Exam 312-39 topic 1 question 61 discussion

Actual exam question from ECCouncil's 312-39

Question #: 61
Topic #: 1

Robin, a SOC engineer in a multinational company, is planning to implement a SIEM. He realized that his organization is capable of performing only Correlation, Analytics, Reporting, Retention, Alerting, and Visualization required for the SIEM implementation and has to take collection and aggregation services from a Managed Security Services Provider (MSSP).
What kind of SIEM is Robin planning to implement?

A. Self-hosted, Self-Managed
B. Self-hosted, MSSP Managed
C. Hybrid Model, Jointly Managed
D. Cloud, Self-Managed

Show Suggested Answer

Suggested Answer: B 🗳️

by Gykkap at Dec. 13, 2022, 11:45 a.m.

Comments

Submit Cancel

Berro_b

1 month, 4 weeks ago

Selected Answer: D

D. The cloud, self-managed SIEMs are the kind where only log collection and log aggregation are done in the MSSP, and the remaining methods and techniques like correlation, analytics, reporting, retention, alerting, and visualization of the data are performed inside the organization. (p.431).

upvoted 1 times

...