, but from its 120-minute exam (~50–80 total, ~7–10 in this domain), expect 1–2 from this objective — we provide 49 practice questions to prepare you well beyond it. (estimate)

49questions here

10free pages

8concepts

Questions 46–49

46foundation · easy
Why is it a best practice to transmit logs over an encrypted channel (e.g., TLS) when sending them to a central collector?
Select an answer first
47foundation · easy
Why is it important to define a log retention policy?
Select an answer first
48application · easy
A company has multiple servers generating logs in different formats. They want to centralize these logs and make them searchable in one place. Which tool should they use?
Select an answer first
49application · easy
A company is evaluating log management tools. They need to collect logs from multiple cloud services, on-premises servers, and network devices. They also need to perform real-time correlation and alerting. Which type of tool is best suited?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SCE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “SCE” is a trademark of its owner, used for identification only.