Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
CompTIA Security+ · CompTIA
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
In this type of question when you see the word "monitoring" bear in mind 99% chance it is will SIEM
Purpose: Aggregates and correlates logs/events from multiple systems for real-time threat detection and compliance. Use Case: Best for centralized monitoring (e.g., detecting a multi-stage attack across servers and firewalls).
SIEM is the correct answer because SIEM systems are specifically designed to collect, centralize, and analyze logs from multiple sources, providing security alerting and monitoring capabilities essential for detecting and responding to potential threats.