312-49 · Question #608
Event correlation is the process of finding relevance between the events that produce a final result. What type of correlation will help an organization to correlate events across a set of servers…
The correct answer is C. Cross-platform correlation. Cross-platform correlation is the process of correlating security events across heterogeneous devices and systems - such as servers, workstations, routers, firewalls, and network devices - that may run different operating systems or use different log formats. This is a core…
Question
Event correlation is the process of finding relevance between the events that produce a final result. What type of correlation will help an organization to correlate events across a set of servers, systems, routers and network?
Options
- ASame-platform correlation
- BNetwork-platform correlation
- CCross-platform correlation
- DMultiple-platform correlation
How the community answered
(26 responses)- A4% (1)
- C92% (24)
- D4% (1)
Explanation
Cross-platform correlation is the process of correlating security events across heterogeneous devices and systems - such as servers, workstations, routers, firewalls, and network devices - that may run different operating systems or use different log formats. This is a core function of SIEM (Security Information and Event Management) systems. 'Same-platform correlation' would apply only within a single type of system or OS. 'Network-platform correlation' and 'Multiple-platform correlation' are not standard terms in event correlation frameworks; the correct term for correlating across diverse environments is cross-platform correlation.
Topics
Community Discussion
No community discussion yet for this question.