Match the SIEM function with the description.

IT Exam Items RepositoryCategory: CCNA CyberOpsMatch the SIEM function with the description.

Match the SIEM function with the description.

  • links logs and events from disparate systems or applications, speeding detection of and reaction to security threats : correlation
  • satisfies the requirements of various compliance regulations :
  • reduces the volume of event data by consolidating duplicate event records : aggregation
  • maps log messages from different systems into a common data model : normalization

Related exam: Modules 24 - 25: Protocols and Log Files Group Exam