Which role helps filter out false positives by configuring intrusion detection and protection systems, as well as performing ongoing monitoring and analysis?

Which role helps filter out false positives by configuring intrusion detection and protection systems, as well as performing ongoing monitoring and analysis?

• A. Threat Researchers
• B. Checklist
• C. Security Analyst
• D. Walkthrough

Answer: (C)

Tuning intrusion detection and protection systems and performing continuous monitoring and analysis is exactly what a security analyst does. This role involves configuring detection engines, adjusting rules and thresholds, and integrating data sources so alerts are meaningful rather than noise. By triaging and validating alerts through ongoing analysis, the security analyst filters out false positives and focuses attention on genuine threats, coordinating responses as needed. Threat researchers study and understand new threats, a checklist is a procedural item, and a walkthrough is a process or review method, but they don’t encompass the day-to-day monitoring and tuning responsibilities described.

Tuning intrusion detection and protection systems and performing continuous monitoring and analysis is exactly what a security analyst does. This role involves configuring detection engines, adjusting rules and thresholds, and integrating data sources so alerts are meaningful rather than noise. By triaging and validating alerts through ongoing analysis, the security analyst filters out false positives and focuses attention on genuine threats, coordinating responses as needed. Threat researchers study and understand new threats, a checklist is a procedural item, and a walkthrough is a process or review method, but they don’t encompass the day-to-day monitoring and tuning responsibilities described.