Microsoft Cybersecurity Architect Expert SC-100
Comments
Loading comments...
Ultimate access to all questions.
Your organization is planning to implement a comprehensive security solution that includes extended detection and response (XDR) and security information and event management (SIEM) to protect a hybrid environment. The solution must efficiently detect, investigate, and respond to security incidents while considering cost, compliance, and scalability. You are tasked with designing this solution. Which approach should you take to ensure it meets these requirements? (Choose one option)
A
Implement a standalone SIEM solution for log collection and analysis, relying on manual processes for threat detection and response, to minimize costs.
B
Deploy an XDR solution exclusively for automated threat detection and response, without integrating any SIEM capabilities, to simplify the architecture.
C
Use SIEM for real-time monitoring and alerting, and supplement it with an XDR solution for advanced threat detection and automated response, ensuring comprehensive coverage.
D
Integrate an XDR solution with a SIEM platform, where the XDR provides real-time threat detection and response, and the SIEM offers long-term data storage, analysis, and compliance reporting.