MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

Which tool is commonly used for analyzing network event logs?
a. Event Viewer
b. Notepad
c. Calculator
d. Paint
Answer: a. Event Viewerscribd
What does the term “log retention policy” mean?
a. Process of compressing logs
b. Duration logs are stored before deletion
c. Creating log files automatically
d. Encrypting log contents
Answer: b. Duration logs are stored before deletionscribd
Which type of log provides details on user authentication attempts?
a. Authentication logs
b. DNS logs
c. System logs
d. Routing logs
Answer: a. Authentication logsscribd
What does a spike in failed login attempts usually indicate?
a. Normal user behavior
b. Hardware failure
c. Potential brute-force attack
d. Power outage
Answer: c. Potential brute-force attackexamradar
Why is it important to include timestamps in security logs?
a. To save memory
b. Chronological analysis of events
c. Log file compression
d. Faster network speeds
Answer: b. Chronological analysis of eventsexamradar
How can centralized logging enhance network security?
a. Increases data storage costs
b. Aggregates logs for easier analysis
c. Decreases security
d. Slows down servers
Answer: b. Aggregates logs for easier analysisexamradar
Which protocol’s logs are crucial for analyzing web server traffic?
a. FTP logs
b. HTTP logs
c. SMTP logs
d. SNMP logs
Answer: b. HTTP logsscribd
What is the primary purpose of network log reviews?
a. To delete old files
b. To detect security incidents
c. Improve user interface
d. Increase marketing outreach
Answer: b. To detect security incidentsexamradar
Which tool is widely recognized for packet capturing in network log analysis?
a. Wireshark
b. MS Paint
c. VLC
d. Tux Paint
Answer: a. Wiresharkscribd
What can frequent NXDOMAIN responses in DNS logs indicate?
a. Application crash
b. Attempts to contact malicious domains
c. Hardware overheating
d. Excessive network speed
Answer: b. Attempts to contact malicious domainsscribd
What are the risks of not having a proper log review process?
a. Missed security breaches
b. More available disk space
c. Faster CPU speeds
d. Better network throughput
Answer: a. Missed security breachesexamradar
Which log is best for investigating firewall rules violations?
a. Firewall log
b. Application log
c. Wireless log
d. Bluetooth log
Answer: a. Firewall logscribd
What kind of attack does a sudden increase in DNS queries potentially represent?
a. ARP spoofing
b. Data exfiltration
c. Printer malfunction
d. NAT loop
Answer: b. Data exfiltrationscribd
What is the benefit of automated log review tools?
a. Eliminate the need for security teams
b. Reduce manual effort and enhance accuracy
c. Reduce server temperature
d. Increase network latency
Answer: b. Reduce manual effort and enhance accuracyexamradar
Which type of log file should be prioritized in incident investigations?
a. System logs
b. Audit logs
c. Error logs
d. Recovery logs
Answer: b. Audit logsscribd
How can network log reviews help in detecting internal threats?
a. By identifying unusual access patterns
b. By monitoring CPU temperatures
c. By updating software licenses
d. By analyzing graphical data
Answer: a. By identifying unusual access patternsscribd
What is the role of log integrity in security monitoring?
a. Ensures logs aren’t altered maliciously
b. Speeds up network traffic
c. Compresses files efficiently
d. Increases power supply
Answer: a. Ensures logs aren’t altered maliciouslyexamradar
Which open-source SIEM tool is popular for log analysis?
a. Splunk
b. Event Viewer
c. VLC Media Player
d. Logwatch
Answer: d. Logwatchscribd
What is log tampering?
a. Editing logs to hide malicious activity
b. Encrypting logs for safety
c. Backing up logs
d. Restoring logs from old backups
Answer: a. Editing logs to hide malicious activityexamradar
Why are real-time alerts based on log reviews important?
a. They immediately notify administrators of incidents
b. Improve website aesthetics
c. Increase file download speeds
d. Enable faster hardware upgrades
Answer: a. Notify administrators of incidentsexamradar
How do logs contribute to forensic investigations?
a. Provide a record of events before, during, and after incidents
b. Compress network traffic
c. Display graphical representations of attacks
d. Increase marketing visibility
Answer: a. Provide a record of eventsexamradar
What challenge do organizations face with comprehensive log monitoring?
a. Managing large volumes of data for actionable insights
b. Increasing network latency
c. Reducing hardware costs
d. Improving desktop wallpaper
Answer: a. Managing large volumes of dataexamradar
How can privilege escalation attacks be detected through logs?
a. Monitor for unauthorized changes to user permissions
b. Check for hardware failures
c. Analyze encrypted messaging
d. Change desktop color schemes
Answer: a. Monitor unauthorized permission changesscribd
Why log failed login attempts?
a. Detect brute-force and unauthorized access attempts
b. Maintain hardware reliability
c. Reduce storage usage
d. Increase CPU speeds
Answer: a. Detect brute-force attemptsexamradar
What are “Living-Off-The-Land Binaries” (LOLBins)?
a. Legitimate OS binaries abused by attackers
b. Malicious executable files
c. Network monitoring tools
d. Unused server resources
Answer: a. Legitimate OS binaries abused by attackersscribd
What is the best way to detect lateral movement in a network?
