Câu 60: 312-39V2: Certified SOC Analyst (CSA) v2

A financial services company is implementing a SIEM solution to enhance its cybersecurity posture. Despite deploying the SIEM, the security team notices that it fails to detect known attacks or suspicious activities. Although the system generates reports, the team struggles to interpret them effectively. After investigation, they discovered that critical logs from firewalls, intrusion detection systems (IDS), and endpoint devices are not reaching the SIEM. What is the reason the SIEM solution is not functioning as expected?

1. A. Improper configuration or design of the SIEM deployment architecture — đáp án hiện tại
2. B. Delays in log collection and analysis due to system performance issues
3. C. Difficulty handling the volume of collected log data
4. D. Lack of understanding of SIEM features and capabilities