nerdexam
CompTIA

CNX-001 · Question #3

An organization has centralized logging capability at the on-premises data center and wants a solution that can consolidate logging from deployed cloud workloads. The organization would like to automa

The correct answer is B. SIEM. A Security Information and Event Management system ingests and normalizes logs from on- premises and cloud sources, applies automated correlation rules for detection, and issues alerts, exactly matching the need for centralized logging, analysis, and automated notification.

Cloud Network Security

Question

An organization has centralized logging capability at the on-premises data center and wants a solution that can consolidate logging from deployed cloud workloads. The organization would like to automate the detection and alerting mechanism. Which of the following best meets the requirements?

Options

  • AIDS/IPS
  • BSIEM
  • CData lake
  • DSyslog

How the community answered

(21 responses)
  • A
    10% (2)
  • B
    86% (18)
  • C
    5% (1)

Explanation

A Security Information and Event Management system ingests and normalizes logs from on- premises and cloud sources, applies automated correlation rules for detection, and issues alerts, exactly matching the need for centralized logging, analysis, and automated notification.

Topics

#SIEM#Log Management#Cloud Security Monitoring#Security Operations

Community Discussion

No community discussion yet for this question.

Full CNX-001 Practice