M4C4

Basic operation of the SIEM tools, on the logs collected from the devices is

• Correlating the log
• Collecting the log
• Analyzing the log
• Live Correlating the log

Which of the following is not a part of SIEM tools?

• Sensor
• Collector
• Agent
• Log

Which one is not the part of SIEM application?

• Risk assessment
• Vulnerability Scanning
• Real time monitoring
• Normalization

How does a SIEM tool handle the issue of Completeness of log?

• Encryption
• Hashing
• Digital Signing
• Time stamping

CSIR team of Org publishes descriptions of recent threats.IS auditor's GREATEST concern should be that users may

• Use this information to launch attacks
• Forward the security alert
• Implement individual solutions
• Fail to understand the threat

The main goal of Security Operation Centre (SOC) is

• Detect, analyze and report
• Detect, analyze and respond
• Collect, analyze and report
• Collect, analyze and respond

What is the primary purpose of an incident management program?

• Identify and assess incidents
• Conduct lessons learned sessions
• Alert key individuals
• Assign responsibility

SOC shall be ineffective without the support of –

• Risk
• Budget
• Top management
• Quality

Phases of an incident management program

• Prepare, Respond, and follow up
• Plan, prepare, and respond
• Plan, prepare and follow up
• Prepare, plan and respond

Within an Incident Response Management program, the Containment phase aims to

• Block the event
• Reduce the impact
• Remove the event
• Rise the event