Cybersecurity Quiz

What is the primary purpose of logging in cybersecurity?

• To provide user authentication

• To record events for future analysis

• To filter network traffic

• To encrypt sensitive data

SIEM solutions are used for:

• Developing secure code

• Managing passwords

• Collecting and analyzing security-related data

• Creating virtual private networks

Social engineering attacks often rely on:

• Technical vulnerabilities

• Physical security breaches

• Human psychology

• Network misconfigurations

A log management best practice is to:

• Store logs in an unencrypted format

• Only review logs when a breach is detected

• Centralized log collection

• Discard logs after a short period

The main difference between SIEM and traditional log management is:

• SIEM can predict future attacks

• SIEM provides real-time analysis

• Traditional log management uses encryption

• Traditional log management is not used anymore

Tailgating is a social engineering technique that involves:

• Following someone closely through a controlled access point

• Infecting a system with malware

• Intercepting network traffic

• Cracking passwords

Logs should be protected by:

• Keeping them publicly accessible

• Regularly changing log file names

• Implementing access controls

• Storing them on every user’s desktop

A SIEM solution is NOT typically responsible for:

• Archiving logs

• Correlating events from different sources

• Generating alerts based on anomalies

• Patching software vulnerabilities

Which of the following is a benefit of centralized logging?

• Increased complexity

• Easier analysis and correlation

• Higher storage requirements

• Reduced security

Public key infrastructure (PKI) is associated with which area of cybersecurity?

• Social engineering

• Cryptography

• Logging

• SIEM