Importance of Logs

What is an adversary's attempt to map out its target(s)?

• Enumeration

• Exploitation

• Post exploitation

• Data exfiltration

What is an initial intrusion into the target's systems?

• Enumeration

• Exploitation

• Post exploitation

• Data exfiltration

What is it called, activities that serve to strengthen the attacker's position in the systems, such as installing a backdoor, or privilege escalation?

• Enumeration

• Exploitation

• Post exploitation

• Data exfiltration

What is smuggling data out of the victim's systems?

• Enumeration

• Exploitation

• Post exploitation

• Data exfiltration

Which of the following is NOT a reason to log data?

• Monitoring policy violations

• Monitoring business processes

• Monitoring application performance

• Providing information about problems and unusual conditions in systems and applications

• Deleting audit trails

Which of the followings should be included in logs?

• Passwords, access tokens and other authentication strings

• Encryption keys and secret tokens

• Sensitive personal data

• Application source code

• Login attempts outside of working hours

Logs may reveal bugs and unusual behavior in applications.

• True

• False

Logs can be used to investigate past security breaches.

• True

• False

Log monitoring helps detect and prevent security breaches.

• True

• False

Logging and log monitoring is not that important

• True

• False