An organization is implementing and deploying the SIEM with following capabilities. What kind of SIEM deployment architecture the organization is planning to implement?

Question

Exhibit

Options

• ACloud, MSSP Managed
• BSelf-hosted, Jointly Managed
• CSelf-hosted, Self-Managed
• DSelf-hosted, MSSP Managed

• A
  3% (1)
• B
  6% (2)
• C
  81% (25)
• D
  10% (3)

Explanation

Option C is correct because when an organization both hosts the SIEM on its own infrastructure (on-premises or private data center) and handles all configuration, monitoring, tuning, and maintenance internally, that defines a Self-hosted, Self-Managed deployment - the organization retains full control end-to-end.

Why the distractors are wrong:

• A (Cloud, MSSP Managed): Both elements are wrong - the SIEM isn't hosted in a third-party cloud, and no Managed Security Service Provider is involved in operations.
• B (Self-hosted, Jointly Managed): The hosting is correct, but Jointly Managed implies a shared responsibility model with an external partner, which contradicts the organization managing it entirely on their own.
• D (Self-hosted, MSSP Managed): The hosting is correct, but MSSP Managed means outsourcing day-to-day operations to a third party - the opposite of internal self-management.

Memory tip: Think of it as two independent questions - Where does it live? (Cloud vs. Self-hosted) and Who runs it? (Self, Joint, or MSSP). Full internal ownership on both dimensions = Self-hosted + Self-Managed (C).

No community discussion yet for this question.