MENU
What is the result of disjointed telemetry collection methods used within an organization?
Suggested Answer: A
Get Premium 250-580 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Disjointed telemetry collection within an organization can result in a lack of granular visibility for investigators. Here's why this is problematic:
Incomplete Data: Disjointed collection methods lead to fragmented data, making it difficult for security teams to get a complete picture of incidents.
Reduced Investigation Efficiency: Without granular and cohesive telemetry, investigators struggle to trace the attack's path accurately, slowing down response times.
Increased Risk of Missing Key Indicators: Critical indicators of compromise may be overlooked, allowing threats to persist or re-emerge in the environment.
Unified telemetry is essential for thorough and efficient investigations, as it provides the detailed insights necessary to understand and mitigate threats fully.
27 comments · newest first
CO
Corinne
10 months ago
False positives can definitely be a problem too.
DA
Darell
10 months ago
Totally agree, it complicates everything.
ME
Meghann
11 months ago
B is also a valid point, can't overlook orchestration!
ED
Edna
11 months ago
Wait, are we sure about that? Seems a bit extreme.
GE
Gearldine
11 months ago
A lack of visibility is a huge issue!
MA
Maybelle
11 months ago
I’m leaning towards option B because orchestration seems crucial for effective controls, but I’m not completely confident about that.
LA
Latanya
12 months ago
I practiced a similar question, and I think false positives could be an issue too, so maybe option C is relevant here.
KA
Karon
12 months ago
I’m not entirely sure, but I feel like option D could also be a result since if telemetry is scattered, it might let attacks spread unnoticed.
SH
Sherell
12 months ago
I remember discussing how disjointed telemetry can lead to a lack of visibility, so I think option A might be correct.
AS
Ashlyn
1 year ago
Okay, I've got it. Disjointed telemetry means the security team can't see the full context, which hampers their ability to respond effectively. I'm confident option A is the correct answer.
CA
Cassandra
1 year ago
Aha, I see what they're getting at here. Disjointed methods would make it hard to get a complete picture, leading to issues like false positives and attacks spreading during investigations. I think option C or D is the best answer.
JA
Jamey
1 year ago
Hmm, disjointed telemetry collection methods... that sounds like it could lead to a lack of visibility and coordination across the organization. I'm leaning towards option A.
JO
Johnna
1 year ago
This question seems straightforward, but I want to make sure I understand the key concepts before selecting an answer.
WE
Werner
1 year ago
We need better orchestration across controls to avoid this issue.
BA
Barney
1 year ago
I agree, it also results in attacks spreading during investigation.
TE
Terry
1 year ago
Disjointed telemetry collection methods lead to false positives.
DO
Dona
1 year ago
B) Lack of orchestration across controls - well, duh! If your security tools can't talk to each other, you might as well be trying to stop a tank with a slingshot.
MO
Mona
1 year ago
C) False positives are seen - yup, that's the curse of disjointed telemetry. It's like finding a needle in a haystack, but the haystack is made of more needles.
LO
Lorrine
1 year ago
D) Attacks continue to spread during investigation
IR
Iraida
1 year ago
C) False positives are seen - yup, that's the curse of disjointed telemetry. It's like finding a needle in a haystack, but the haystack is made of more needles.
ST
Stephaine
1 year ago
A) Investigators lack granular visibility
SU
Sue
1 year ago
A) Investigators lack granular visibility - you got that right! How can they possibly catch the bad guys if they can't even see what's going on?
RE
Rebbecca
1 year ago
D) Attacks continue to spread during investigation - that's exactly what happens when telemetry is all over the place. No centralized visibility means the bad guys have a field day.
CA
Cammy
1 year ago
C) False positives are seen
TI
Tiera
1 year ago
D) Attacks continue to spread during investigation
HO
Horace
1 year ago
B) Back of orchestration across controls
YU
Yuki
1 year ago
A) Investigators lack granular visibility