nerdexam
CompTIA

CAS-002 · Question #540

Security Information and Event Management (SIEM) solution provides real-time analysis of security alerts generated by network hardware and applications, which of the following capabilities does this…

The correct answer is A. Retention B. Dashboard C. Data aggregation. Security Information and Event Management (SIEM) solution is a combination of the formerly different product categories of SIM (security information management) and SEM (security event management). It provides real-time analysis of security alerts generated by network hardware…

Enterprise Security

Question

Security Information and Event Management (SIEM) solution provides real-time analysis of security alerts generated by network hardware and applications, which of the following capabilities does this solution have? Each correct answer represents a complete solution. Choose three.

Options

  • ARetention
  • BDashboard
  • CData aggregation
  • DRemanence
  • EData redundancy

How the community answered

(38 responses)
  • A
    89% (34)
  • D
    3% (1)
  • E
    8% (3)

Explanation

Security Information and Event Management (SIEM) solution is a combination of the formerly different product categories of SIM (security information management) and SEM (security event management). It provides real-time analysis of security alerts generated by network hardware and applications. SIEM solution is also used to log security data and generate reports for compliance purposes. The SIEM capabilities are as follows: - Data aggregation

Topics

#SIEM#security monitoring#data aggregation#log management

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice