Eccouncil 312-39 Exam - Topic 8 Question 97 Discussion

Actual exam question for Eccouncil's 312-39 exam

Question #: 97
Topic #: 8

Robin, a SOC engineer in a multinational company, is planning to implement a SIEM. He realized that his organization is capable of performing only Correlation, Analytics, Reporting, Retention, Alerting, and Visualization required for the SIEM implementation and has to take collection and aggregation services from a Managed Security Services Provider (MSSP).

What kind of SIEM is Robin planning to implement?

ASelf-hosted, Self-Managed

BSelf-hosted, MSSP Managed

CHybrid Model, Jointly Managed

DCloud, Self-Managed

Show Suggested Answer

Suggested Answer: D

by Karol at Nov 18, 2024, 11:49 PM

Limited Time Offer

25%

Off

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Karma

4 months ago

Not sure if that's the best approach, though...

upvoted 0 times

...

Malika

5 months ago

I agree, he needs that MSSP support for sure.

upvoted 0 times

...

Jin

5 months ago

Wait, is he really relying on an MSSP for collection?

upvoted 0 times

...

Georgeanna

5 months ago

I think it's definitely MSSP Managed.

upvoted 0 times

...

Solange

5 months ago

Sounds like a Hybrid Model to me!

upvoted 0 times

...

Wynell

6 months ago

I recall that if an organization uses an MSSP for certain services, it could indicate a joint management approach, so I might go with the hybrid model.

upvoted 0 times

...

Gerald

6 months ago

I think the key here is that Robin is handling some aspects himself, which makes me lean towards the self-hosted options, but I’m confused about the MSSP part.

upvoted 0 times

...

Yvette

6 months ago

I feel like this is similar to a practice question we did on SIEM types. If he’s relying on an MSSP, it could be a hybrid model, but I’m not entirely sure.

upvoted 0 times

...

Chaya

6 months ago

I remember studying the different SIEM models, and I think if Robin is using an MSSP for collection, it might not be fully self-managed.

upvoted 0 times

...

Stephanie

6 months ago

This is a good test of my SIEM knowledge. I'm pretty confident the answer is B, "Self-hosted, MSSP Managed", since the organization is outsourcing part of the SIEM implementation to a managed service provider.

upvoted 0 times

...

Felicidad

6 months ago

Okay, I think I've got this. Since the organization can handle the core SIEM functions but needs an MSSP for collection and aggregation, the answer is likely the "Hybrid Model, Jointly Managed" option.

upvoted 0 times

...

Murray

6 months ago

Hmm, I'm a bit confused by the wording here. It's not entirely clear to me what the distinction is between the different SIEM models. I'll need to re-read the question and think it through step-by-step.

upvoted 0 times

...

Dortha

6 months ago

This seems like a straightforward question about SIEM implementation models. I'll carefully review the details provided and think through the options.

upvoted 0 times

...

Erasmo

1 year ago

Hmm, this is a tricky one. But I think B is the answer. Self-hosted and MSSP managed - the best of both worlds, like a tech-savvy version of a personal assistant.

upvoted 0 times

...

Ciara

1 year ago

I'm going to have to go with B. Self-hosted and MSSP managed. Gotta love that outsourced aggregation and collection! Saves the company a headache.

upvoted 0 times

...

Mozell

1 year ago

I'd go with C. The hybrid model where the SIEM is jointly managed seems like the best fit here. Balances the internal and external resources nicely.

upvoted 0 times

Herman

1 year ago

And it can help optimize resources for the SIEM implementation.

upvoted 0 times

...

Roslyn

1 year ago

Definitely, it can provide a good balance of control and support.

upvoted 0 times

...

Leanna

1 year ago

It's a smart way to leverage both internal and external expertise.

upvoted 0 times

...

Bong

1 year ago

I agree, the hybrid model sounds like a good choice.

upvoted 0 times

...

Benedict

1 year ago

Definitely B. Self-hosted and MSSP managed is the way to go. Robin's organization has the core capabilities, but needs some external help. Brilliant move!

upvoted 0 times