Which of the following sets of controls should allow an investigation if an attack is not blocked by preventive controls or detected by monitoring?

Question

Lance Herbst · Accepted Answer

Security event alert triage done by analysts using a Security Information and Event Management (SIEM) system

Lance Herbst · Answer

Logging and audit trail controls to enable forensic analysis

Lance Herbst · Answer

Security incident response lessons learned procedures

Lance Herbst · Answer

Transactional controls focused on fraud prevention

List of questions