Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CompTIA Exam SY0-601 Topic 5 Question 35 Discussion

Actual exam question for CompTIA's SY0-601 exam
Question #: 35
Topic #: 5
[All SY0-601 Questions]

Which of the following controls would BEST identify and report malicious insider activities?

Show Suggested Answer Hide Answer
Suggested Answer: A

Anintrusion detection system(IDS; alsointrusion protection systemorIPS) is a device or software application that monitors a network or systems for malicious activity or policy violations.[1]Any intrusion activity or violation is typically reported either to an administrator or collected centrally using asecurity information and event management (SIEM)system. A SIEM system combines outputs from multiple sources and uses alarm filtering techniques to distinguish malicious activity from false alarms.


by Melodie at May 04, 2022, 12:15 PM

Limited Time Offer

25%

Off

Get Premium SY0-601 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!


Save Cancel