What is the primary difference between event correlation and anomaly detection?
Practise this CISM Security Mgr Practice 202 question free, then download the PDF, watch the video walkthrough, or unlock timed mock exams for the full web bank.
AEvent correlation identifies deviations from a standard behavior. Anomaly detection links multiple related events to identify potential security incidents.
BAnomaly detection relies on predefined patterns and rules to identify incidents. Event correlation identifies deviations from normal behavior to find potential threats.
CEvent correlation relies on a predefined baseline and compares it to current behavior. Anomaly detection links multiple related events based on predefined rules.
DEvent correlation links multiple related events to identify potential security incidents. Anomaly detection identifies deviations from a standard behavior.
✓ Correct answer: D. Event correlation links multiple related events to identify potential security incidents. Anomaly detection identifies deviations from a standard behavior.Answer: Event correlation links multiple related events to identify potential security incidents. Anomaly detection identifies deviations from a standard behavior. The primary difference between event correlation and anomaly detection is that event correlation links multiple related events based on predefined patterns or rules, while anomaly detection identifies deviations from normal behavior. Event correlation relies on finding relationships between different security events, potentially indicating an incident. Anomaly detection, on the other hand, looks for unusual behavior that deviates from established baselines, indicating potential unknown threats.
Keep practising. Use the free CISM Security Mgr Practice 202 PDF, watch the YouTube walkthrough, or unlock all 10 web questions with timed mock exams.
Free practice here. Timed mocks when you are ready.
Study the CISM Security Mgr Practice 202 free question explanations, download the PDF, then unlock timed mock exams on the web when you want exam-day practice.
Theory