a. Review event logs for access to multiple hosts
b. Monitor wall socket usage
c. Track employee emails
d. Update printer settings
Answer: a. Review logs for multi-host accessscribd
Which log entry is most suspicious?
a. Unusual login times from unexpected locations
b. Normal user activity records
c. Timely system updates
d. Scheduled database backups
Answer: a. Unusual login times/locationsscribd
How to detect command-and-control (C2) communications using logs?
a. Analyze DNS queries to suspicious domains
b. Monitor printer status
c. Record hardware replacements
d. Count system boot times
Answer: a. DNS queries to suspicious domainsscribd
What process can help secure logs against tampering?
a. Use cryptographic hashing for each log entry
b. Compress log files
c. Delete logs periodically
d. Only store logs offline
Answer: a. Cryptographic hashing for logsexamradar
Why is log review critical for compliance?
a. Ensures adherence to regulatory requirements for data security
b. Upgrades desktop icons
c. Increases server RAM
d. Disables firewall settings
Answer: a. Regulatory complianceexamradar
Which log analysis technique identifies abnormal spikes in traffic?
a. Flow log review and anomaly detection
b. Color coding records
c. Rotating hard drives
d. Marking log entries as read
Answer: a. Flow log review/anomaly detectionscribd
How are suspicious domain name requests detected in DNS logs?
a. Look for long/random domains and frequent NXDOMAIN responses
b. Monitor device temperatures
c. Track mouse movements
d. Assess printer usage
Answer: a. Long/random domains & NXDOMAINscribd
What is SIEM in the context of log analysis?
a. Security Information and Event Management
b. Simple Internet Event Monitoring
c. Separate Internet Event Monitor
d. Secure Instant Email Messaging
Answer: a. Security Information and Event Managementexamradar
Which type of log is essential for analyzing ransomware events?
a. System event logs
b. Browser cache logs
c. Wireless connection logs
d. Graphics logs
Answer: a. System event logsscribd
Why use automated tools for network log reviews?
a. Detect threats faster than manual review
b. Increase desktop wallpaper variety
c. Reduce physical disk size
d. Enhance USB port availability
Answer: a. Faster threat detectionexamradar
What log feature helps trace the exact time of an attack?
a. Timestamps
b. File type
c. Adapter version
d. Sound card status
Answer: a. Timestampsexamradar
What is log correlation?
a. Matching events from different logs to identify security incidents
b. Gathering all logs in one folder
c. Changing file extensions
d. Uninstalling log management software
Answer: a. Matching events/incidentsexamradar
Which logs help detect unauthorized file access?
a. File system audit logs
b. Temporary logs
c. Chat logs
d. Printer logs
Answer: a. File system audit logsscribd
How to identify privilege escalation in Windows Event logs?
a. Look for event entries indicating access granted to elevated privileges
b. Monitor printer jobs
c. Count mouse clicks
d. Change display resolution
Answer: a. Event entries for elevated privilegesscribd
What helps ensure log integrity when transferring between systems?
a. Use secure transport protocols like TLS
b. Use plain text file transfer
c. Send logs over FTP
d. Use Bluetooth sharing
Answer: a. Secure transport protocols like TLSexamradar
What log-related metric is key for availability?
a. Retention period and accessibility
b. Hard disk color
c. RAM slot number
d. Sound output
Answer: a. Retention period/accessibilityexamradar
How to detect data exfiltration using logs?
a. Monitor for large outbound data transfers and unauthorized destination IPs
b. Track system restarts
c. Review display settings
d. Analyze screen resolution changes
Answer: a. Large outbound transfers/unauthorized IPsscribd
Why is tamper-evident logging useful?
a. Makes changes to logs readily visible
b. Shrinks file size
c. Deletes logs faster
d. Compresses printer queues
Answer: a. Changes to logs visibleexamradar
What challenge is unique to decentralized log management?
a. Difficulty correlating events across systems
b. Faster USB access
c. More system notifications
d. Increased wallpaper switching
Answer: a. Difficulty correlating eventsexamradar
What is the main benefit of using log aggregation?
a. Enables unified, efficient analysis across multiple sources
b. Displays better color depth
c. Reduces battery consumption
d. Improves sound mixing
Answer: a. Unified analysisexamradar
What is the purpose of log review alerts?
a. Immediate notification of suspicious activity
b. Increase display brightness
c. Slow down network throughput
d. Change boot menu options
Answer: a. Notification of suspicious activityexamradar
How does log archiving help security teams?
a. Retains historical data for future investigations
b. Increases CPU cores
c. Changes wallpaper
d. Boosts speaker output
Answer: a. Historical data retentionexamradar
Which log feature is essential for long-term investigations?
a. Retention policies ensuring log availability
b. Sound card firmware version
c. USB port count
d. Database record size
Answer: a. Retention policies for log availabilityexamradar
What is the impact of log review on incident response?
a. Accelerates identification and containment of threats
b. Improves display graphics
c. Reduces air conditioning usage
d. Increases monitor refresh rate
Answer: a. Faster identification/containmentexamradar
Which log analysis step follows alert generation?
a. Investigation and correlation with other data sources
b. Changing icon themes
c. Enhancing VRAM usage
d. Encrypting display output
Answer: a. Investigation/correlationexamradar

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info