Question 56
Main Page
Your SecOps team finds indicators of compromise but lacks context. What should they improve?
A. Endpoint encryption
B. Event correlation and threat intelligence integration
C. Daily backups
D. Anti-spam filters
Answer: Event correlation and threat intelligence integration
Context comes from correlated event data and external threat intelligence, enabling better incident detection.