Câu 23: 312-39V2: Certified SOC Analyst (CSA) v2

An organization with a complex IT infrastructure is planning to implement a SIEM solution to improve its threat detection and response capabilities. Due to the scale and complexity of its systems, the organization opts for a phased deployment approach to ensure a smooth implementation and reduce potential risks. Which of the following should be the first phase in their SIEM deployment strategy?

1. A. Configure security analytics to identify potential threats
2. B. Set up the log management component before deploying the SIEM component — đáp án hiện tại
3. C. Implement User and Entity Behavior Analytics (UEBA)
4. D. Automate incident response processes