An organization is struggling to differentiate threats from normal traffic and access to systems. A security engineer has been asked to recommend a system that will aggregate data and provide metrics that will assist in identifying malicious actors or other anomalous activity throughout the environment. Which of the following solutions should the engineer recommend?
A) Web application firewall
B) SIEM
C) IPS
D) UTM
E) File integrity monitor

Question

Quizplus · Accepted Answer

A SIEM (Security Information and Event Management) system aggregates data from various sources, analyzes it, and provides metrics and alerts to identify potential threats and anomalous activities in the environment.

An Organization Is Struggling to Differentiate Threats from Normal Traffic