Question 120
Main Page
You want to assess how your SIEM is performing over time. Which method is appropriate?
A. Increase disk size
B. Use SIEM-generated metrics like false positive rates
C. Disable older use cases
D. Install more agents
Answer: Use SIEM-generated metrics like false positive rates
Monitoring false positive/negative rates and tuning accordingly helps maintain and improve SIEM performance.