Cisco
300-745 · Question #43
Which tool must be used to prioritize incidents by a SOC?
The correct answer is A. SIEM. A SIEM (Security Information and Event Management) tool collects and correlates security logs from across the enterprise, then applies analytics to prioritize incidents for SOC analysts. This enables efficient detection and response to the most critical threats.
Visibility, Detection, and Response
Question
Which tool must be used to prioritize incidents by a SOC?
Options
- ASIEM
- Bendpoint detection and response
- CCloudWatch
- Dendpoint protection platform
How the community answered
(54 responses)- A72% (39)
- B4% (2)
- C15% (8)
- D9% (5)
Explanation
A SIEM (Security Information and Event Management) tool collects and correlates security logs from across the enterprise, then applies analytics to prioritize incidents for SOC analysts. This enables efficient detection and response to the most critical threats.
Topics
#SIEM#incident prioritization#SOC#security operations
Community Discussion
No community discussion yet for this question.