Which of the following would be BEST for continually monitoring and alerting of possible attacks on a network?
A) Conducting daily vulnerability scans
B) Performing daily port scans
C) Utilizing a protocol analyzer
D) Using a SIEM
E) Reviewing daily logs

Question

Quizplus · Accepted Answer

A SIEM (Security Information and Event Management) system is designed to provide real-time monitoring, alerting, and analysis of security events across a network, making it the best choice for continually monitoring and alerting of possible attacks.

Which of the Following Would Be BEST for Continually Monitoring