By default, which of the following events are logged by AWS CloudTrail?Question 20Answera.Data eventsb.AWS CloudTrail Insights eventsc.Management eventsd.Data events and Insights events

Question 6What Windows application stores events logged by the operating system? 1 pointSLogGUIEvent ViewerLogOS ViewPowershell

Slack bot users can subscribe to events (so that they may reply when they are invoked). Which of the following are valid event names? (Select all that apply)1 pointmessage.imchannel_mentionappmentionsapp_mentionmy_messages

1.Question 1Which of the following refers to a record of events that occur within an organization’s systems?1 pointLog forwarderLog sourcesOccurrencesLogs

1.Question 1Which of the following statements correctly describe logs? Select three answers.1 pointSecurity teams monitor logs to identify vulnerabilities and potential data breaches. Outbound requests to the internet from within a network are recorded in a firewall log.Actions such as login requests are recorded in a server log.Connections between devices and services on a network are recorded in a firewall log.2.Question 2What are some of the key benefits of SIEM tools? Select three answers.1 pointEliminate the need for manual review of logsProvide event monitoring and analysisCollect log data from different sourcesSave time3.Question 3Fill in the blank: Software application _____ are technical attributes, such as response time, availability, and failure rate.1 pointSIEM toolsdashboardslogsmetrics4.Question 4A security team chooses to implement a SIEM tool that will be managed and maintained by the organization's IT department, rather than a third-party vendor. What type of tool are they using?1 pointHybridDepartment-hostedCloud-hostedSelf-hosted5.Question 5You are a security professional, and you want to save time by using a SIEM tool that will be managed by a provider and only be accessible through the internet. What type of tool do you choose?1 pointHybridIT-hostedSelf-hostedCloud-hosted6.Question 6Fill in the blank: SIEM tools retain, analyze, and search an organization's _____ to provide security information and alerts.1 pointlog datacloud applicationsdatabasehardware7.Question 7A security analyst receives an alert about hundreds of login attempts from unusual geographic locations within the last few minutes. What can the analyst use to review a timeline of the login attempts, locations, and time of activity?1 pointA SIEM tool dashboard A network protocol analyzer (packet sniffer) A playbookAn operating system8.Question 8Which type of tool typically requires users to pay for usage?1 pointCloud nativeProprietary Self-hostedOpen-source

When we analyze data in order to understand why an event took place, which of the four types of data analytics are we performing?