Logging Best Practices SCE Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A small company is implementing a log management process for the first time. They want to ensure that logs are collected from all critical systems, stored securely, and eventually disposed of when no longer needed. Which sequence of steps best represents the log management lifecycle?

   • ACollect, generate, store, analyze, dispose.
   • BDispose, generate, collect, store, analyze.
   • CStore, analyze, generate, collect, dispose.
   • DGenerate, collect, analyze, store, dispose.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security analyst is writing a query to find all failed login attempts on a VPN gateway. The logs are stored in JSON format. Which field is essential for the query to return useful results?

   • AThe log format version number.
   • BThe storage location of the log file.
   • CThe username associated with the failed attempt.
   • DThe log source IP address of the VPN gateway.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A SOC analyst is investigating a potential data breach. The analyst needs to determine the scope of the breach, including which systems were accessed and what data was exfiltrated. Which logging best practice would most directly support this investigation?

   • AGenerate logs only for critical systems to reduce noise.
   • BUse a log management tool that automatically deletes logs after analysis.
   • CStore logs in a centralized repository with a 30-day retention period.
   • DEnsure logs include sufficient context, such as user, source, destination, and action.
   Reveal Solution Discussion Select an answer first
5. 9expert · hard

   A company's log management system is hosted in the cloud. The security team is concerned about the risk of a cloud provider employee accessing sensitive logs. They need to ensure that logs are protected from unauthorized access. What is the most effective measure?

   • AEncrypt the logs at rest and manage the encryption keys in a customer-controlled key management service.
   • BStore logs in a publicly accessible bucket for easy access.
   • CUse a complex naming convention for log files.
   • DRely on the cloud provider's default encryption settings.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is planning to dispose of logs that have reached the end of their retention period. The logs contain sensitive customer data. What is the most secure method of disposal?

   • ADelete the files and empty the recycle bin.
   • BMove the logs to a quarantine folder for later review.
   • CSecurely erase the storage media using a certified data destruction method.
   • DOverwrite the logs with dummy data once.
   Reveal Solution Discussion Select an answer first