What are three characteristics of SIEM? (Choose three.)
- can be implemented as software or as a service
- Microsoft port scanning tool designed for Windows
- examines logs and events from systems and applications to detect security threats
- consolidates duplicate event data to minimize the volume of gathered data
- uses penetration testing to determine most network vulnerabilities
- provides real-time reporting for short-term security event analysis
Explanation: Security Information Event Management (SIEM) is a technology that provides real-time reporting and long-term analysis of security events. SIEM provides the ability to search logs and events from disparate systems or applications to detect threats. SIEM aggregates duplicate events to reduce the volume of event data. SIEM can be implemented as software or as a managed.service. SuperScan is a Microsoft Windows port scanning tool that runs on most versions of Windows.Tools, such as Nmap and SuperScan, can provide effective penetration testing on a network and determine network vulnerabilities while helping to anticipate possible attack mechanisms.
Exam with this question: CCNA Security Final Exam Answers
Exam with this question: Modules 20-22: ASA Group Exam Answers
Please login or Register to submit your answer