A global organization wants to manage all endpoint and user telemetry. The organization also needs to differentiate this data based on which office it is correlated to. Which of the following strategies best aligns with this goal?
Correct Answer: B
Comprehensive and Detailed Explanation:
Managing telemetry and differentiating it by office requires a way to categorize data. Let's evaluate:
* A. Sensor placement:Useful for data collection but doesn't inherently differentiate by office.
* B. Data labeling:Assigns metadata (e.g., office location) to telemetry, enabling differentiation. This aligns with CAS-005's focus on data management for security operations.
* C. Continuous monitoring:Ensures ongoing data collection but doesn't address differentiation.
Reference:CompTIA SecurityX (CAS-005) objectives, Domain 2: Security Operations, emphasizing telemetry management.