3.4 Recommend Strata Logging Service Log Forwarding Methods and Integrations (e.g., Syslog over TLS, HTTP, Email) NETWORK-SECURITY-ARCHITECT Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A technology company uses SLS and wants to forward logs to a cloud SIEM that provides a REST API with token-based authentication. The SIEM vendor recommends sending logs in a specific JSON schema. Which forwarding method should the architect choose to ensure the logs are delivered in the required format?

   • ASyslog over UDP forwarding to the SIEM's REST API endpoint.
   • BEmail forwarding of logs to the SIEM's ingestion email address.
   • CHTTP forwarding to the SIEM's REST API endpoint with the token configured for authentication.
   • DSyslog over TLS forwarding to the SIEM's REST API endpoint.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A managed security service provider (MSSP) ingests logs from multiple customer firewalls into a central cloud-based log analytics platform. The platform exposes an HTTPS REST endpoint that accepts JSON payloads and authenticates via OAuth 2.0 client credentials. The MSSP architect needs to forward SLS logs from each customer tenant to this platform. Which forwarding method should be selected?

   • AEmail forwarding of log summaries to the platform's ingestion email address.
   • BHTTP log forwarding configured with the platform's REST endpoint URL and OAuth 2.0 client credentials as the authentication method.
   • CHTTP forwarding using basic authentication with a shared username and password.
   • DSyslog over TLS forwarding to the platform's REST endpoint, treating the URL as a syslog server address.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What should you check first if HTTP log forwarding is failing with an authentication error?

   • AThe firewall's local log storage
   • BThe API token or key validity
   • CThe SMTP server settings
   • DThe syslog server's certificate
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   Which configuration is required for email-based log forwarding?

   • ASMTP server settings
   • BSyslog server address
   • CAPI endpoint URL
   • DTLS certificate
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   When should email forwarding be chosen over syslog or HTTP for log forwarding?

   • AWhen logs must be encrypted in transit
   • BWhen integrating with a SIEM platform
   • CWhen real-time alerting to administrators is needed
   • DWhen high-volume log streaming is required
   Reveal Solution Discussion Select an answer first