Question 17
Main Page
What’s the most likely cause of SIEM producing irrelevant alerts?
A. Low system RAM
B. Inadequate use case definition and event correlation
C. Too many asset groups defined
D. Over-reliance on encryption
Answer: Inadequate use case definition and event correlation
Poorly defined use cases and weak correlation logic lead to alert fatigue and reduce SIEM effectiveness.