nerdexam
CompTIA

SY0-301 · Question #466

A Chief Information Security Officer (CISO) is tasked with outsourcing the analysis of security logs. These will need to still be reviewed on a regular basis to ensure the security of the company…

The correct answer is B. MaaS. Monitoring as a Service (MaaS) is the cloud model in which a third-party provider continuously monitors and reviews an organization's security logs on a managed, outsourced basis.

Security architecture

Question

A Chief Information Security Officer (CISO) is tasked with outsourcing the analysis of security logs. These will need to still be reviewed on a regular basis to ensure the security of the company has not been breached. Which of the following cloud service options would support this requirement?

Options

  • ASaaS
  • BMaaS
  • CIaaS
  • DPaaS

How the community answered

(24 responses)
  • A
    4% (1)
  • B
    75% (18)
  • C
    17% (4)
  • D
    4% (1)

Why each option

Monitoring as a Service (MaaS) is the cloud model in which a third-party provider continuously monitors and reviews an organization's security logs on a managed, outsourced basis.

ASaaS

SaaS (Software as a Service) delivers software applications over the internet but does not inherently include managed security log monitoring performed by the provider on the customer's behalf.

BMaaSCorrect

MaaS (Monitoring as a Service) is a managed cloud service where the provider takes responsibility for the ongoing collection, analysis, and review of security logs and events on behalf of the customer. This model directly satisfies the requirement to outsource log analysis while ensuring regular review for security breaches without requiring the customer to operate the monitoring infrastructure themselves.

CIaaS

IaaS (Infrastructure as a Service) provides virtualized computing resources such as servers and storage, placing the responsibility for log analysis back on the customer rather than outsourcing it.

DPaaS

PaaS (Platform as a Service) provides a development and deployment environment for building applications but does not include outsourced security log monitoring and analysis.

Concept tested: Monitoring as a Service for outsourced security log review

Topics

#cloud service models#MaaS#security monitoring#log analysis

Community Discussion

No community discussion yet for this question.

Full SY0-301 Practice