nerdexam
EC-Council

512-50 · Question #175

You currently cannot provide for 24/7 coverage of your security monitoring and incident response duties and your company is resistant to the idea of adding more full-time employees to the payroll…

The correct answer is B. Contract with a managed security provider and have current staff on recall for incident response. See the full explanation below for the reasoning.

Question

You currently cannot provide for 24/7 coverage of your security monitoring and incident response duties and your company is resistant to the idea of adding more full-time employees to the payroll. Which combination of solutions would help to provide the coverage needed without the addition of more dedicated staff? (choose the best answer):

Options

  • ADeploy a SEIM solution and have current staff review incidents first thing in the morning
  • BContract with a managed security provider and have current staff on recall for incident response
  • CConfigure your syslog to send SMS messages to current staff when target events are triggered
  • DEmploy an assumption of breach protocol and defend only essential information resources

How the community answered

(29 responses)
  • A
    10% (3)
  • B
    83% (24)
  • C
    3% (1)
  • D
    3% (1)

Community Discussion

No community discussion yet for this question.

Full 512-50 Practice