Impact of Security Technologies & Security Monitoring Essay Question

Scenario: Security monitoring has detected the presence of a remote access tool classified as commodity malware on an employee workstation.

Research the questions below and write your answers in a paper.

Does this allow you to discount the possibility that an Advanced Persistent Threat (APT) is involved in the attack? Why or why not?
How do security technologies affect the ability to monitor common network protocols?
Name three types of SIEMs (Security Information Event Management) used on networks to detect threats early, analyze log and event data, and determine appropriate threat responses.
Provide a brief conclusion addressing the value of security monitoring and the use of event management systems.