Continuous Security Monitoring Strategies CSE Practice Questions (Page 11)

Questions 51–52

1. 51application · medium

   A company's cloud environment generates a high volume of security alerts. The incident response team is overwhelmed and missing critical alerts. They want to improve their triage process. Which approach best integrates continuous monitoring with incident response?

   • AIncrease the alert threshold so only the most severe alerts are generated.
   • BDisable all alerts and have analysts manually review logs each day.
   • CAutomatically escalate alerts that match known critical patterns to the on-call responder, and route lower-severity alerts to a queue for daily review.
   • DSend every alert to the entire security team via email to ensure no one misses anything.
   Reveal Solution Discussion Select an answer first
2. 52foundation · easy

   Which type of monitoring data is most useful for detecting a sudden spike in CPU utilization on a virtual machine?

   • AMetrics
   • BAudit logs
   • CEvent logs
   • DConfiguration files
   Reveal Solution Discussion Select an answer first