CISA Question 156

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B3

  A SIEM system collects, aggregates, and analyzes security event data from various sources within an IT infrastructure. It then generates alerts or reports on potential security incidents or policy violations, allowing security teams to detect and investigate suspicious activities. While a SIEM system can help identify and respond to security issues related to privileged users, its primary function is to detect and analyze security events rather than prevent them from occurring.

• 2

  B. Detective control