N10-009 · Question #513
A network administrator needs to monitor data from recently installed firewalls in multiple locations. Which of the following solutions would best meet the administrator's needs?
The correct answer is C. SIEM. A SIEM (Security Information and Event Management) system collects, aggregates, analyzes, and displays security data from multiple sources - like firewalls, IDS/IPS, and other devices - in real time. It is the best solution for centralized monitoring across multiple locations…
Question
A network administrator needs to monitor data from recently installed firewalls in multiple locations. Which of the following solutions would best meet the administrator's needs?
Options
- AIDS
- BIPS
- CSIEM
- DSNMPv2
How the community answered
(28 responses)- A4% (1)
- C93% (26)
- D4% (1)
Explanation
A SIEM (Security Information and Event Management) system collects, aggregates, analyzes, and displays security data from multiple sources - like firewalls, IDS/IPS, and other devices - in real time. It is the best solution for centralized monitoring across multiple locations. IDS detects malicious activity but does not provide centralized log aggregation or monitoring. IPS prevents attacks but is not used for centralized monitoring across sites. SNMPv2 is used for monitoring device status and performance, not security event analysis or log correlation. SIEM is the ideal solution for monitoring data from firewalls in multiple locations.
Community Discussion
No community discussion yet for this question.