Wazuh

Which of the following best describes Wazuh's primary purpose?

• Antivirus protection
• Web hosting service
• Security monitoring and incident response platform
• File sharing application

What tool is Wazuh Indexer based on?

• MongoDB
• Elasticsearch / OpenSearch
• MySQL
• Redis

Which of the following is NOT a feature of Wazuh?

• Vulnerability Detection
• File Integrity Monitoring
• Compliance Auditing
• Social Media Management

What does the Wazuh Server primarily do with incoming data?

• Encrypts it for backup
• Analyzes it, matches rules, and generates alerts
• Deletes unnecessary files
• Transfers it directly to the cloud

Which component allows users to view security alerts in real time?

• Wazuh Server
• Wazuh Dashboard
• Wazuh Indexer
• Wazuh Agent

What is one reason you would use Wazuh Agentless monitoring?

• To increase server storage
• When devices cannot install an agent
• To speed up log processing
• To encrypt traffic

In a large Wazuh deployment, how can the architecture be scaled?

• Only by adding more dashboards
• Only by buying bigger servers
• By clustering multiple servers, indexers, and dashboards
• By using only one big agent

What do Wazuh 'decoders' do?

• Encrypt logs
• Compress log files
• Extract specific fields from logs (like IP addresses, users)
• Delete old logs

What does Wazuh use 'rules' for?

• To configure hardware
• To define which events should trigger alerts
• To manage user accounts
• To run scheduled backups

Which of these is NOT true about Wazuh?

• It is free and open-source
• It integrates with cloud platforms like AWS and Azure
• It requires expensive licenses to unlock features
• It supports automatic threat detection