Eccouncil Exam 312-39 Topic 10 Question 79 Discussion

Actual exam question for Eccouncil's 312-39 exam

Question #: 79
Topic #: 10

[All 312-39 Questions]

Which of the following can help you eliminate the burden of investigating false positives?

AKeeping default rules

BNot trusting the security devices

CTreating every alert as high level

DIngesting the context data

Show Suggested Answer

Suggested Answer: B

by Levi at Apr 19, 2024, 07:32 PM

Limited Time Offer

25%

Off

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Eva

2 days ago

I believe treating every alert as high level is also important to avoid missing any potential threats.

upvoted 0 times

...

Trina

2 days ago

I was thinking C at first, but that seems a bit heavy-handed. Treating every alert as high level would just create more work for us. D is definitely the way to go.

upvoted 0 times

...

Santos

5 days ago

Hmm, I'm pretty sure the answer is D. Ingesting the context data seems like the best way to reduce false positives. Anything that gives you more information to work with is a win in my book.

upvoted 0 times

...

Josphine

5 days ago

I agree with Josphinebie, ingesting context data provides more information to accurately assess alerts.

upvoted 0 times

...

Bobbie

8 days ago

I think ingesting the context data can help eliminate false positives.

upvoted 0 times

...