CAS-005 · Question #347
IoCs were missed during a recent security incident due to the reliance on a signature-based detection platform. A security engineer must recommend a solution that can be implemented to address this…
The correct answer is C. UEBA. UEBA (User and Entity Behavior Analytics) is a security solution that uses machine learning and advanced analytics to detect anomalies based on the behavior of users and entities within a network. Unlike signature-based detection, which relies on known indicators of compromise…
Question
IoCs were missed during a recent security incident due to the reliance on a signature-based detection platform. A security engineer must recommend a solution that can be implemented to address this shortcoming. Which of the following would be the most appropriate recommendation?
Options
- AFIM
- BSASE
- CUEBA
- DCSPM
- EEAP
How the community answered
(26 responses)- A4% (1)
- B12% (3)
- C69% (18)
- D15% (4)
Explanation
UEBA (User and Entity Behavior Analytics) is a security solution that uses machine learning and advanced analytics to detect anomalies based on the behavior of users and entities within a network. Unlike signature-based detection, which relies on known indicators of compromise (IoCs), UEBA can identify suspicious activity by recognizing deviations from established behavior patterns, which is especially useful for detecting advanced threats and insider attacks that might evade traditional signature-based methods.
Community Discussion
No community discussion yet for this question.