SecureOps interview question

Questions based on SIEM logs