CAS-005 · Question #46
A security engineer is developing a solution to meet the following requirements: - All endpoints should be able to establish telemetry with a SIEM. - All endpoints should be able to be integrated…
The correct answer is D. HIPS and host-based firewall. To meet the requirements of having all endpoints establish telemetry with a SIEM, integrate into an XDR platform, and allow SOC services to monitor the XDR platform, the best approach is to implement Host Intrusion Prevention Systems (HIPS) and a host-based firewall. HIPS can…
Question
A security engineer is developing a solution to meet the following requirements:
- All endpoints should be able to establish telemetry with a SIEM.
- All endpoints should be able to be integrated into the XDR platform.
- SOC services should be able to monitor the XDR platform
Which of the following should the security engineer implement to meet the requirements?
Options
- ACDR and central logging
- BHIDS and vTPM
- CWAF and syslog
- DHIPS and host-based firewall
How the community answered
(26 responses)- A8% (2)
- B8% (2)
- C4% (1)
- D81% (21)
Explanation
To meet the requirements of having all endpoints establish telemetry with a SIEM, integrate into an XDR platform, and allow SOC services to monitor the XDR platform, the best approach is to implement Host Intrusion Prevention Systems (HIPS) and a host-based firewall. HIPS can provide detailed telemetry data to the SIEM and can be integrated into the XDR platform for comprehensive monitoring and response. The host-based firewall ensures that only authorized traffic is allowed, providing an additional layer of security.
Community Discussion
No community discussion yet for this question.