Kahoots 5 - SIEM

Question 1

Which of the following are attack vectors? [Multi-select]

a. ) Data
b. ) Log systems
c. ) Software
d. ) Rootkits

Answer 1

a.) & c.)

Question 2

What of the following are the two primary components of SIEM?

a. ) Security Enterprise Management
b. ) Security Event Management
c. ) Security Information Management
d. ) Security Interface Management

Answer 2

b.) & c.)

Question 3

Which of the following are components of a SIEM (Select 3)

a. ) Correlation Engine
b. ) Vulnerability Scanner
c. ) Collectors
d. ) API

Answer 3

a, c, & d

Question 4

A SOC uses control systems, quality management and tracking tools T or F

Answer 4

False

Question 5

Which of the following are popular SIEM vendors?

a. ) Splunk
b. ) Oracle
c. ) AWS
d. ) Arcsight

Answer 5

a & d

Question 6

Splunk only runs on Linux T or F

Answer 6

False

Question 7

Database, WAF & Firewalls all provide application logs for SIEMs T or F

Answer 7

True

Question 8

Which of the following are valid Windows Event logs categories? Select 2

a. ) Setup
b. ) Startup
c. ) Security
d. ) Syslog

Answer 8

a & c