What is a SIEM system?

A.Security Information and Event Management - a system that aggregates and analyzes security logs from multiple sources
B.A system integration platform and enterprise monitoring dashboard used mainly for uptime and license tracking across data centers
C.A secure internet email gateway and spam filtering appliance deployed at the network perimeter for inbound and outbound mail across each regional office
D.A security information exchange module and ticketing add-on used to route help-desk requests and vendor renewal reminders between regional IT teams

Why A is correct

SIEM collects, normalizes, correlates, and analyzes log data from across the organization to detect security events and support incident response.

Know someone studying for NIST CSF? Send them this one.

Where this fits in the NIST CSF exam

Detect Function

NIST CSF Detect function: continuous monitoring, anomaly and event detection, and detection processes.

This question belongs to the "Detect" domain, which makes up about 20% of the NIST CSF exam.

Practice this topic NIST CSF exam guide

Solve. Learn. Rank. Get Hired.

One question down. Thousands to go.

CyberCertPrep gives you 20 free NIST CSF questions per day with this same answer-and-explanation depth, plus timed exam simulations and progress tracking. No card required.

Practice NIST CSF free Get the Android app

NIST CSF and NIST are trademarks or registered trademarks of their respective owners. CyberCertPrep is an independent exam-preparation resource and is not affiliated with, authorized by, sponsored by, or endorsed by NIST or any other certification body. All study material is independently created; the certification name is used only to identify the exam this resource helps you prepare for.

What is a SIEM system?

Where this fits in the NIST CSF exam

More free Detect Function questions

One question down. Thousands to go.