Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B is correct
Agree. ALSO - A, C, and D should have their logs being forwarded to the SIEM. SIEM for the win!
A SIEM tool is designed to collect, analyze, and correlate logs and events from various sources within the network. It provides a comprehensive view of activities and potential security incidents, making it a valuable source of evidence during a breach investigation. SIEM tools can help identify patterns of behavior, anomalies, and potential indicators of compromise, allowing the security team to investigate and respond to security incidents effectively. While file integrity monitoring (FIM) software (option A), intrusion detection systems (IDS) (option C), and antivirus software (option D) are important components of a security infrastructure, a SIEM tool can centralize and analyze data from these and other sources, providing a more holistic view of the security landscape.