Question 1

Which settings indicated that the correlation search will be executed as new events are indexed?

Options :

A : Always-On

B : Real-Time

C : Scheduled

D : Continuous

Answer: C

Question 2

Where is detailed information about identities stored?

Options :

A : The Identity Investigator index.

B : The Access Anomalies collection.

C : The User Activity index.

D : The Identity Lookup CSV file.

Answer: C

Question 3

When creating custom correlation searches, what format is used to embed field values in the title, description, and drill-down fields of a notable event?

Options :

A : $fieldname$

B : ''fieldname''

C : %fieldname%

D : _fieldname_

Answer: A

Question 4

What kind of value is in the red box in this picture?

Other-Image-8779efe69-e23f-4b31-81f0-88a5b1c6e4e7

Options :

A : A risk score.

B : A source ranking.

C : An event priority.

D : An IP address rating.

Answer: A

Question 5

Glass tables can display static images and text, the results of ad-hoc searches, and which of the following objects?

Options :

A : Lookup searches.

B : Summarized data.

C : Security metrics.

D : Metrics store searches.

Answer: C

Free SPLK-3001 Mock Exam – Practice Online Confidently

Buying Options: