MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

1. What is the primary purpose of a log collector in cybersecurity?
   a. To encrypt system data
   b. To gather and centralize log data from devices and applications
   c. To delete obsolete records automatically
   d. To replicate network traffic for backups
   Answer: bmanageengine+1​
2. Which protocol is most commonly used for log collection across network devices?
   a. FTP
   b. Syslog
   c. SNMP
   d. RDP
   Answer: bsearchinform​
3. What type of data does a log collector primarily gather?
   a. Video streams
   b. User credentials
   c. System events and security logs
   d. Financial transactions only
   Answer: cwebasha+1​
4. Agent-based log collection requires installation of what component?
   a. A monitoring switch
   b. A logging agent on each host
   c. A web proxy
   d. A certificate authority
   Answer: bmanageengine​
5. What is one advantage of agent-based log collection?
   a. No need for configuration
   b. Can apply filters and work in restricted zones
   c. It uses no network bandwidth
   d. Does not require authentication
   Answer: bmanageengine​
6. In agentless log collection, logs are transmitted using which secure protocols?
   a. SMTP and SNMP
   b. TCP and HTTPS
   c. FTP and UDP
   d. ICMP and ARP
   Answer: bmanageengine​
7. Which open-source tool is known for centralized log management?
   a. Excel
   b. Graylog
   c. Notepad
   d. Flash
   Answer: bexabeam​
8. What is the key benefit of centralized log collection?
   a. Reduces detection time by aggregating logs
   b. Eliminates the need for analysts
   c. Duplicates data across all nodes
   d. Prevents remote logging
   Answer: aexamradar+1​
9. Which log collection method uses Windows Management Instrumentation (WMI)?
   a. SNMP-based
   b. WMI event logging
   c. HTTP API-based
   d. Syslog-based collection
   Answer: bmanageengine​
10. A log collector’s functionality is a crucial part of what larger security system?
    a. Blockchain
    b. SIEM
    c. NAT
    d. IDS only
    Answer: bpaloaltonetworks+1​
11. Fluentd is an example of what type of log collector?
    a. Closed-source enterprise product
    b. Open-source log aggregator
    c. Hardware-based antivirus
    d. Cloud firewall
    Answer: bexabeam​
12. Which tool processes, indexes, and searches log data in real time?
    a. Splunk
    b. PowerPoint
    c. Nmap
    d. Paint
    Answer: aexabeam​
13. Why is data normalization important in log collection?
    a. It deletes unused fields
    b. Standardizes formats for easier analysis
    c. Compresses data into binary files
    d. Encrypts every log automatically
    Answer: bpaloaltonetworks​
14. Which of the following is an advantage of agentless log collection?
    a. Simplified deployment without host installation
    b. More data granularity
    c. Lower security compliance
    d. Exclusive compatibility with Windows
    Answer: amanageengine​
15. What does SNMP stand for?
    a. Simple Network Management Protocol
    b. Secure Network Messaging Process
    c. Safe Network Monitor Protocol
    d. System Node Mapping Protocol
    Answer: amanageengine​
16. What is the role of SNMP traps in log collection?
    a. To encrypt communications
    b. To notify collectors of important device events
    c. To reset system time
    d. To remove old logs automatically
    Answer: bmanageengine​
17. Which component sends data to the collector in SNMP-based systems?
    a. Switch buffer
    b. SNMP agent
    c. Log analyzer
    d. Intrusion sensor
    Answer: bmanageengine​
18. What is a common log format used in Unix systems?
    a. Registry logs
    b. Syslog
    c. TXT logs
    d. JSONM files
    Answer: bsearchinform​
19. What does SIEM stand for?
    a. Security Information and Event Management
    b. System Input and Event Monitor
    c. Secure Internet Exchange Module
    d. Security Infrastructure Evaluation Model
    Answer: aexabeam+1​
20. What main function does a SIEM log collector perform?
    a. Collect and forward log data to the SIEM
    b. Delete redundant logs
    c. Encode system passwords
    d. Manage user accounts
    Answer: asearchinform​
21. What is an example of a cloud-native log collector?
    a. GoAccess
    b. Grafana Loki
    c. Excel Logs
    d. VBScript
    Answer: bexabeam​
22. Which among the following tools supports customizable pipelines for parsing logs?
    a. Paint
    b. Graylog
    c. Wireshark
    d. Notepad++
    Answer: bexabeam​
23. What ensures that logs are time-correlated correctly?
    a. Encryption
    b. Time synchronization and timestamps
    c. Log compression
    d. Minimalistic entries
    Answer: bexamradar​
24. LogWatch is commonly used in which type of environments?
    a. Linux servers
    b. iOS apps
    c. Firewalls only
    d. Cloud-only storage
    Answer: ascribd​
25. What does the term “log retention policy” define?
    a. Duration for which logs are stored
    b. Encryption method used
    c. Size of each log file
    d. Server hardware requirements
    Answer: ascribd​
26. Which component helps correlate logs from multiple sources?
    a. SIEM correlation engine
    b. DNS resolver
    c. Antivirus system
    d. Network load balancer
    Answer: apaloaltonetworks+1​
27. In log collection, “API-based collection” refers to what?
    a. Using APIs to query and send logs to a server
    b. Using proxy caching
    c. Encrypting API tokens
    d. Encoding log headers
    Answer: amanageengine​
28. Why are real-time log alerts essential?
    a. They minimize response time to incidents
    b. They compress log files faster
    c. They save bandwidth
    d. They slow processing intentionally
    Answer: aexamradar​
29. What kind of data can be collected via agent-based collection?
    a. User keystrokes
    b. Device logs within secure zones
    c. External internet traffic
