XSIAM-ENGINEER · Question #7
A systems engineer overseeing the integration of data from various sources through data pipelines into Cortex XSIAM notices modifications occurring during the ingestion process, and these…
The correct answer is D. Establish a process to minimize data modifications during ingestion, prioritizing raw data capture. The best approach is to minimize data modifications during ingestion, prioritizing raw data capture to preserve accuracy. Then, apply XDM (XSIAM Data Model) transformations and integrity checks post-ingestion. This ensures that threat detection and response are based on…
Question
A systems engineer overseeing the integration of data from various sources through data pipelines into Cortex XSIAM notices modifications occurring during the ingestion process, and these modifications reduce the accuracy of threat detection and response. The engineer needs to assess the risks associated with the pre-ingestion data modifications and develop effective solutions for data integrity and system efficacy. Which set of steps must be followed to meet these goals?
Options
- ADevelop an advanced monitoring system to track and log all changes made to data during
- BDesign a hybrid approach for critical data fields to be safeguarded against modifications during
- CImplement a pre-ingestion data validation process that aligns with the post-ingestion standards set
- DEstablish a process to minimize data modifications during ingestion, prioritizing raw data capture
How the community answered
(39 responses)- A5% (2)
- B21% (8)
- C13% (5)
- D62% (24)
Explanation
The best approach is to minimize data modifications during ingestion, prioritizing raw data capture to preserve accuracy. Then, apply XDM (XSIAM Data Model) transformations and integrity checks post-ingestion. This ensures that threat detection and response are based on unaltered, high-fidelity data while still enabling normalization and enrichment after ingestion.
Topics
Community Discussion
No community discussion yet for this question.