What Is the BEST Way to Correlate Large Volumes of Disparate

question 171

Multiple Choice

What is the BEST way to correlate large volumes of disparate data sources in a Security Operations Center (SOC) environment?

• A) Implement Intrusion Detection System (IDS)
• B) Implement a Security Information and Event Management (SIEM) system
• C) Hire a team of analysts to consolidate data and generate reports
• D) Outsource the management of the SOC

---

Definitions:

Scan Function

A process of systematically examining or reviewing a set of data, documents, or systems to identify specific information or characteristics.

CD Player

A device that plays audio compact discs, capable of reading digital audio data and converting it into sound.

Revoke Acceptance

The right of a buyer to cancel acceptance of goods received if they substantially fail to conform to the contract, under certain conditions.

Nonconforming Goods

Products delivered under a sales contract that fail to meet quality, specification, or performance requirements.