24. Centralized Logging Server Setup Quiz

Why is monitoring events crucial in security?

• To detect and respond to security incidents

• To reduce network traffic

• To improve user experience

• To ensure system performance

What is the role of a centralized server in event monitoring?

• To provide internet access

• To manage user accounts

• To collect and store events from various devices

• To distribute network load

Which tool is commonly used for centralized logging in many use cases?

• SIM tool

• Firewall

• Router

• Antivirus software

What command is used to open PowerShell as an administrator?

• Type 'admin' in the search bar

• Press Ctrl+Alt+Del

• Double-click the PowerShell icon

• Right-click the start button and select 'Run as admin'

What is the purpose of enabling winrm listener on dc10?

• To allow remote desktop connections

• To enable remote event logging

• To install updates

• To manage user accounts

What should you do after running the 'GPU update force' command?

• Install updates

• Restart the server

• Close PowerShell

• Mark your progress

What is the first step in configuring ms10 to send events?

• Restart the server

• Run 'winrm quickconfig'

• Log in as Jamie

• Open Event Viewer

What command enables remote event logging on ms10?

• winrm quickconfig

• Enable-PSRemoting

• Get-EventLog

• Set-ExecutionPolicy

Which group should dc10 be added to on ms10?

• Event Log Readers

• Remote Desktop Users

• Administrators

• Power Users

What should you do after configuring ms10 to forward logs?

• Restart ms10

• Close PowerShell

• Run 'Get-EventLog'

• Install updates