Quiz 3.3 challenge

Which of the following statements correctly describe logs? Select three answers.

• A record of connections between devices and services on a network is part of a network log.

• A record of events related to employee logins and username requests is part of a server log.

• Actions such as username requests are recorded in a network log.

• SIEM tools rely on logs to monitor systems and detect security threats.

What are some of the key benefits of SIEM tools? Select three answers.

• Increase efficiency

• Automatic customization to changing security needs

• Deliver automated alerts

• Minimize the number of logs to be manually reviewed

A security professional creates a dashboard that displays technical attributes about business operations called ______, such as incoming and outgoing network traffic.

• metrics

• averages

• logs

• SIEM tools

A security team installs a SIEM tool within their company’s own infrastructure to keep private data on internal servers. What type of tool are they using?

• Self-hosted

• Hybrid

• Infrastructure-hosted

• Cloud-hosted

You are a security professional, and you want a SIEM tool that will require both on-site infrastructure and internet-based solutions. What type of tool do you choose?

• Self-hosted

• Cloud-hosted

• Component-hosted

• Hybrid

_____ are used to retain, analyze, and search an organization's log data to provide security information and alerts in real-time.

• Operating systems

• SIEM tools

• Playbooks

• network protocol analyzers (packet sniffers)

After receiving an alert about a suspicious login attempt, a security analyst can access their _____ to gather information about the alert.

• internal infrastructure

• SIEM tool dashboard

• playbook

• network protocol analyzer (packet sniffer)

Which type of tool typically requires users to pay for usage?

• Cloud native

• Open-source

• Self-hosted

• Proprietary