medium
Single Answer
0Derek’s organization has recently set up a notification process that sends a text message to system administrators when security exception log events occur on the systems they are responsible for. Unfortunately, Derek and his team have received dozens of alerts at all times of the day due to the log event happening for failed logins when users type their passwords incorrectly. What should Derek and his team do next to help with this?
Answer Options
A
Set alert thresholds.
B
Engage in alert tuning.
C
Disable the alerts.
D
Move the alerts to email.
Correct Answer: B
Explanation
Derek’s team needs to carefully consider what alerts should be sent, why, and how often. That will require alert tuning. Simply setting alert thresholds may miss critical events, disabling alerts will not achieve the goal of enabling this type of notification, and moving the alerts to email will typically result in a less timely response.