Verifying that malware definitions are up to date is a form of:

Storing logs offsite for disaster recovery is:

Capturing detailed application errors in real time uses:

Automating rule-based log inspection often relies on:

Reducing noise before escalating events is part of:

Identifying unauthorized configuration changes uses:

Checking file integrity on servers is best done with:

Ensuring logs conform to a standard format uses:

Finding missing patches and CVEs uses a:

Analyzing network traffic flows for anomalies is:

Receiving notifications of device failures uses:

Preventing confidential data from leaving endpoints uses:

Detecting and removing malware in real time is done by:

Centralizing event correlation and dashboards is a function of:

Monitoring without local software uses which method?

Software installed on endpoints to collect data is called:

Pre-defined configuration checks are provided by:

Which protocol standardizes automated security checks?

Reducing false positives by adjusting rules is:

Automatically isolating a compromised host is an example of:

Storing old logs for compliance is called:

Summarizing security events for executives is:

Periodically examining systems for missing patches is known as:

Notifying staff immediately when a threshold is crossed describes:

Aggregating logs from servers, firewalls and endpoints is called: