Questions

  1. A filtered log review is one where the responder or analyst filters out specific logs based on a set parameter.

A) True
B) False

  1. What is not a component of the Elastic Stack?

A) Elasticsearch
B) Log forwarder
C) Logstash
D) Kibana

  1. Which packet analysis tool places the packet capture into sessions as the default view?

A) Wireshark
B) NetFlow
C) Elastic Stack
D) Moloch

  1. Wireshark does not allow for DNS name resolution.

A) True
B) False

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset
18.117.183.150