A security technician is incorporating the following requirements in an RFP for a new SIEM: New security notifications must be dynamically implemented by the SIEM engine The SIEM must be able to identify traffic baseline anomalies Anonymous attack data from all customers must augment attack detection and risk scoring Based on the above requirements, which of the following should the SIEM support? (Choose two.)
A) Autoscaling search capability
B) Machine learning
C) Multisensor deployment
D) Big Data analytics
E) Cloud-based management
F) Centralized log aggregation

Question

Quizplus · Accepted Answer

Machine learning is necessary for dynamically implementing new security notifications and identifying traffic baseline anomalies. Big Data analytics is required to handle and analyze large volumes of anonymous attack data from all customers to augment attack detection and risk scoring.

A Security Technician Is Incorporating the Following Requirements in an RFP