CyberCertPrepSecurity FundamentalsSecurity ToolsEASYFree question
What is the primary purpose of a SIEM system?
- A.To encrypt data at rest
- B.To block malware from entering the network
- C.To collect, correlate, and analyze security events from multiple sources for threat detection
- D.To manage employee passwords
Why C is correct
A SIEM (Security Information and Event Management) system aggregates log data from multiple sources (firewalls, servers, endpoints, applications), correlates events to identify patterns, and generates alerts for potential security incidents. It provides a centralized view of an organization's security posture and supports incident investigation.
Know someone studying for Security Fundamentals? Send them this one.