Free Preparation Discussions
MENU
CompTIA Exam CS0-003 Topic 6 Question 12 Discussion
Topic #: 6
The Chief Information Security Officer for an organization recently received approval to install a new EDR solution. Following the installation, the number of alerts that require remediation by an analyst has tripled. Which of the following should the organization utilize to best centralize the workload for the internal security team? (Select two).
SOAR (Security Orchestration, Automation and Response) and SIEM (Security Information and Event Management) are solutions that can help centralize the workload for the internal security team by collecting, correlating, and analyzing alerts from different sources, such as EDR. SOAR can also automate and streamline incident response workflows, while SIEM can provide dashboards and reports for security monitoring and compliance. Reference: What is EDR? Endpoint Detection & Response, How Does the Cyber Kill Chain Protect Against Attacks?; What is EDR Solution?, EDR solutions secure diverse endpoints through central monitoring
Magdalene
1 years agoPercy
1 years agoCyndy
11 months agoMignon
11 months agoDannette
11 months agoLonna
12 months agoTiera
12 months agoFlorinda
12 months agoHollis
12 months agoLuisa
12 months agoEdelmira
1 years agoTracey
1 years ago