PCCET · Question #197
Network traffic capture and endpoint data capture are elements of which pillar of SecOps?
The correct answer is D. Visibility. This question asks which pillar of Security Operations (SecOps) includes network traffic capture and endpoint data capture.
Question
Network traffic capture and endpoint data capture are elements of which pillar of SecOps?
Options
- ATechnology
- BInterfaces
- CPeople
- DVisibility
How the community answered
(19 responses)- B5% (1)
- D95% (18)
Why each option
This question asks which pillar of Security Operations (SecOps) includes network traffic capture and endpoint data capture.
Technology refers to the tools and systems used for SecOps, but visibility is the desired outcome or strategic goal achieved by employing such technologies for data capture.
Interfaces typically refer to interaction points between systems or users, not the process of data capture itself for understanding security posture.
People represent the human element in SecOps, such as analysts and engineers, distinct from the technical data capture and analysis process.
Visibility is a fundamental pillar of SecOps, emphasizing the ability to monitor and understand activities across the entire IT environment. Capturing network traffic and endpoint data directly contributes to gaining comprehensive visibility into system activities, security events, and potential threats.
Concept tested: SecOps pillars (Visibility)
Source: https://learn.microsoft.com/en-us/security/operations/siem-sustainability-operations
Topics
Community Discussion
No community discussion yet for this question.