nerdexam
GIAC

GSLC · Question #585

A Chief Information Security Officer (CISO) is tasked with outsourcing the analysis of security logs. These will need to still be reviewed on a regular basis to ensure the security of the company has

The correct answer is B. MaaS. Managed as a Service (MaaS) allows an organization to outsource specific operational tasks like log analysis to a third-party provider while retaining oversight.

Security Operations & Incident Response Leadership

Question

A Chief Information Security Officer (CISO) is tasked with outsourcing the analysis of security logs. These will need to still be reviewed on a regular basis to ensure the security of the company has not been breached. Which of the following cloud service options would support this requirement?

Options

  • ASaaS
  • BMaaS
  • CIaaS
  • DPaaS

How the community answered

(33 responses)
  • A
    3% (1)
  • B
    82% (27)
  • C
    12% (4)
  • D
    3% (1)

Why each option

Managed as a Service (MaaS) allows an organization to outsource specific operational tasks like log analysis to a third-party provider while retaining oversight.

ASaaS

SaaS provides software applications over the cloud but does not specifically cover outsourced managed analysis or monitoring services.

BMaaSCorrect

MaaS (Managed as a Service) is specifically designed to outsource the management and analysis of services - such as security log review - to a third party. The provider handles the day-to-day analysis and reporting on a regular basis, which directly meets the requirement of ongoing log review without the organization needing internal resources dedicated to that function.

CIaaS

IaaS provides virtualized infrastructure resources like compute and storage, not outsourced security analysis services.

DPaaS

PaaS provides a platform for developing and deploying applications, not a managed service for ongoing security log analysis.

Concept tested: Managed as a Service (MaaS) cloud model

Topics

#cloud service models#MaaS#log management#outsourcing security

Community Discussion

No community discussion yet for this question.

Full GSLC Practice