[&] What is necessary to ensure secure delivery of logs in the lab setup described?
- Using port 9997 with TCP for log forwarding
- Configuring logs to forward over an HTTP connection
- Setting up firewall rules to block all outbound traffic
- Establishing a secure SSL connection for log transmission

[&] What is the primary function of the Splunk Universal Forwarder in centralized logging?
- It provides encryption for log data transmission
- It stores collected logs permanently
- It collects and forwards logs to the Splunk server
- It serves as a web interface for analyzing data

[&] In the setup described in the lab, what action should be configured on Windows Firewall to allow incoming logs?
- Block all incoming connections
- Allow all traffic to the Splunk server
- Allow incoming connections on port 9997
- Disable the firewall entirely

[&] Which is the default port used for forwarding logs to a Splunk server in the described lab setup?
- 9997
- 8089
- 8080
- 8098

[&] What feature of Splunk allows you to verify if logs are being sent from a particular system?
- Configuring new indexes
- Creating a dashboard
- Using the command line interface
- Performing a search with host-specific parameters

[&] Which type of logs are collected from the Linux system in the lab demonstration?
- Application logs
- Authorization logs
- System logs
- Error logs