👏🏽👏🏽

How did you feel in the room? What question number did you end on?

@Rakesh Gupta 👏

Nice! 👍🏽

Thanks everyone. Wish I could have stayed til the end of the video but I was pulled away. Some bits of advice that I wish I could have added to what I said in the video: 1. This is a marathon. One thing this process has taught me is that sometimes you have to slow down to go faster: If you rush through content or study while distracted, you're going to make mistakes or miss topics and will ended up having to double back (I did this a lot). If you really hunker down and give yourself to this exam, especially in the last month before taking it, it will pay dividends. I'm not going to take credit for this statement because various instructors have said it in different ways on different mediums. 2. This study group is just that. A complementary source of practice for what your main studies should be. Don't go into this thinking that they will provide you with all the instruction you need to pass. No, no way. That being said, in order to make the most of the group, you have to speak up in groups, even if you feel like too much time has been covered on a topic. Be greedy. I justify this because your question might be the one that finally makes a topic click for another student. I know I've had moments like that in groups and the practice exams. Sometimes when some asks the same question for the third time, sometimes some answering someone else's question in a practice exam. 3. Be realistic. This means being honest with yourself on how many hours you're really studying per week or if you can look at your phone a bit less. Use exams to gauge how well you're doing. Being realistic also means being kind to yourself. Don't beat yourself up because you're not doing well on exams, that's okay, it's part of the process. Make note of improvement and celebrate that. You wouldn't berate your friend for not doing well on a practice exam, so be kind to yourself. Okay this has become too long. Thanks again everyone. Study hard and good luck. www.linkedin.com/in/wilfred-bado

@Sara M Practically yes. But considering they want to be obtuse they left that out as a SIEM is how you would review logs. This question got me too. I thought it was Motion Detectors.

Overall explanation The correct answer: Audit logs. Audit logs record events as they happen and can then be analyzed later to identify significant events or anomalies. They also meet the requirement of being passive, as they typically don't require active management until an event of interest is detected. The incorrect answers: Line monitoring: This typically involves active management and immediate response to issues, so it doesn't meet Nayeli's requirements for a passive, after-the-fact analysis strategy. Motion detectors: While motion detectors are indeed passive, they don't typically record detailed information that allows for in-depth analysis after the fact. Security guard and dog: This security measure is very active and immediate; it doesn't facilitate in-depth, after-the-fact analysis.