CompTIA Security+ SY0-701 Practice Question

A system that offers real-time analysis and automated response to security alerts from applications and network hardware is crucial for organizations looking to monitor their IT infrastructure effectively and streamline their incident response processes. While antivirus software is essential for scanning and removing known malware, it does not offer the capability of central event log aggregation or incident response. A system for preventing data mishandling focuses on the secure handling and transfer of sensitive information but does not encompass broad monitoring or automated incident response. Although enhanced firewall rules strengthen the network perimeter defense, they do not provide holistic security event management or the capability to automate responses to anomalies detected across the network.