Week 3-2

Question 1

T/F - Legacy SIEM is easy to maintain and operate

Answer 1

False. It’s difficult

Question 2

T/F - Legacy SIEM has many FP/FN alerts

Answer 2

True

Question 3

T/F - Legacy SIEM is scalable

Answer 3

False

Question 4

T/F - Legacy SIEM lacks data flexibility

Answer 4

True

Question 5

Modern SIEM allows for ___-____ ___________ and quick _________ _________, while Legacy SIEM typically consists of hardware and software deployed __-________

Answer 5

real-time monitoring; incident response; on-premises

Question 6

T/F - Current generation SIEM can anticipate threat occurrences

Answer 6

False. Only Next-Gen SIEM can anticipate threat occurences

Question 7

T/F - Next-gen SIEM uses sophisticated quantitative methods

Answer 7

True

Question 8

Why is Next-gen SIEM considered “flexible”?

Answer 8

Can be deployed On-premises, in the cloud, or in a hybrid environment