Which of the following would BEST allow a security analyst to have this ability?

A security analyst needs to be able to search and correlate logs from multiple sources in a single tool.

Which of the following would BEST allow a security analyst to have this ability?
A . SOAR
B. SIEM
C. Log collectors
D. Network-attached storage

View Answer

Answer: B

Explanation:

SIEM event correlation is an essential part of any SIEM solution. It aggregates and analyzes log data from across your network applications, systems, and devices, making it possible to discover security threats and malicious patterns of behaviors that otherwise go unnoticed and can lead to compromise or data loss.