The analyst of cyber threat intelligence more likely uses ________ heavily for day-to-day tasks.
A) forward proxy server
B) anti-virus and anti-malware
C) honeypot
D) software defined network
E) security information and event management (SIEM)

Question

Quizplus · Accepted Answer

Cyber threat intelligence analysts heavily rely on security information and event management (SIEM) to collect, analyze, and correlate security events from various sources, including logs from firewalls, intrusion detection systems, and other security tools. SIEM allows analysts to quickly identify potential threats and respond before they cause damage. Other options listed, such as forward proxy servers, anti-virus, and honeypots, may also be used but are not as critical to the day-to-day tasks of a cyber threat intelligence analyst as SIEM. Software-defined networks may also be used, but are not necessarily a primary tool for cyber threat intelligence analysts.

The Analyst of Cyber Threat Intelligence More Likely Uses ________