What specific type of tools can assist teams by identifying attacks and indicators of compromise by collecting,aggregating,and correlating log and alert data from routers,firewalls,IDS/IPS,endpoint logs,Web filtering devices,and other security tools?
A) IOS
B) DMZ
C) IDS
D) SIEM

Question

Quizplus · Accepted Answer

SIEM (Security Information and Event Management) tools can assist teams in identifying attacks and indicators of compromise by collecting, aggregating, and correlating log and alert data from various security tools including routers, firewalls, IDS/IPS, endpoint logs, and web filtering devices. SIEM tools provide a centralized view of all network activity and can detect patterns that may indicate an attack or breach.

What Specific Type of Tools Can Assist Teams by Identifying