Chapter 2

1. What is the ELK stack?
   1. A herd of wild deer standing on top of each other
   2. A group of open source software working together
   3. Environmental Linux knowledge

   Answer: B – Elasticsearch, Logstash, Kibana and Beats.

2. True or false: Beats is a commercial product that is part of the ELK but costs money to use.
   1. True
   2. False

   Answer: B – Beats is free, though it is rapidly being replaced by Elastic Agent.

3. What is the primary difference between a pipeline versus other aggregations?
   1. This type of aggregation utilizes the results of other aggregations
   2. Other aggregations depend on this one being conducted first
   3. This aggregation revolves around a long, thin linear set of criteria
   4. The EPA must be notified in the event of a pipeline breach

   Answer: A – Pipeline aggregations are one result aggregating with further data.

4. Where is data enriched within the Elastic stack pipeline (you may select more than one)?
   1. When one of the Beats agents collects the data before shipping it
   2. Kibana...