Practice · Security Operations Professional

~/paloalto-pcsop · paloalto-pcsop_d1_cce68af2c2c6 ▊

← Security Operations Professional · practice sheet

paloalto-pcsop_d1_cce68af2c2c6 domain/d1 · medium single

A SOC team is drowning in disconnected point tools that were each added to solve a specific problem, producing a fragmented architecture that only incrementally improved security outcomes. Based on the rationale for a next-generation SIEM alternative, which characterization of the legacy SIEM approach explains why this fragmentation occurred?

A Legacy SIEM aggregated and analyzed alerts and logs, and teams kept bolting on new tools that promised to solve point problems
B Legacy SIEM automatically correlated granular telemetry into incidents without human involvement
C Legacy SIEM relied exclusively on endpoint prevention agents to gather data
D Legacy SIEM used a self-learning recommendation engine to determine response next-steps

Unlock this exam to join the per-question discussion and vote on questions.

next question →