A security information and event management $($SIEM$)$ service performs which of the following functions? $($D$3,$ L$7\mathrm{.}1)$

Configures software for security policies and procedures

Aggregates logs from security devices and application servers looking for suspicious activity

Documents incident handling and communication

Matches user system authorization with physical access permissions