Eccouncil Exam 312-39 Topic 10 Question 79 Discussion

Actual exam question for Eccouncil's 312-39 exam

Question #: 79
Topic #: 10

[All 312-39 Questions]

Which of the following can help you eliminate the burden of investigating false positives?

AKeeping default rules

BNot trusting the security devices

CTreating every alert as high level

DIngesting the context data

Show Suggested Answer

Suggested Answer: B

by Levi at Apr 19, 2024, 07:32 PM

Limited Time Offer

25%

Off

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Santos

10 hours ago

Hmm, I'm pretty sure the answer is D. Ingesting the context data seems like the best way to reduce false positives. Anything that gives you more information to work with is a win in my book.

upvoted 0 times

...

Josphine

11 hours ago

I agree with Josphinebie, ingesting context data provides more information to accurately assess alerts.

upvoted 0 times

...

Bobbie

3 days ago

I think ingesting the context data can help eliminate false positives.

upvoted 0 times

...