WGU Courses and Certificates Cybersecurity-Architecture-and-Engineering Question # 62 Topic 7 Discussion

ASecurity Information and Event Management (SIEM)system collects, normalizes, and correlates logs and security events from various devices across both on-premises and cloud environments. It enables centralizedthreat detection,incident response, andcompliance monitoring.

NIST SP 800-137 (Information Security Continuous Monitoring):

“SIEMs are essential for real-time incident detection and response by aggregating and analyzing logs from disparate systems.”

Hybrid cloud environmentsmake log correlation complex, and SIEMs are uniquely suited to bridge cloud and on-prem infrastructure.

????WGU Course Alignment:

Domain:Security Operations and Monitoring

Topic:Use SIEM for centralized monitoring and event correlation in hybrid architectures