CompTIA
SY0-701 · Question #451
Which of the following should be used to aggregate log data in order to create alerts and detect anomalous activity?
The correct answer is A. SIEM. A Security Information and Event Management (SIEM) solution collects, aggregates, and correlates logs from multiple sources to detect anomalies and generate alerts. SIEMs are essential for security monitoring and incident detection.
Submitted by zhang_li· Mar 6, 2026Security Operations
Question
Which of the following should be used to aggregate log data in order to create alerts and detect anomalous activity?
Options
- ASIEM
- BWAF
- CNetwork taps
- DIDS
How the community answered
(66 responses)- A89% (59)
- B2% (1)
- C3% (2)
- D6% (4)
Explanation
A Security Information and Event Management (SIEM) solution collects, aggregates, and correlates logs from multiple sources to detect anomalies and generate alerts. SIEMs are essential for security monitoring and incident detection.
Community Discussion
No community discussion yet for this question.