Logical Operations Exam CFR-210 Topic 1 Question 73 Discussion

Actual exam question for Logical Operations's CFR-210 exam

Question #: 73
Topic #: 1

An organization performs regular updates to its network devices to alert and prevent access to streaming media sites by the employees. Each device will send logs and alerts to a centralized server for storage, archive, and analysis. Which of the following BEST describes the system that is correlating the data found in all alerts and logs?

ASIEM

BNIDS

CHIPS

DWIPS

Show Suggested Answer

Suggested Answer: D

by Chantay at Sep 19, 2024, 02:29 AM

Limited Time Offer

25%

Off

Get Premium CFR-210 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Nicolette

1 months ago

Maybe they're just using a giant whiteboard and a team of interns to track all the alerts. Old-school security, baby!

upvoted 0 times

Elouise

4 days ago

B) NIDS

upvoted 0 times

...

Lenora

8 days ago

I think they're using a Security Information and Event Management system to correlate all the data.

upvoted 0 times

...

Annelle

10 days ago

A) SIEM

upvoted 0 times

...

Edmond

1 months ago

WIPS? Really? That's like using a sledgehammer to swat a fly. Wouldn't that be overkill for this scenario?

upvoted 0 times

...

Tandra

2 months ago

HIPS could also be a good option, as it's focused on detecting and preventing host-based intrusions. But I'm not sure if it fits the 'centralized' requirement.

upvoted 0 times

Sue

2 days ago

A) SIEM is the best option for correlating data found in all alerts and logs. It provides centralized storage, archive, and analysis of the information.

upvoted 0 times

...

Azzie

6 days ago

HIPS could also be a good option, as it's focused on detecting and preventing host-based intrusions. But I'm not sure if it fits the 'centralized' requirement.

upvoted 0 times

...

Cyndy

8 days ago

HIPS could also be a good option, as it's focused on detecting and preventing host-based intrusions. But I'm not sure if it fits the 'centralized' requirement.

upvoted 0 times

...

Junita

10 days ago

D) WIPS

upvoted 0 times

...

Tamekia

13 days ago

C) HIPS

upvoted 0 times

...

Yan

25 days ago

B) NIDS

upvoted 0 times

...

Katina

29 days ago

A) SIEM

upvoted 0 times

...

Freeman

1 months ago

A) SIEM

upvoted 0 times

...

Myra

2 months ago

I'm not sure if SIEM is the best answer here. NIDS might be a better fit since it's monitoring network traffic for any suspicious activity.

upvoted 0 times

...

Aja

2 months ago

This seems like a SIEM system to me. It's processing and correlating data from multiple devices to provide a centralized view of the network security.

upvoted 0 times

...