Câu 9: 312-39V2: Certified SOC Analyst (CSA) v2

A financial institution suspects an insider threat due to unauthorized access attempts on restricted databases. However, the SIEM alerts lack sufficient information to differentiate between legitimate and malicious access. The SOC manager recommends integrating contextual data to improve detection. Which contextual data source is required to be integrated in this scenario?

1. A. User context from HR systems — đáp án hiện tại
2. B. Vulnerability context
3. C. Location and physical context from GPS sensors
4. D. Threat context from external threat intelligence feeds