Quiz – Incident Forensics

Question 1 of 6

1. Question

Which standard is referenced for log collection and normalization?

RFC 5424

Correct Incorrect Correct answer

RFC 3164

Correct Incorrect Correct answer

RFC 1918

Correct Incorrect Correct answer

RFC 793

Correct Incorrect Correct answer

Question 2 of 6

2. Question

Which log source captures authentication failures and privilege escalations?

System logs

Correct Incorrect Correct answer

Application logs

Correct Incorrect Correct answer

Network logs

Correct Incorrect Correct answer

DNS logs

Correct Incorrect Correct answer

Question 3 of 6

3. Question

Which log source documents traffic flows and protocol anomalies?

Network logs

Correct Incorrect Correct answer

System logs

Correct Incorrect Correct answer

Application logs

Correct Incorrect Correct answer

Audit logs

Correct Incorrect Correct answer

Question 4 of 6

4. Question

Which regulatory frameworks are cited for documentation and legal defensibility?

GDPR and SOC2

Correct Incorrect Correct answer

PCI DSS and HIPAA

Correct Incorrect Correct answer

ISO 9001 and CMMI

Correct Incorrect Correct answer

FedRAMP and FISMA

Correct Incorrect Correct answer

Question 5 of 6

5. Question

Match each log source to its forensic value.

Sort elements

Authentication failures and escalations
API calls and transaction failures
Traffic flows and connection attempts

System logs

Correct Incorrect Correct answer

Application logs

Correct Incorrect Correct answer

Network logs

Correct Incorrect Correct answer

Question 6 of 6

6. Question

Fill in the blanks.

Log collection and normalization use Fill in the blank 1 of 3 standards, then investigators perform timeline Fill in the blank 2 of 3 and cross-source Fill in the blank 3 of 3 to confirm patterns.