Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

CompTIA SY0-701 Exam - Topic 5 Question 14 Discussion

Actual exam question for CompTIA's SY0-701 exam
Question #: 14
Topic #: 5
[All SY0-701 Questions]

A company is planning to set up a SIEM system and assign an analyst to review the logs on a weekly basis Which of the following types of controls is the company setting up?

Show Suggested Answer Hide Answer
Suggested Answer: C

A detective control is a type of security control that monitors and analyzes events to detect and report on potential or actual security incidents. A SIEM system is an example of a detective control, as it collects, correlates, and analyzes security data from various sources and generates alerts for security teams. Corrective, preventive, and deterrent controls are different types of security controls that aim to restore, protect, or discourage security breaches, respectively.Reference:CompTIA Security+ Study Guide: Exam SY0-701, 9th Edition, page 33;What is Security Information and Event Management (SIEM)?


by Elenora at May 12, 2024, 06:48 AM

Limited Time Offer

25%

Off

Get Premium SY0-701 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Odette
6 months ago
I didn't realize SIEM was so crucial for security!
upvoted 0 times
...
Cristal
6 months ago
Nope, definitely Detective. Logs help identify issues after they happen.
upvoted 0 times
...
Jade
6 months ago
Wait, isn't this more of a Preventive measure?
upvoted 0 times
...
Quentin
7 months ago
Totally agree, it's all about monitoring those logs!
upvoted 0 times
...
Tasia
7 months ago
Sounds like they're setting up a Detective control.
upvoted 0 times
...
Verda
7 months ago
I could be wrong, but I feel like the weekly log review might also have some corrective aspects, since it helps fix issues after they are detected.
upvoted 0 times
...
Tamesha
7 months ago
This reminds me of a practice question where we discussed SIEM systems; I think they were classified as detective controls too.
upvoted 0 times
...
Carman
7 months ago
I'm not entirely sure, but I remember something about preventive controls being proactive, while this seems more reactive?
upvoted 0 times
...
Wynell
8 months ago
I think this is about detective controls since the analyst is reviewing logs to find issues after they happen.
upvoted 0 times
...
Kanisha
8 months ago
I feel confident this is a Detective control. The SIEM system is designed to identify potential security events, and the weekly review by an analyst is a way to actively monitor those logs for any suspicious activity. Seems pretty clear-cut to me.
upvoted 0 times
...
Hoa
8 months ago
Okay, let me break this down. A SIEM system is used to monitor and analyze security logs, which sounds like a Detective control to identify issues. But the weekly review by an analyst adds an extra layer of detection, so I'm leaning towards C. Detective controls.
upvoted 0 times
...
Leota
8 months ago
Hmm, I'm a bit unsure here. Is it possible that the weekly log review could also be considered a Preventive control, to stop incidents before they happen? I'll have to think this through carefully.
upvoted 0 times
...
Amina
8 months ago
This seems pretty straightforward - the company is setting up a SIEM system to detect potential security incidents, so the answer must be Detective controls.
upvoted 0 times
...
Tayna
8 months ago
I'm a bit confused on this one. Should I be removing power from the devices or just leaving everything alone? The options seem to conflict a bit. I think I'll go with option B, since it sounds like the safest approach to preserve the scene without risking the evidence.
upvoted 0 times
...
Dortha
8 months ago
This seems like a straightforward question about contract administration. I'm pretty confident I can identify the key policy here.
upvoted 0 times
...
Dusti
8 months ago
This is a tricky one. I'm torn between a few of the options, but I think I'm leaning towards B, Contact Request flow. That seems like it could handle the routing and automation needs. I'll need to double-check the details, though.
upvoted 0 times
...
Gerald
8 months ago
Okay, let me think this through. The question says the resource will be used for sentiment analysis, so I'm guessing the correct service is TextAnalytics. Now I just need to figure out the right pricing tier and region.
upvoted 0 times
...

Save Cancel