A recent security audit is reporting several unsuccessful login attempts being repeated at specific times during the day on an Internet facing authentication server. No alerts have been generated by the security information and event management (SIEM) system. What PRIMARY action should be taken to improve SIEM performance?

Question

samresh mahata · Accepted Answer

Audit firewall logs to identify the source of login attempts

samresh mahata · Answer

Implement role-based system monitoring

samresh mahata · Answer

Enhance logging detail

samresh mahata · Answer

Confirm alarm thresholds

Question list

List of questions

Question 1

(1)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 1210 - CISSP discussion

Suggested answer: B

0 comments