A security analyst performs the following activities: monitors security logs, installs surveillance cameras and analyzes trend reports. Which of the following job responsibilities is the analyst…

Reviewing security logs and analyzing trend reports are activities whose primary purpose is to identify anomalies and detect security incidents - whether in progress or after the fact - making them direct implementations of the incident detection responsibility.

Reducing the attack surface involves hardening actions such as disabling unneeded services, removing software, or closing ports - not conducting surveillance or analyzing logs.

Installing surveillance cameras and continuously monitoring security logs are concrete examples of deploying monitoring controls - physical and logical mechanisms that observe, record, and track activity across an environment.

Hardening network devices requires applying configuration changes such as disabling unused interfaces, enforcing strong passwords, and patching firmware, none of which describe the activities in the scenario.

Preventing unauthorized access involves implementing authentication systems, access control lists, and physical locks - active barrier controls rather than the observational and analytical activities described.