ExamTopics Logo
Mail Us[email protected]
Menu
Comptia Discussions
exam questions

Exam SY0-701 All Questions

View all questions & answers for the SY0-701 exam
Go to Exam

Exam SY0-701 topic 1 question 373 discussion

Actual exam question from CompTIA's SY0-701
Question #: 373
Topic #: 1
[All SY0-701 Questions]

Which of the following should be used to aggregate log data in order to create alerts and detect anomalous activity?

  • A. SIEM
  • B. WAF
  • C. Network taps
  • D. IDS
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
by Robuste7 at Jan. 25, 2025, 10:42 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Robuste7
3 months ago
Selected Answer: A
The correct answer is: A. SIEM (Security Information and Event Management) SIEM (Security Information and Event Management) systems are designed to collect, aggregate, and analyze log data from various sources such as servers, firewalls, applications, and network devices. They provide capabilities for: Creating alerts based on specific criteria. Detecting anomalous activity through correlation and behavioral analysis. Providing a centralized view of security events.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago