What is a key requirement for logs to be considered audit-ready?

Logs must be tamper-evident and have access controls

Logs must be stored in a proprietary format

Logs must be stored on-premises only

Logs must be deleted after 30 days

What is the primary purpose of an operational dashboard in a log management platform?

To provide a visual representation of log data for monitoring and analysis

To store logs for long-term retention

To normalize logs into a common schema

Which of the following is an example of automating a log response workflow?

Manually reviewing logs every day

Automatically creating a ticket when a critical alert is triggered

Encrypting logs with a manual script

Which of the following is an example of log enrichment?

Adding a timestamp to a log entry

Adding the username associated with an event

A company is designing a log integration architecture to aggregate logs from multiple cloud providers and on-premises servers. The architecture must ensure that logs are not lost during transmission and that the log pipeline is resilient to failures. Which design should the team choose?

Use a single collector that pulls logs from all sources on a schedule.

Send logs directly from sources to the SIEM over UDP to minimize overhead.

Use a message queue between log sources and the central collector, with retry and acknowledgment mechanisms.

Have each source write logs to a local file and rely on manual uploads.

GIAC Cloud Security Architecture and Design

Domain 4Objective 2

Orchestrating Log Integrations for Operational Value GCAD Practice Questions (Page 6)

Part of the Logging, Monitoring, and Incident Response domain, which makes up ~19% of our current practice bank. GIAC (SANS) does not publish an official question count, but from its 120-minute exam (~50–80 total, ~10–15 in this domain), expect 3–5 from this objective — we provide 50 practice questions to prepare you well beyond it. (estimate)

50questions here

10free pages

10concepts

Questions 26–30

26foundation · easy
What is a key requirement for logs to be considered audit-ready?
Select an answer first
27foundation · easy
What is the primary purpose of an operational dashboard in a log management platform?
Select an answer first
28foundation · easy
Which of the following is an example of automating a log response workflow?
Select an answer first
29foundation · easy
Which of the following is an example of log enrichment?
Select an answer first
30application · medium
A company is designing a log integration architecture to aggregate logs from multiple cloud providers and on-premises servers. The architecture must ensure that logs are not lost during transmission and that the log pipeline is resilient to failures. Which design should the team choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to GCAD

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by GIAC (SANS). “GCAD” is a trademark of its owner, used for identification only.