A security program was allocated S2 million in funding far tie year. The cybersecurity team identified the following potential projects to deliver: Which of the following solutions should the…

Question

Exhibit

Options

• A
  1. Insider threat UEBA
• B
  1. Build SOC 2 0
• C
  1. ML/AJ security analytics data lake
• D
  1. Blockchain decentralized identity

• A
  61% (19)
• B
  6% (2)
• C
  10% (3)
• D
  23% (7)

Explanation

Within a $2M security budget, prioritizing an Insider Threat UEBA (User and Entity Behavior Analytics) platform delivers the best risk reduction value. Insider threats-both malicious and negligent-are statistically among the most costly and difficult-to-detect attack vectors because insiders already have legitimate access, bypassing perimeter controls. UEBA establishes behavioral baselines and detects anomalies (unusual data access, privilege escalation, after-hours logins) in real time, enabling early detection and reducing dwell time. This delivers high impact across a broad risk surface at a relatively contained cost. The other options (SOC 2.0 build-out, ML/AI analytics data lake, blockchain decentralized identity) are either infrastructure investments with delayed ROI, higher cost/complexity, or more specialized use cases that do not deliver the same broad risk reduction within budget.

No community discussion yet for this question.