MENU
Robin, a SOC engineer in a multinational company, is planning to implement a SIEM. He realized that his organization is capable of performing only Correlation, Analytics, Reporting, Retention, Alerting, and Visualization required for the SIEM implementation and has to take collection and aggregation services from a Managed Security Services Provider (MSSP).
What kind of SIEM is Robin planning to implement?
Suggested Answer: D
Get Premium 312-39 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
27 comments · newest first
KA
Karma
11 months ago
Not sure if that's the best approach, though...
MA
Malika
11 months ago
I agree, he needs that MSSP support for sure.
JI
Jin
11 months ago
Wait, is he really relying on an MSSP for collection?
GE
Georgeanna
12 months ago
I think it's definitely MSSP Managed.
SO
Solange
12 months ago
Sounds like a Hybrid Model to me!
WY
Wynell
1 year ago
I recall that if an organization uses an MSSP for certain services, it could indicate a joint management approach, so I might go with the hybrid model.
GE
Gerald
1 year ago
I think the key here is that Robin is handling some aspects himself, which makes me lean towards the self-hosted options, but I’m confused about the MSSP part.
YV
Yvette
1 year ago
I feel like this is similar to a practice question we did on SIEM types. If he’s relying on an MSSP, it could be a hybrid model, but I’m not entirely sure.
CH
Chaya
1 year ago
I remember studying the different SIEM models, and I think if Robin is using an MSSP for collection, it might not be fully self-managed.
ST
Stephanie
1 year ago
This is a good test of my SIEM knowledge. I'm pretty confident the answer is B, "Self-hosted, MSSP Managed", since the organization is outsourcing part of the SIEM implementation to a managed service provider.
FE
Felicidad
1 year ago
Okay, I think I've got this. Since the organization can handle the core SIEM functions but needs an MSSP for collection and aggregation, the answer is likely the "Hybrid Model, Jointly Managed" option.
MU
Murray
1 year ago
Hmm, I'm a bit confused by the wording here. It's not entirely clear to me what the distinction is between the different SIEM models. I'll need to re-read the question and think it through step-by-step.
DO
Dortha
1 year ago
This seems like a straightforward question about SIEM implementation models. I'll carefully review the details provided and think through the options.
ER
Erasmo
2 years ago
Hmm, this is a tricky one. But I think B is the answer. Self-hosted and MSSP managed - the best of both worlds, like a tech-savvy version of a personal assistant.
CI
Ciara
2 years ago
I'm going to have to go with B. Self-hosted and MSSP managed. Gotta love that outsourced aggregation and collection! Saves the company a headache.
MO
Mozell
2 years ago
I'd go with C. The hybrid model where the SIEM is jointly managed seems like the best fit here. Balances the internal and external resources nicely.
HE
Herman
2 years ago
And it can help optimize resources for the SIEM implementation.
RO
Roslyn
2 years ago
Definitely, it can provide a good balance of control and support.
LE
Leanna
2 years ago
It's a smart way to leverage both internal and external expertise.
BO
Bong
2 years ago
I agree, the hybrid model sounds like a good choice.
BE
Benedict
2 years ago
Definitely B. Self-hosted and MSSP managed is the way to go. Robin's organization has the core capabilities, but needs some external help. Brilliant move!
CA
Carolynn
2 years ago
It's important to have a solid plan in place for SIEM implementation, and Robin seems to have made the right decision with option B.
CO
Colby
2 years ago
Self-hosted and MSSP managed can provide the best of both worlds in terms of control and support.
OM
Omega
2 years ago
I agree, having the core capabilities in-house and leveraging MSSP for collection and aggregation is a smart choice.
RO
Roslyn
2 years ago
I believe Robin should consider a Hybrid Model, Jointly Managed SIEM for better control and collaboration.
FR
Francine
2 years ago
I agree with Cathrine. It makes sense for Robin to use MSSP for collection and aggregation services.
CA
Cathrine
2 years ago
I think Robin is planning to implement a Self-hosted, MSSP Managed SIEM.