The role of an ELK/EFK stack in deployments is?

• A. API gateway management
• B. Data backup and restore
• C. Real-time threat detection
• D. Centralized log collection, search, and analysis

Answer: (D)

Centralized log collection, search, and analysis. ELK/EFK stacks are built to gather logs from across a deployment, centralize them in one place, and make them quickly searchable and explorable. Elasticsearch stores and indexes the data so you can run fast queries; Logstash or Fluentd collects, parses, and forwards logs from servers, apps, and devices; Kibana provides dashboards and visualizations to explore the data, spot patterns, and diagnose issues. This setup gives a unified view of system activity, which is why its primary role is centralized log collection, search, and analysis. Although logs can support security monitoring, ELK/EFK isn’t primarily an API gateway manager, a data backup solution, or a dedicated real-time threat detector.