Performing CyberOps Using Cisco Security Technologies (CBRCOR) — Question 135
How is a SIEM tool used?
Answer options
- A. To collect security data from authentication failures and cyber attacks and forward it for analysis
- B. To search and compare security data against acceptance standards and generate reports for analysis
- C. To compare security alerts against configured scenarios and trigger system responses
- D. To collect and analyze security data from network devices and servers and produce alerts
Correct answer: D
Explanation
The correct answer is D because a SIEM tool is designed to collect and analyze security data from various sources, such as network devices and servers, and produce alerts based on that analysis. The other options describe aspects of security data handling but do not capture the primary function of SIEM in alert generation from comprehensive data analysis.