ExamQuestions.com

Register
Login
CompTIA Advanced Security Practitioner (CASP) CAS-003 Exam Questions

CompTIA

CompTIA Advanced Security Practitioner (CASP) CAS-003

104 / 270

Question 104:

A security technician is incorporating the following requirements in an RFP for a new SIEM: ✑ New security notifications must be dynamically implemented by the SIEM engine ✑ The SIEM must be able to identify traffic baseline anomalies ✑ Anonymous attack data from all customers must augment attack detection and risk scoring Based on the above requirements, which of the following should the SIEM support? (Choose two.) 

Answer options:

A. Autoscaling search capability
B. Machine learning
C. Multisensor deployment
D. Big Data analytics
E. Cloud-based management
F. Centralized log aggregation