What are three characteristics of SIEM? (Choose three.)
- examines logs and events from systems and applications to detect security threats
- Microsoft port scanning tool designed for Windows
- uses penetration testing to determine most network vulnerabilities
- consolidates duplicate event data to minimize the volume of gathered data
- provides real-time reporting for short-term security event analysis
- can be implemented as software or as a service
Answers Explanation & Hints: Security Information Event Management (SIEM) is a technology that provides real-time reporting and long-term analysis of security events. SIEM provides the ability to search logs and events from disparate systems or applications to detect threats. SIEM aggregates duplicate events to reduce the volume of event data. SIEM can be implemented as software or as a managed.service. SuperScan is a Microsoft Windows port scanning tool that runs on most versions of Windows.Tools, such as Nmap and SuperScan, can provide effective penetration testing on a network and determine network vulnerabilities while helping to anticipate possible attack mechanisms.