Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Eccouncil 312-39 Exam - Topic 8 Question 97 Discussion

Robin, a SOC engineer in a multinational company, is planning to implement a SIEM. He realized that his organization is capable of performing only Correlation, Analytics, Reporting, Retention, Alerting, and Visualization required for the SIEM implementation and has to take collection and aggregation services from a Managed Security Services Provider (MSSP).What kind of SIEM is Robin planning to implement?
D) Cloud, Self-Managed
A) Self-hosted, Self-Managed
B) Self-hosted, MSSP Managed
C) Hybrid Model, Jointly Managed

Eccouncil 312-39 Exam - Topic 8 Question 97 Discussion

Actual exam question for Eccouncil's 312-39 exam
Question #: 97
Topic #: 8
[All 312-39 Questions]

Robin, a SOC engineer in a multinational company, is planning to implement a SIEM. He realized that his organization is capable of performing only Correlation, Analytics, Reporting, Retention, Alerting, and Visualization required for the SIEM implementation and has to take collection and aggregation services from a Managed Security Services Provider (MSSP).

What kind of SIEM is Robin planning to implement?

Show Suggested Answer Hide Answer
Suggested Answer: D


by Karol at Nov 18, 2024, 11:49 PM

Limited Time Offer

25%

Off

Get Premium 312-39 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Karma
9 months ago
Not sure if that's the best approach, though...
upvoted 0 times
...
Malika
9 months ago
I agree, he needs that MSSP support for sure.
upvoted 0 times
...
Jin
10 months ago
Wait, is he really relying on an MSSP for collection?
upvoted 0 times
...
Georgeanna
10 months ago
I think it's definitely MSSP Managed.
upvoted 0 times
...
Solange
10 months ago
Sounds like a Hybrid Model to me!
upvoted 0 times
...
Wynell
10 months ago
I recall that if an organization uses an MSSP for certain services, it could indicate a joint management approach, so I might go with the hybrid model.
upvoted 0 times
...
Gerald
11 months ago
I think the key here is that Robin is handling some aspects himself, which makes me lean towards the self-hosted options, but I’m confused about the MSSP part.
upvoted 0 times
...
Yvette
11 months ago
I feel like this is similar to a practice question we did on SIEM types. If he’s relying on an MSSP, it could be a hybrid model, but I’m not entirely sure.
upvoted 0 times
...
Chaya
11 months ago
I remember studying the different SIEM models, and I think if Robin is using an MSSP for collection, it might not be fully self-managed.
upvoted 0 times
...
Stephanie
11 months ago
This is a good test of my SIEM knowledge. I'm pretty confident the answer is B, "Self-hosted, MSSP Managed", since the organization is outsourcing part of the SIEM implementation to a managed service provider.
upvoted 0 times
...
Felicidad
11 months ago
Okay, I think I've got this. Since the organization can handle the core SIEM functions but needs an MSSP for collection and aggregation, the answer is likely the "Hybrid Model, Jointly Managed" option.
upvoted 0 times
...
Murray
11 months ago
Hmm, I'm a bit confused by the wording here. It's not entirely clear to me what the distinction is between the different SIEM models. I'll need to re-read the question and think it through step-by-step.
upvoted 0 times
...
Dortha
11 months ago
This seems like a straightforward question about SIEM implementation models. I'll carefully review the details provided and think through the options.
upvoted 0 times
...
Erasmo
2 years ago
Hmm, this is a tricky one. But I think B is the answer. Self-hosted and MSSP managed - the best of both worlds, like a tech-savvy version of a personal assistant.
upvoted 0 times
...
Ciara
2 years ago
I'm going to have to go with B. Self-hosted and MSSP managed. Gotta love that outsourced aggregation and collection! Saves the company a headache.
upvoted 0 times
...
Mozell
2 years ago
I'd go with C. The hybrid model where the SIEM is jointly managed seems like the best fit here. Balances the internal and external resources nicely.
upvoted 0 times
Herman
2 years ago
And it can help optimize resources for the SIEM implementation.
upvoted 0 times
...
Roslyn
2 years ago
Definitely, it can provide a good balance of control and support.
upvoted 0 times
...
Leanna
2 years ago
It's a smart way to leverage both internal and external expertise.
upvoted 0 times
...
Bong
2 years ago
I agree, the hybrid model sounds like a good choice.
upvoted 0 times
...
...
Benedict
2 years ago
Definitely B. Self-hosted and MSSP managed is the way to go. Robin's organization has the core capabilities, but needs some external help. Brilliant move!
upvoted 0 times
Carolynn
2 years ago
It's important to have a solid plan in place for SIEM implementation, and Robin seems to have made the right decision with option B.
upvoted 0 times
...
Colby
2 years ago
Self-hosted and MSSP managed can provide the best of both worlds in terms of control and support.
upvoted 0 times
...
Omega
2 years ago
I agree, having the core capabilities in-house and leveraging MSSP for collection and aggregation is a smart choice.
upvoted 0 times
...
...
Roslyn
2 years ago
I believe Robin should consider a Hybrid Model, Jointly Managed SIEM for better control and collaboration.
upvoted 0 times
...
Francine
2 years ago
I agree with Cathrine. It makes sense for Robin to use MSSP for collection and aggregation services.
upvoted 0 times
...
Cathrine
2 years ago
I think Robin is planning to implement a Self-hosted, MSSP Managed SIEM.
upvoted 0 times
...

Save Cancel