Build and Populate Effective Security Reports. CYBERSECURITY-DEFENSE-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   When building a security report to track failed authentication attempts, which data source is most relevant to include?

   • AWeb server access logs
   • BFirewall traffic logs
   • CDNS query logs
   • DAuthentication logs from domain controllers and VPN gateways
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which action is part of validating the completeness of a security report?

   • AChecking that all expected data sources are included in the search
   • BIncreasing the font size of the text
   • CAdding more colors to the charts
   • DChanging the report's title to be more descriptive
   Reveal Solution Discussion Select an answer first
4. 18expert · hard

   A report on firewall activity shows a discrepancy between the number of blocked connections and the number of allowed connections. You suspect the data may be incomplete. Which validation step is most effective?

   • AModify the report's search to use a different index
   • BCompare the report's counts against the firewall's native logs
   • CIncrease the report's scheduled frequency
   • DChange the report's time range to include more data
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   When designing a security report for executive leadership, which component is most important to include to ensure the report is actionable?

   • AThe exact search commands used to generate the data
   • BA list of all security tools in the environment
   • CA detailed list of all raw log entries
   • DA summary of key metrics and trends with clear recommendations
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A scheduled report that counts security events by source IP shows a significant drop in counts compared to the previous week. You suspect the data may be incomplete. Which validation step is most effective?

   • AIncrease the report's scheduled frequency to capture more data
   • BCheck the index for data ingestion gaps or delays during the report's time range
   • CModify the search to use a broader time range
   • DChange the report's format from table to chart
   Reveal Solution Discussion Select an answer first