Which of the following is the primary use case for this scenario?

A company is implementing a new SIEM to log and send alerts whenever malicious activity is blocked by its antivirus and web content filters.

Which of the following is the primary use case for this scenario?
A . Implementation of preventive controls
B . Implementation of detective controls
C . Implementation of deterrent controls
D . Implementation of corrective controls

View Answer

Answer: B

Explanation:

A Security Information and Event Management (SIEM) system is a tool that collects and analyzes security-related data from various sources to detect and respond to security incidents.

Reference: CompTIA Security+ Study Guide 601, Chapter 5