GSEC › Log Management and SIEM
This domain covers collecting, normalizing, correlating, and alerting on log data using SIEM tooling. GSEC questions present analyst scenarios: decoding suspicious web requests, fixing Windows Event Forwarding parsing, investigating VPN login anomalies, and preparing log sources for correlation and enrichment.
GSEC Log Management and SIEM — All 21 Questions
Every question in this domain with answers and detailed explanations.
Network Security Devices
Windows Security Infrastructure
macOS Security
Cryptography Application
Defense in Depth
Defensible Network Architecture
Access Control and Password Management
Cryptography
Endpoint Security
Windows Automation and Auditing
Networking and Protocols
Linux Fundamentals
Security Frameworks and CIS Controls
Container Security
Incident Handling and Response
Linux Security and Hardening
Windows Access Controls
Virtualization, Cloud, and AI Essentials
Vulnerability Scanning and Penetration Testing
Windows as a Service
Malicious Code and Exploit Mitigation
Windows Forensics
Web Communication Security
Wireless Network Security
Windows Services and MS Cloud