Which of the following BST describes the result the security learn hopes to accomplish by adding these sources?

A security learn implemented a SCM as part for its security-monitoring program there is a requirement to integrate a number of sources Into the SIEM to provide better context relative to the events being processed.

Which of the following BST describes the result the security learn hopes to accomplish by adding these sources?
A . Data enrichment
B . Continuous integration
C . Machine learning
D . Workflow orchestration

View Answer

Answer: A

Explanation:

Data enrichment is the result that the security team hopes to accomplish by adding these sources to the SIEM. Data enrichment is a process that enhances, refines, or otherwise improves raw data by adding context, meaning, or value to it. Data enrichment can help security analysts gain more insights from the events processed by the SIEM, such as identifying the root cause, severity, or impact of an incident3. Data enrichment can also help security analysts correlate events from different sources and reduce false positives or negatives.