712-50 practice question 26 of 35

You currently cannot provide for 24/7 coverage of your security monitoring and incident response duties and your company is resistant to the idea of adding more full-time employees to the payroll. Which combination of solutions would help to provide the coverage needed without the addition of more dedicated staff? (choose the best answer):

Full set: 493 questions
Answer options
A: Deploy a SEIM solution and have current staff review incidents first thing in the morning
B: Contract with a managed security provider and have current staff on recall for incident response Correct answer
C: Configure your syslog to send SMS messages to current staff when target events are triggered
D: Employ an assumption of breach protocol and defend only essential information resources
Correct Answer:
B. Contract with a managed security provider and have current staff on recall for incident response
Explanation

Contracting with a managed security service provider (MSSP) offers 24/7 monitoring and incident detection capabilities without adding full-time staff. Current staff can remain on-call for critical incident response, ensuring coverage without increasing headcount. Why Other Options Are Incorrect:
A . Deploy a SEIM solution: While useful, a SEIM requires constant monitoring to be effective. Simply reviewing incidents in the morning is insufficient.
C . Configure syslog to send SMS messages: This approach lacks comprehensive monitoring and is reactive rather than proactive.
D . Employ an assumption of breach protocol: This does not address the need for consistent monitoring and is not a direct solution to coverage gaps. EC-Council CISO Reference: The program highlights the value of MSSPs in enhancing organizational security capabilities while managing costs. =========================

Scroll to Top