Which of the following in the incident response process is the BEST approach to improve the speed of the identification
Posted: Mon May 30, 2022 5:46 pm
Which of the following in the incident response process is the BEST
approach to improve the speed of the identification phase?
A Activate verbose logging in all critical assets.
B Tune monitoring in order to reduce false positive rates.
C Redirect all events to multiple syslog servers.
D Increase the number of sensors present on the environment
approach to improve the speed of the identification phase?
A Activate verbose logging in all critical assets.
B Tune monitoring in order to reduce false positive rates.
C Redirect all events to multiple syslog servers.
D Increase the number of sensors present on the environment