Which of the following enables the ability to receive a consolidated report from different devices on the network?
Choose an answer
Tap an option to check your answer.
Correct answer: SIEM.
Why this is the answer
A Security Information and Event Management (SIEM) system is designed to collect, aggregate, and analyze security-related data from various sources across an organization's IT infrastructure. This includes logs from firewalls, intrusion prevention systems, servers, and other network devices. By centralizing this data, SIEM provides a consolidated view and generates reports that help identify security incidents, compliance issues, and potential threats. An Intrusion Prevention System (IPS) primarily focuses on detecting and preventing network intrusions. Data Loss Prevention (DLP) systems monitor and protect sensitive data from unauthorized exfiltration. A Firewall controls incoming and outgoing network traffic based on predefined security rules. While these devices generate logs, they do not inherently provide the consolidated reporting capability that a SIEM offers.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed