A McAfee Event Receiver (ERC) will allow for how many Correlation Data Sources to be configured?

The correct answer is A. multiple security controls and events specific to the environment. When writing custom correlation rules, the analyst should focus on

Magento Admin HTML

Question

Options

Amultiple security controls and events specific to the environment.
Bany one specific high-quality indicator of compromise.
Cmalware alerts announced by industry security groups
Dfirewall events, as they provide the first indication of a compromise

How the community answered

(38 responses)

A
82% (31)
B
11% (4)
C
3% (1)
D
5% (2)

Explanation

When writing custom correlation rules, the analyst should focus on

Topics

#Event Receiver#correlation data sources#security controls#ERC configuration

Community Discussion

No community discussion yet for this question.

Full MA0-104 Practice