PCI SSCPCI DSSMonitoring TestingEASYFree question
What is the purpose of a SIEM (Security Information and Event Management) system?
- A.To collect, correlate, and analyze security event data from multiple sources for real-time monitoring and alerting
- B.To scan internal hosts for missing patches, rank findings by CVSS score, and open remediation tickets for the system owners
- C.To encrypt stored card data, rotate keys, and report key custodian changes to the card brands
- D.To enforce firewall rules, block unauthorized ports, and log denied connections for audit
Why A is correct
SIEM systems aggregate and correlate security event data from across the CDE, enabling centralized monitoring, alerting, and forensic analysis.
Know someone studying for PCI DSS? Send them this one.