Cyber Monday 2024! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Eccouncil Exam 312-39 Topic 3 Question 96 Discussion

Actual exam question for Eccouncil's 312-39 exam
Question #: 96
Topic #: 3
[All 312-39 Questions]

If the SIEM generates the following four alerts at the same time:

1. Firewall blocking traffic from getting into the network alerts

II. SQL injection attempt alerts

III. Data deletion attempt alerts

IV. Brute-force attempt alerts

Which alert should be given least priority as per effective alert triaging?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Allene at Oct 18, 2024, 03:38 PM

Limited Time Offer

25%

Off

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Goldie
14 days ago
The correct answer is B) IV. Brute-force attempts are the least priority since they can be mitigated with proper access controls. The other alerts indicate more serious threats that require immediate attention.
upvoted 0 times
...
Roslyn
16 days ago
Firewall blocking traffic? That's like a bouncer keeping the party animals out - no need to panic, just let the good guests in. *chuckles*
upvoted 0 times
...
Lai
20 days ago
I disagree, the brute-force attempt is the least critical. As long as the account lockout policies are in place, that's just a minor annoyance. Time to focus on the bigger fish!
upvoted 0 times
...
Tawna
28 days ago
Hmm, I'd say the SQL injection attempt is the most dangerous. That could lead to a complete system compromise if successful. We can't let that slip through!
upvoted 0 times
Marta
2 days ago
User 3: Data deletion attempt alerts should be given least priority, as they might not always indicate a serious threat.
upvoted 0 times
...
Dallas
8 days ago
User 2: I think we should also prioritize the firewall blocking alerts to prevent any unauthorized access.
upvoted 0 times
...
Karina
11 days ago
User 1: I agree, SQL injection attempt is definitely the most critical.
upvoted 0 times
...
...
Salome
2 months ago
The data deletion attempt is the most critical alert here. That should be the top priority for the security team to investigate and address immediately.
upvoted 0 times
Jamal
15 days ago
Yes, let's make sure to address that alert as soon as possible.
upvoted 0 times
...
Jannette
19 days ago
So, we should prioritize investigating the data deletion attempt alert first.
upvoted 0 times
...
Elina
29 days ago
I agree, the data deletion attempt alert is the most critical one.
upvoted 0 times
...
Kimberlie
1 months ago
I think the SQL injection attempt alert should be given least priority.
upvoted 0 times
...
...
Vicki
2 months ago
I disagree, I believe brute-force attempt should be given least priority.
upvoted 0 times
...
Margart
2 months ago
I think the least priority alert should be data deletion attempt.
upvoted 0 times
...

Save Cancel