Hands-On Security in DevOps

Questions

1. Which of the following is not a part of the security monitoring framework?
   1. Log collector
   2. Security monitoring
   3. Threat intelligence
   4. Encryption
2. What kinds of logs will help security monitoring?
   1. Application logs
   2. Host security logs
   3. Vulnerability scanning results
   4. All of the above

3. Which of the following facts is not directly related to web security?
   1. Client IP is from blacklisted IP
   2. User-agent is associated with suspicious clients
   3. Unusual mail receivers or senders
   4. Too many errors in the weblogs, such as 401, 404, 500
4. Which one of the following tools is not a log collector/sensor?
   1. Syslog
   2. Kibana
   3. FileBeat
   4. LogStash
5. What is Security Onion used for?
   1. It's an all-in-one security scanning and monitoring tool (host, network, visualization) ...