Exam N10-009 Topic 2 Question 59 Discussion

Actual exam question for CompTIA's N10-009 exam
Question #: 59
Topic #: 2
An organization wants better network visibility. The organization's requirements include:
Multivendor/OS-monitoring capabilities
Real-time collection
Data correlation
Which of the following meets these requirements?

Suggested Answer: B Vote an answer

A Security Information and Event Management (SIEM) system collects, correlates, and analyzes logs from multiple sources in real-time, providing enhanced visibility across multivendor environments.
Breakdown of Options:
A: SNMP - SNMP is used for network device monitoring, but it lacks real-time correlation across multiple vendors.
B: SIEM - Correct answer. SIEM aggregates, analyzes, and correlates logs from multiple sources, providing real-time visibility.
C: Nmap - Nmap is a network scanning tool used for mapping hosts and detecting open ports but does not provide log correlation.
D: Syslog - Syslog collects logs but does not correlate or analyze them in real-time.
Reference:
CompTIA Network+ (N10-009) Official Study Guide - Domain 3.3: Explain network security concepts.
NIST Special Publication 800-92: Guide to Computer Security Log Management

by Vito at Aug 10, 2025, 05:49 AM

Limited Time Offer

15%

Off

Get Premium N10-009 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10