Following a Recent and Very Large Corporate Merger, the Number

question 71

Multiple Choice

Following a recent and very large corporate merger, the number of log files an SOC needs to review has approximately tripled. The Chief Information Security Officer (CISO) has not been allowed to hire any more staff for the SOC, but is looking for other ways to automate the log review process so the SOC receives less noise. Which of the following would BEST reduce log noise for the SOC?

• A) SIEM filtering
• B) Machine learning
• C) Outsourcing
• D) Centralized IPS

---

Definitions:

Cognitive Limitations

Refers to the inherent restrictions in human cognitive capacity, affecting memory, attention, and the ability to process information.

Preferred Course Of Action

The most favored plan or method to achieve a desired outcome or solve a problem.

Satisficing Decision

A decision-making process where the first acceptable solution is chosen, rather than seeking the optimal solution, often due to time or information constraints.

Absolute Best

The highest possible standard or level of quality that can be achieved in a given context.