CISM Question 256

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  Cheat code: Whenever you see SIEM listed as a possible solution it is most likely the correct answer. It seems that CISM loves SIEM and it sees it as a silver bullet to all all your problems :)

• 1

  B. Vulnerability scans dont show you Advance Persistent Threats they simply give you the vulnerable components that can be exploited by an APT.

• Chose B1

  I used work in SOC previously. SIEM is the most important to identify all those zero days virus and persistent attack because it is a day to day monitoring. Vulnerabilities scanning usually run by another team and it was perform on a period basis, eg. monthly, quarterly. With APT, scanning monthly will be too late.