CompTIA Security+ Practice Tests by S. Russell Christy & Chuck Easttom

Author:S. Russell Christy & Chuck Easttom
Language: eng
Format: epub
ISBN: 9781119416968
Publisher: Wiley
Published: 2018-04-03T14:30:00+00:00

A. An SIEM aggregates logs from multiple servers and devices. It is difficult to review so many logs, and of course issues could occur when Elizabeth is away from the SIEM management console. Having automatic alerts is the best way to be made aware of issues that require Elizabeth’s attention.

Option B is incorrect. Logs and events anomalies can be quite large, and having them forwarded to her email is unwieldy and does not solve the problem. Elizabeth will still need to read through them to be aware of any issues that require her attention.

Option C is incorrect. This situation is not optimal.

Option D is incorrect. Reviewing SIEM logs is one way that administrators become aware of issues. So reviewing them only when you are already aware of an issue is not a good use of SIEM.

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.