Fill in the blank: _____ are used to retain, analyze, and search an organization's log data to provide security information and alerts in real-time.1 pointOperating systemsnetwork protocol analyzers (packet sniffers)SIEM toolsPlaybooks

Question 6Fill in the blank: SIEM tools are used to search, analyze, and _____ an organization's log data to provide security information and alerts in real-time.1 pointreleaseretainmodifyseparate7.Question 7

1.Question 1Which tool collects and analyzes log data to monitor critical activities in an organization?1 pointIntrusion detection system (IDS) toolSecurity information and event management (SIEM) toolPlaybookIntrusion prevention system (IPS) tool

1.Question 1What tool is designed to capture and analyze data traffic within a network?1 pointplaybooksecurity information and event management (SIEM)Structured Query Language (SQL)network protocol analyzer (packet sniffer)2.Question 2What type of tool uses dashboards to organize data into categories and allows analysts to identify potential security incidents as they happen?1 pointPythonLinuxnetwork protocol analyzers (packet sniffers)SIEM3.Question 3What can cybersecurity professionals use logs for?1 pointTo select which security team members will respond to an incidentTo identify vulnerabilities and potential security breachesTo research and optimize processing capabilities within a networkTo analyze data traffic within a network 4.Question 4Fill in the blank: A _____ is a manual that provides details about operational actions.1 pointchecklistdirectoryplaybookcase history

Fill in the blank: Security teams can use _____ to examine network logs and identify events of interest. 1 pointsecurity information and event management (SIEM) toolsnetwork segmentationport filteringbaseline configuration

Fill in the blank: Security professionals can use _____ to interact with and request information from a database.1 pointSQLlogsplaybooksnetwork protocol analyzers (packet sniffers)