Cisco Exam 200-201 Topic 1 Question 82 Discussion

Actual exam question for Cisco's 200-201 exam

Question #: 82
Topic #: 1

What is a difference between SI EM and SOAR security systems?

ASOAR ingests numerous types of logs and event data infrastructure components and SIEM can fetch data from endpoint security software and external threat intelligence feeds

BSOAR collects and stores security data at a central point and then converts it into actionable intelligence, and SIEM enables SOC teams to automate and orchestrate manual tasks

CSIEM raises alerts in the event of detecting any suspicious activity, and SOAR automates investigation path workflows and reduces time spent on alerts

DSIEM combines data collecting, standardization, case management, and analytics for a defense-in-depth concept, and SOAR collects security data antivirus logs, firewall logs, and hashes of downloaded files

Show Suggested Answer

Suggested Answer: C

by Paz at Mar 20, 2024, 08:44 AM

Limited Time Offer

25%

Off

Get Premium 200-201 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

My

5 months ago

And SIEM combines data collecting, standardization, case management, and analytics for a defense-in-depth concept.

upvoted 0 times

...

Macy

5 months ago

That's true, Roslyn. SOAR automates investigation path workflows and reduces time spent on alerts.

upvoted 0 times

...

Roslyn

6 months ago

But I believe SIEM raises alerts in case of detecting suspicious activity.

upvoted 0 times

...

My

6 months ago

I agree with Macy, SOAR collects and stores security data at a central point and converts it into actionable intelligence.

upvoted 0 times

...

Macy

6 months ago

I think the main difference is that SOAR ingests various types of logs and event data infrastructure components.

upvoted 0 times

...

Cecil

6 months ago

Definitely, it's important for security teams to understand the differences and choose the right tool for their requirements.

upvoted 0 times

...

Delpha

6 months ago

I think both have their own strengths and can be useful depending on the specific needs of the organization.

upvoted 0 times

...

Izetta

7 months ago

That's true, SIEM is more focused on alerting while SOAR is more about automation and reducing time spent on alerts.

upvoted 0 times

...

Oren

7 months ago

On the other hand, SIEM raises alerts in case of any suspicious activity, while SOAR automates investigation path workflows.

upvoted 0 times

...

Carissa

7 months ago

I agree with that, SOAR certainly has a wider range of data it can handle.

upvoted 0 times

...

Lezlie

7 months ago

I think the main difference is that SOAR ingests numerous types of logs and event data infrastructure components, while SIEM can fetch data from endpoint security software and external threat intelligence feeds.

upvoted 0 times

...

Rodrigo

8 months ago

Exactly! I was leaning towards B as well. Plus, option C just sounds wrong - SIEM systems are the ones that raise alerts, not SOAR.

upvoted 0 times

...

Arletta

8 months ago

That makes sense to me. SOAR is about the collection and analysis, while SIEM is about the automation and response. We need both in a comprehensive security strategy.

upvoted 0 times

...

Lawrence

8 months ago

Haha, yeah, that one was a bit of a head-scratcher. I can just picture a SOAR system being like, 'Nah, I'm not going to alert you to that suspicious activity. I'll just handle it myself!'

upvoted 0 times

Chan

8 months ago

Haha, yeah, that one was a bit of a head-scratcher. I can just picture a SOAR system being like, 'Nah, I'm not going to alert you to that suspicious activity. I'll just handle it myself!'

upvoted 0 times

...

Mariko

8 months ago

A) SOAR ingests numerous types of logs and event data infrastructure components and SIEM can fetch data from endpoint security software and external threat intelligence feeds

upvoted 0 times

...

Felix

8 months ago

C) SIEM raises alerts in the event of detecting any suspicious activity, and SOAR automates investigation path workflows and reduces time spent on alerts

upvoted 0 times

...

Gracia

8 months ago

A) SOAR ingests numerous types of logs and event data infrastructure components and SIEM can fetch data from endpoint security software and external threat intelligence feeds

upvoted 0 times

...