Question 1

Which of the following ES features would a security analyst use while investigating a network anomaly notable?

Options :

A : Correlation editor.

B : Key indicator search.

C : Threat download dashboard.

D : Protocol intelligence dashboard.

Answer: D

Question 2

When investigating, what is the best way to store a newly-found IOC?

Options :

A : Paste it into Notepad.

B : Click the ''Add IOC'' button.

C : Click the ''Add Artifact'' button.

D : Add it in a text note to the investigation.

Answer: B

Question 3

What kind of value is in the red box in this picture?

Options :

A : A risk score.

B : A source ranking.

C : An event priority.

D : An IP address rating.

Answer: A

Question 4

Which settings indicated that the correlation search will be executed as new events are indexed?

Options :

A : Always-On

B : Real-Time

C : Scheduled

D : Continuous

Answer: C

Question 5

Glass tables can display static images and text, the results of ad-hoc searches, and which of the following objects?

Options :

A : Lookup searches.

B : Summarized data.

C : Security metrics.

D : Metrics store searches.

Answer: C

Free SPLK-3001 Mock Exam – Practice Online Confidently