CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ85

Technology and Security

An organization wants to use artificial intelligence (AI) to help identify and analyze the root causes of data breaches that involve multiple systems. Which option is BEST suited to this purpose?

  • A Intrusion detection and prevention systems
  • B Security information and event management (SIEM) system
  • C Application event logging system
  • D Database activity monitoring system
Explanation

A security information and event management (SIEM) system aggregates and correlates security events from multiple systems, enabling AI/ML-assisted investigation of incidents and their root causes. Microsoft Sentinel documentation describes SIEM investigation tools that correlate relevant data and entities to identify the root cause of a potential security threat.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!