312-39V2: Certified SOC Analyst v2

Question

An organization plans to implement a SIEM deployment architecture. However, it can perform only log collection, and an MSSP must manage all other SIEM functions. Which SIEM deployment architecture will the organization use?

Explanation

A self-hosted, MSSP-managed SIEM model keeps log collection with the organization while the managed security service provider operates the remaining SIEM functions, such as aggregation, correlation, analysis, alerting, and dashboards.

Learn more

SIEM Architecture: Technology, Process and Data

312-39V2: Certified SOC Analyst v2

AstroTutor

Notes

Readiness

QuestionQ147

Community Discussion