A security program was able to achieve a 30% improvement in MTTR by integrating security controls into a SIEM. The analyst no longer had to jump between tools. Which of the following best describes what the security program did?
CompTIA wants "Single Pain of Glass" functionality to be a goal of security Ops because too many point products don't play nice together, so having something like a SOAR tying everything together makes everyone's job easier.
The goal here is to improve the Mean Time to Remediate (MTTR). This question is an instance of searching for the best answer, despite more than one potentially fitting in a scenario. While Threat Feed Combination can work to improve MTTR, Single Pane of Glass is more comprehensive and therefore more effective. Single Pane of Glass also includes Threat Feed Combination already.
D. Single pane glass
In this scenario, the security program integrated security controls into a security information and event management (SIEM) system, which allowed the analyst to no longer switch between different tools. This integration created a single, unified interface or âpane of glassâ through which the analyst could manage and monitor security events and controls, resulting in a 30% improvement in Mean Time to Response (MTTR). This approach simplifies analyst workflow and provides a centralized view of security data and controls, reducing the time required to respond to security incidents.
The primary focus of the scenario is on improving the Mean Time to Remediation (MTTR) by integrating security controls into a Security Information and Event Management (SIEM) system. This integration implies that the security program consolidated and streamlined its security tools and processes into a single, unified interface (a "single pane of glass"), which is not solely about combining threat feeds.
Correct
A single pane of glass is a term that describes a unified view or interface that integrates multiple tools or data sources into one dashboard or console. A single pane of glass can help improve security operations by providing visibility, correlation, analysis, and alerting capabilities across various security controls and systems
upvoted 2 times
...
This section is not available anymore. Please use the main Exam Page.CS0-003 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
cartman_sc
9Â months, 2Â weeks agodave_delete_me
9Â months, 3Â weeks agoAlizade
1Â year, 3Â months agodanscbe
1Â year, 4Â months agoJhonys
1Â year, 4Â months agofgiroux83
1Â year, 5Â months agokmordalv
1Â year, 4Â months agokmordalv
1Â year, 5Â months ago