Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
I selected B, because a SIEMs detection capability is heavily dependent on the data sources. IDS/IPS systems are common data sources for SIEMS, hence without IDS/IPS as a log source, there would not be any detection capabilities for SIEMs.
C is best answer. IPS will not provide timely alert on this
A Security Information and Event Management (SIEM) system is designed to provide real-time analysis of security alerts generated by various hardware and software systems. It can help in the timely detection of security incidents by monitoring and analyzing network and system logs. SIEM systems are effective in correlating and analyzing data from different sources, providing a comprehensive view of the security landscape and enabling organizations to respond quickly to potential security threats.