Which of the following would be considered an incident if reported by a security information and event management (SIEM) system?

Question

Marie Joyce Candice Dancel · Accepted Answer

A web resource has reported a 404 error.

Marie Joyce Candice Dancel · Answer

An administrator is logging in on a server through a virtual private network (VPN).

Marie Joyce Candice Dancel · Answer

A log source has stopped sending data.

Marie Joyce Candice Dancel · Answer

A firewall logs a connection between a client on the Internet and a web server using Transmission Control Protocol (TCP) on port 80.

List of questions