A financial institution's SIEM is generating a high number of false positives, causing alert fatigue among SOC analysts. To reduce this burden and improve threat detection accuracy, the organization integrates AI capabilities into the SIEM. After implementation, the SOC team observes a significant decrease in redundant alerts, along with faster detection of genuine threats. Which AI capability contributed to this improvement?

• A. Data integration enhancement
• B. Dynamic rule optimization
• C. Rule validation and testing
• D. Automated rule generation

Jason, a SOC Analyst with Maximus Tech, was investigating Cisco ASA Firewall logs and came across the following log entry:
May 06 2018 21:27:27 asa 1: %ASA -5 - 11008: User 'enable_15' executed the 'configure term' command What does the security level in the above log indicates?

• A. Informational message
• B. Warning condition message
• C. Critical condition message
• D. Normal but significant message

Jackson & Co., a mid-sized law firm, is concerned about web-based cyber threats. The IT team implements a solution that serves as an intermediary for all HTTP and HTTPS requests. This allows the SOC to inspect, filter, and control web traffic to detect and block malicious websites, phishing attempts, and other online threats before they reach users. Which containment method is the organization using to gain visibility and control over web traffic?

• A. Whitelisting
• B. Web content filtering
• C. Proxy servers
• D. Blacklisting

Where will you find the reputation IP database, if you want to monitor traffic from known bad IP reputation using OSSIM SIEM?

• A. /etc/siem/ossim/server/reputation.data
• B. /etc/ossim/siem/server/reputation/data
• C. /etc/ossim/server/reputation.data
• D. /etc/ossim/reputation