Consider what activities define a security team focused on defense and threat response rather than research or training.
Think about the ongoing process of watching systems, detecting problems quickly, and acting to contain and recover from incidents.
Identify the role that emphasizes continuous monitoring and rapid response to active security threats and compromises.
Recall that blue team work centers on defending the organization rather than attacking or training others.
Look for the description involving ongoing monitoring, detection, response, and recovery activities.
Rule out choices that describe red team simulations, research roles, or awareness training.

Log management: The skills needed for success