Cybersecurity Log Analysis Quiz

Which open-source tool is part of the ELK Stack and used for log collection and processing?

• Splunk

• Logstash

• QRadar

• Graylog

Which Splunk command would you use to calculate statistics like count or average?

• stats

• sort

• where

• timechart

In the log collection workflow, which step involves unifying log formats and enriching data?

• Generation

• Collection

• Processing

• Storage

Which threat hunting technique involves looking for statistical outliers in system or user activity?

• IOC Searching

• Behavioral Analysis

• Anomaly Detection

• Log Correlation

What does NTA (Network Traffic Analysis) primarily help detect?

• Malware communication and data exfiltration

• Software licensing issues

• Hardware overheating

• User password changes

Which log type would record user login attempts and password changes?

• System Logs

• Authentication Logs

• Application Logs

• DNS Logs

In Splunk, which component is responsible for processing and storing the data?

• Forwarder

• Indexer

• Search Head

• Dashboard

Which of the following is NOT a common type of log?

• System Logs

• Security Logs

• Network Logs

• Gaming Logs

What is the primary purpose of log analysis in cybersecurity?

• To store data long-term

• To detect incidents and monitor activity

• To compress system files

• To manage passwords

What does Kibana primarily provide in the ELK Stack?

• Data collection

• Data storage

• Visualization and dashboards

• Log forwarding