nerdexam
EC-Council

212-82 · Question #130

As a system administrator handling the integration of a recently acquired subsidiary's Linux machines with your company's Windows environment for centralized log management, what is your most…

The correct answer is D. Managing the incompatibility of log formats used by Windows and Linux systems. When integrating Linux and Windows machines for centralized log management, the most significant challenge is managing the incompatibility of their distinct log formats.

Submitted by skyler.x· Mar 6, 2026Cloud Security Operations & Incident Response

Question

As a system administrator handling the integration of a recently acquired subsidiary's Linux machines with your company's Windows environment for centralized log management, what is your most significant challenge likely to be?

Options

  • ADealing with the sheer volume of logs generated by both systems.
  • BNavigating the different user interfaces of the built-in log viewers (Event Viewer vs. Syslog).
  • CFinding skilled personnel proficient in both Windows and Linux log management tools.
  • DManaging the incompatibility of log formats used by Windows and Linux systems.

How the community answered

(51 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    4% (2)
  • D
    92% (47)

Why each option

When integrating Linux and Windows machines for centralized log management, the most significant challenge is managing the incompatibility of their distinct log formats.

ADealing with the sheer volume of logs generated by both systems.

While the sheer volume of logs is a common operational challenge for large systems, the underlying technical hurdle in this specific integration scenario is the disparate log formats that must be processed before volume becomes the primary concern.

BNavigating the different user interfaces of the built-in log viewers (Event Viewer vs. Syslog).

Navigating different user interfaces of log viewers is a matter of operational preference or training, but it does not represent the core technical challenge of integrating and harmonizing the raw log data itself.

CFinding skilled personnel proficient in both Windows and Linux log management tools.

Finding skilled personnel is a general resource challenge, but the specific technical problem that often drives the need for such specialized skills in this context is the complex task of dealing with log format incompatibility and subsequent data normalization.

DManaging the incompatibility of log formats used by Windows and Linux systems.Correct

Windows systems primarily use the binary Event Log format (.evt or .evtx) with structured data and specific Event IDs, while Linux systems typically use the plain text syslog format with different message structures and severity levels. This fundamental difference in log formats necessitates significant parsing, normalization, and correlation efforts to achieve effective centralized log management.

Concept tested: Cross-platform log management challenges

Source: https://learn.microsoft.com/en-us/windows/win32/eventlog/about-event-logging

Topics

#Log management#Windows logs#Linux logs#SIEM challenges

Community Discussion

No community discussion yet for this question.

Full 212-82 Practice