A SIEM Can Be Effectively Used to Identify Active Threats

question 30

Multiple Choice

A SIEM can be effectively used to identify active threats from internal systems by monitoring/correlating events that occur

• A) when no one is logged in; for example, after hours or on weekends.
• B) across an unusual range of ports or destinations; for example, all high ports.
• C) irregularly; for example, only on Fridays, or only at end-of-quarter.
• D) in accordance with expected systems use.

---

Definitions:

Disclosure Statement

A legal document that outlines the critical information and facts a consumer or investor needs to know before making a decision.

Franchise Agreement

A franchise agreement is a legal, binding contract between a franchisor and franchisee, outlining the terms, rights, and responsibilities of both parties regarding the operation of the franchise.

Operating a Franchise

The act of running a business under the branding and operational model of an established company, typically with an agreement dictating terms and conditions.

Disclosure Statements

Information that franchisors are required to provide to potential franchisees.