Câu 7: 312-39V2: Certified SOC Analyst (CSA) v2

A large financial institution receives thousands of security logs daily from firewalls, IDS systems, and user authentication platforms. The SOC team uses an AI-driven SIEM system with NLP capabilities to streamline threat detection. This approach enables faster response times, reduces manual rule creation, and helps detect advanced threats that traditional systems might overlook. Which of the following BEST illustrates the advantage of NLP in SIEM?

1. A. Enables analysis of text-based data from logs and communications to detect threats — đáp án hiện tại
2. B. Eliminates the need for data normalization and correlation in SIEM systems
3. C. Allows security analysts to write SIEM rules using complex programming languages
4. D. Simplifies infrastructure management by reducing hardware dependencies