    d. Financial account data
    Answer: bmanageengine​
30. What makes Syslog popular across diverse networks?
    a. Simplicity and universality
    b. Complex encryption needs
    c. Platform dependency
    d. Manual setup
    Answer: asearchinform​
31. What is one challenge of using Splunk for large organizations?
    a. Limited hardware needs
    b. High licensing costs
    c. Lack of plugins
    d. Single user mode
    Answer: bexabeam​
32. What is Fluentd primarily written in?
    a. Ruby and C
    b. Python and Go
    c. JavaScript and PHP
    d. C# and Swift
    Answer: aexabeam​
33. Which type of logs are critical for tracking user authentication attempts?
    a. DNS logs
    b. Authentication logs
    c. FTP logs
    d. Routing tables
    Answer: bscribd​
34. What improves forensic analysis using logs?
    a. Chronological, time-stamped entries
    b. Randomized entry sorting
    c. Log compression
    d. Log color coding
    Answer: aexamradar​
35. What is one of Graylog’s unique offerings for large-scale enterprises?
    a. Real-time dashboards
    b. Offline-only operations
    c. Manual email alerts
    d. Text-only outputs
    Answer: aexabeam​
36. What is the main objective of log management?
    a. Protect against malware
    b. Maintain comprehensive event visibility
    c. Delete redundant events
    d. Block external data
    Answer: bbitlyft+1​
37. Which method best suits large distributed systems?
    a. Agentless log collection
    b. Manual logging
    c. Local-only logging
    d. File compression
    Answer: amanageengine​
38. What allows logs to be queried and correlated for anomalies?
    a. SIEM analytics engine
    b. File explorer
    c. DNS cache
    d. Web proxy
    Answer: apaloaltonetworks+1​
39. Why should security teams maintain log integrity?
    a. To ensure logs are accurate for audits
    b. To minimize file sizes
    c. To encrypt user data
    d. To simplify IT tickets
    Answer: abitlyft+1​
40. What is an important factor in performing cross-system log correlation?
    a. Common time base and format
    b. Separate log schemas
    c. Multiple encryption types
    d. File renaming
    Answer: apaloaltonetworks+1​
41. Which open-source data collector has over 500 plugins for outputs?
    a. Fluentd
    b. Splunk
    c. NetFlow
    d. Nessus
    Answer: aexabeam​
42. What is the main role of visualization tools in log collectors?
    a. Represent log data in charts and dashboards
    b. Encrypt network packets
    c. Erase old logs
    d. Transfer data via USB
    Answer: aexabeam​
43. What ensures collector performance without network congestion?
    a. Filtering and throttling in agents
    b. Sending raw files continuously
    c. Delayed transport
    d. Constant packet replay
    Answer: amanageengine​
44. Which log collection approach supports hybrid environments best?
    a. API-based
    b. WMI-only
    c. Manual
    d. USB sync
    Answer: amanageengine​
45. What makes log collectors essential for compliance frameworks?
    a. Evidence in audit trails
    b. Password recovery
    c. User policy generation
    d. App debugging only
    Answer: awebasha+1​
46. What is often the first step in SIEM operations?
    a. Log collection
    b. Intrusion prevention
    c. Policy renewal
    d. Data encryption
    Answer: ablogs.manageengine​
47. Which systems generate the most security-relevant logs?
    a. Firewalls, servers, routers
    b. Email clients
    c. Video cameras
    d. PDF readers
    Answer: asearchinform​
48. What process is used to make different log types comparable?
    a. Data normalization
    b. Data encryption
    c. File conversion
    d. Encoding
    Answer: apaloaltonetworks​
49. What additional benefit does log collection provide beyond security monitoring?
    a. Performance optimization and troubleshooting
    b. Email notifications
    c. Backup storage only
    d. Firewall configuration
    Answer: asearchinform+1​
50. Why should logs be protected with encryption or secure transmission?
    a. To prevent tampering or unauthorized access
    b. To save disk space
    c. To compress files
    d. To enhance visualization clarity
    Answer: asearchinform+1​

1. https://www.manageengine.com/products/eventlog/logging-guide/log-collection-and-techniques.html
2. https://searchinform.com/articles/cybersecurity/measures/siem/analytics/log-management/log-collection/
3. https://www.webasha.com/blog/types-of-security-logs-a-complete-guide-for-cybersecurity-monitoring
4. https://www.exabeam.com/explainers/log-management/top-6-log-management-tools-and-how-to-choose/
5. https://examradar.com/security-monitoring-and-logging-a-core-defense-mechanisms-in-web-security-mcqs/
6. https://www.paloaltonetworks.com/cyberpedia/what-is-siem-logging
7. https://www.exabeam.com/explainers/event-logging/events-and-logs/
8. https://www.scribd.com/document/867200742/Network-Log-Analysis-MCQ
9. https://www.bitlyft.com/resources/what-is-security-logging-and-monitoring
10. https://blogs.manageengine.com/it-security/2017/06/28/log-management-and-siem-fundamentals-comprehensive-log-collection-and-auditing.html
11. https://www.sanfoundry.com/1000-cyber-security-questions-answers/
12. https://www.igmguru.com/blog/cyber-security-mcqs
13. https://www.placementpreparation.io/mcq/cyber-security/
14. https://automationcommunity.com/100-mcqs-mastery-on-cybersecurity/
15. https://testbook.com/objective-questions/mcq-on-cyber-security-and-emerging-technologies–5eea6a0d39140f30f369e309
16. https://thectoclub.com/tools/best-log-analysis-tools/
17. https://www.includehelp.com/mcq/cyber-security-mcqs.aspx
18. https://www.manageengine.com/log-management/cyber-security/log-collection-101.html
19. https://www.security-tools.com/top-10-log-management-tools/
20. https://app.letsdefend.io/training/lessons/siem-log-collection-and-parsing