Cisco Exam 200-201 Topic 1 Question 82 Discussion

Actual exam question for Cisco's 200-201 exam

Question #: 82
Topic #: 1

What is a difference between SI EM and SOAR security systems?

ASOAR ingests numerous types of logs and event data infrastructure components and SIEM can fetch data from endpoint security software and external threat intelligence feeds

BSOAR collects and stores security data at a central point and then converts it into actionable intelligence, and SIEM enables SOC teams to automate and orchestrate manual tasks

CSIEM raises alerts in the event of detecting any suspicious activity, and SOAR automates investigation path workflows and reduces time spent on alerts

DSIEM combines data collecting, standardization, case management, and analytics for a defense-in-depth concept, and SOAR collects security data antivirus logs, firewall logs, and hashes of downloaded files

Show Suggested Answer

Suggested Answer: C

by Paz at Mar 20, 2024, 08:44 AM

Limited Time Offer

25%

Off

Get Premium 200-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

My

12 months ago

And SIEM combines data collecting, standardization, case management, and analytics for a defense-in-depth concept.

upvoted 0 times

...

Macy

12 months ago

That's true, Roslyn. SOAR automates investigation path workflows and reduces time spent on alerts.

upvoted 0 times

...

Roslyn

12 months ago

But I believe SIEM raises alerts in case of detecting suspicious activity.

upvoted 0 times

...

My

1 years ago

I agree with Macy, SOAR collects and stores security data at a central point and converts it into actionable intelligence.

upvoted 0 times

...

Macy

1 years ago

I think the main difference is that SOAR ingests various types of logs and event data infrastructure components.

upvoted 0 times

...

Cecil

1 years ago

Definitely, it's important for security teams to understand the differences and choose the right tool for their requirements.

upvoted 0 times

...

Delpha

1 years ago

I think both have their own strengths and can be useful depending on the specific needs of the organization.

upvoted 0 times

...

Izetta

1 years ago

That's true, SIEM is more focused on alerting while SOAR is more about automation and reducing time spent on alerts.

upvoted 0 times

...

Oren

1 years ago

On the other hand, SIEM raises alerts in case of any suspicious activity, while SOAR automates investigation path workflows.

upvoted 0 times

...

Carissa

1 years ago

I agree with that, SOAR certainly has a wider range of data it can handle.

upvoted 0 times

...

Lezlie

1 years ago

I think the main difference is that SOAR ingests numerous types of logs and event data infrastructure components, while SIEM can fetch data from endpoint security software and external threat intelligence feeds.

upvoted 0 times

...

Rodrigo

1 years ago

Exactly! I was leaning towards B as well. Plus, option C just sounds wrong - SIEM systems are the ones that raise alerts, not SOAR.

upvoted 0 times

...

Arletta

1 years ago

That makes sense to me. SOAR is about the collection and analysis, while SIEM is about the automation and response. We need both in a comprehensive security strategy.

upvoted 0 times

...

Lawrence

1 years ago

Haha, yeah, that one was a bit of a head-scratcher. I can just picture a SOAR system being like, 'Nah, I'm not going to alert you to that suspicious activity. I'll just handle it myself!'

upvoted 0 times

Chan

1 years ago

Haha, yeah, that one was a bit of a head-scratcher. I can just picture a SOAR system being like, 'Nah, I'm not going to alert you to that suspicious activity. I'll just handle it myself!'

upvoted 0 times

...

Mariko

1 years ago

A) SOAR ingests numerous types of logs and event data infrastructure components and SIEM can fetch data from endpoint security software and external threat intelligence feeds

upvoted 0 times

...

Felix

1 years ago

C) SIEM raises alerts in the event of detecting any suspicious activity, and SOAR automates investigation path workflows and reduces time spent on alerts

upvoted 0 times

...

Gracia

1 years ago

A) SOAR ingests numerous types of logs and event data infrastructure components and SIEM can fetch data from endpoint security software and external threat intelligence feeds

upvoted 0 times

...