A cybersecurity analyst needs to collect alert data. What are three detection tools to perform this task in the Security Onion architecture? (Choose three.)

IT Exam Items RepositoryCategory: CCNA CyberOpsA cybersecurity analyst needs to collect alert data. What are three detection tools to perform this task in the Security Onion architecture? (Choose three.)

A cybersecurity analyst needs to collect alert data. What are three detection tools to perform this task in the Security Onion architecture? (Choose three.)

  • CapME
  • Wazuh
  • Kibana
  • Zeek
  • Sguil
  • Wireshark

Explanation: Detection tools in Security Onion Architecture include: CapME, Snort, Zeek, OSSEC, Wazuh, Suricata.

A Security Onion Architecture:

Related exam: CyberOps Associate Course Final Exam Answers