A.Ignoring software updates for critical systems

B.Using application whitelisting to restrict executable files

C.Deploying endpoint detection and response (EDR) tools to detect and respond to malicious activity

D.Disabling all logging to reduce data storage needs

A.It transforms the SIEM into an autonomous AI entity.

B.It allows the SOC to broadcast threat alerts on television.

C.It enables correlation of external threat data with internal event data for enhanced analysis.

D.It provides a direct marketing channel to potential clients.

A.Developing offensive cyber capabilities to retaliate against attackers

B.Enhancing the visibility of the organization's security landscape

C.By focusing only on external threats and ignoring insider threats

D.Only responding to incidents after they have been escalated to senior management

A.SMB

B.FTP

C.ICMP

D.DHCP

A.Because the threat landscape and organizational priorities are constantly changing

B.To ensure that the process can be the same for every type of organization

C.To comply with international laws only

D.So that the process becomes less predictable to attackers