Which two tool categories does the Community Profile name for continuously monitoring log events for known malicious and suspicious activity? Choose two.

Question

Answer 1

Show the answer

Answer: B. Security information and event management
C. Security orchestration, automation and response

SP 800-61r3 names security information and event management alongside security orchestration, automation and response as the tooling for watching log events for known malicious and suspicious activity.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 DE.AE-02.R1