SOC Module 3,4

What is an incident in IT?

• A routine task

• An unplanned interruption

• A scheduled maintenance

• A software update

What is the primary purpose of logging?

• To increase system performance

• To record events for future analysis

• To reduce storage costs

• To enhance user experience

Which format is commonly used for log files?

• XML

• JSON

• Plain text

• All of the above

What is centralized logging?

• Storing logs on individual devices

• Collecting logs from multiple sources in one location

• Deleting old logs

• Encrypting log files

Which of the following is a benefit of centralized logging?

• Increased complexity

• Easier monitoring and analysis

• Higher costs

• Limited access

What type of logs do firewalls generate?

• Application logs

• Security logs

• System logs

• All of the above

Which operating system uses Event Viewer for log management?

• Linux

• Windows

• macOS

• All of the above

What is a common challenge in log analysis?

• Too much data

• Lack of data

• Easy access

• Standardized formats

What does SIEM stand for?

• Security Information and Event Management

• System Information and Event Management

• Security Incident and Event Monitoring

• System Incident and Event Management

What is the purpose of alerting in logging?

• To notify users of updates

• To inform administrators of potential issues

• To delete old logs

• To enhance performance