Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Eccouncil Exam 312-39 Topic 3 Question 96 Discussion

Actual exam question for Eccouncil's 312-39 exam
Question #: 96
Topic #: 3
[All 312-39 Questions]

If the SIEM generates the following four alerts at the same time:

1. Firewall blocking traffic from getting into the network alerts

II. SQL injection attempt alerts

III. Data deletion attempt alerts

IV. Brute-force attempt alerts

Which alert should be given least priority as per effective alert triaging?

Show Suggested Answer Hide Answer
Suggested Answer: D

by Allene at Oct 18, 2024, 03:38 PM

Limited Time Offer

25%

Off

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel
Goldie
3 months ago
The correct answer is B) IV. Brute-force attempts are the least priority since they can be mitigated with proper access controls. The other alerts indicate more serious threats that require immediate attention.
upvoted 0 times
...
Roslyn
3 months ago
Firewall blocking traffic? That's like a bouncer keeping the party animals out - no need to panic, just let the good guests in. *chuckles*
upvoted 0 times
Nina
2 months ago
User 3: Yeah, let's focus on the more serious alerts like the SQL injection attempts.
upvoted 0 times
...
Alecia
2 months ago
User 2: Agreed, those are like the party crashers we can deal with later.
upvoted 0 times
...
Lemuel
2 months ago
User 1: I think we should give least priority to the data deletion attempt alerts.
upvoted 0 times
...
...
Lai
3 months ago
I disagree, the brute-force attempt is the least critical. As long as the account lockout policies are in place, that's just a minor annoyance. Time to focus on the bigger fish!
upvoted 0 times
Dalene
2 months ago
Aretha: Hmm, I see your point. Maybe we should focus on the SQL injection attempt alerts first.
upvoted 0 times
...
Mertie
2 months ago
User 3: I agree with Mertie, brute-force attempts can be mitigated with account lockout policies.
upvoted 0 times
...
Aretha
2 months ago
User 2: I disagree, I believe the brute-force attempt alerts are less critical.
upvoted 0 times
...
Margret
2 months ago
User 1: I think the data deletion attempt alerts should be given least priority.
upvoted 0 times
...
...
Tawna
3 months ago
Hmm, I'd say the SQL injection attempt is the most dangerous. That could lead to a complete system compromise if successful. We can't let that slip through!
upvoted 0 times
Rebbeca
2 months ago
User 4: Brute-force attempt alerts can also be dangerous, we shouldn't ignore them either.
upvoted 0 times
...
Marta
2 months ago
User 3: Data deletion attempt alerts should be given least priority, as they might not always indicate a serious threat.
upvoted 0 times
...
Dallas
3 months ago
User 2: I think we should also prioritize the firewall blocking alerts to prevent any unauthorized access.
upvoted 0 times
...
Karina
3 months ago
User 1: I agree, SQL injection attempt is definitely the most critical.
upvoted 0 times
...
...
Salome
4 months ago
The data deletion attempt is the most critical alert here. That should be the top priority for the security team to investigate and address immediately.
upvoted 0 times
Jamal
3 months ago
Yes, let's make sure to address that alert as soon as possible.
upvoted 0 times
...
Jannette
3 months ago
So, we should prioritize investigating the data deletion attempt alert first.
upvoted 0 times
...
Elina
3 months ago
I agree, the data deletion attempt alert is the most critical one.
upvoted 0 times
...
Kimberlie
3 months ago
I think the SQL injection attempt alert should be given least priority.
upvoted 0 times
...
...
Vicki
4 months ago
I disagree, I believe brute-force attempt should be given least priority.
upvoted 0 times
...
Margart
4 months ago
I think the least priority alert should be data deletion attempt.
upvoted 0 times
...

Save Cancel