CISM · Question #800
Which of the following is MOST likely to reduce the effectiveness of a SIEM system?
The correct answer is B. Misconfiguration of alert thresholds. The effectiveness of a SIEM (Security Information and Event Management) system heavily relies on properly configured alert thresholds. Misconfiguration of alert thresholds can result in missed detection of significant incidents (false negatives) or an overwhelming number of…
Question
Which of the following is MOST likely to reduce the effectiveness of a SIEM system?
Options
- AComplex user interface
- BMisconfiguration of alert thresholds
- CWeakly encrypted log files
- DLack of multi-factor authentication (MFA) for system access
How the community answered
(33 responses)- A12% (4)
- B79% (26)
- C6% (2)
- D3% (1)
Explanation
The effectiveness of a SIEM (Security Information and Event Management) system heavily relies on properly configured alert thresholds. Misconfiguration of alert thresholds can result in missed detection of significant incidents (false negatives) or an overwhelming number of false positives, making it difficult to identify real threats.
Topics
Community Discussion
No community discussion yet for this question.