Study. uk . com
  1. Home
  2. All questions
  3. Question 719

CISM study material · question 719 of 1000

Which two advantages does NIST attribute to a service provider in detecting malicious activity? Choose two.

  1. It may use knowledge of one customer's incident to proactively prevent similar incidents at others
  2. It can correlate events across its customers and so may spot activity sooner
  3. It is entirely immune from all of the threats that affect each one of its own customers
  4. It has the legal authority to compel disclosure from those attackers who have chosen to target its own customers
Show the answer

Answer: B. It can correlate events across its customers and so may spot activity sooner
A. It may use knowledge of one customer's incident to proactively prevent similar incidents at others

SP 800-61r3 credits a provider with seeing across its customer base: correlation there can surface malicious activity earlier, and what one customer's incident teaches can be turned on preventing the same thing elsewhere.

Source: NIST SP 800-61 Rev. 3 (NIST) — Sec. 2.2 Roles and Responsibilities

Challenge yourself on this topic → Study as cards