CY0-001: CompTIA SecAI+

Question

A team of security engineers is building a security incident and event management (SIEM) system that will:

Be capable of ingesting data from multiple structured and unstructured sources.
Include a chatbot integrated with a large language model (LLM) for security analyst interaction.
Deliver insights from SIEM alert data.

Which of the following techniques should the security engineers consider before collecting data from the respective sources?

Explanation

Cleansing prepares source data for reliable ingestion and analysis by removing or correcting noise, errors, duplicates, inconsistencies, and irrelevant content. This is especially important when combining structured and unstructured sources for an LLM-enabled SIEM. AWS guidance identifies data preparation and cleaning as an essential data-lifecycle stage and describes removing noise and errors before model ingestion.

Learn more

CY0-001: CompTIA SecAI+

AstroTutor

Notes

Readiness

QuestionQ14

Community Discussion