What is the primary purpose of using building blocks in SIEM rule configuration?

exams C1000-175 C1000-175 exam 0 Comments

What is the primary purpose of using building blocks in SIEM rule configuration?
A . To serve as standalone alert conditions
B . To provide reusable components for complex rule creation
C . To increase the processing time of rules
D . To act as the primary alerting mechanism

Answer: B