Which capability is provided by the aggregation function in SIEM?

October 24, 2020 Last Updated: October 24, 2020 No Comments
Tweet Share Pin it
IT Questions Bank › Category: CCNA CyberOps › Which capability is provided by the aggregation function in SIEM?
0
Vote Up
Vote Down
Which capability is provided by the aggregation function in SIEM? 1ITExamAnswers Staff asked 4 months ago
Which capability is provided by the aggregation function in SIEM?

  • reducing the volume of event data by consolidating duplicate event records
  • searching logs and event records of multiple sources for more complete forensic analysis
  • presenting correlated and aggregated event data in real-time monitoring
  • increasing speed of detection and reaction to security threats by examining logs from many systems and applications

Explanation: The aggregation function of SIEM reduces the volume of event data by consolidating duplicate event records.

More Questions: CCNA Cyber Ops (v1.1) – Chapter 7 Exam Answers


Related Articles