Question 1

How can Splunk Security Essentials assist in assessing data sources?

Options :

A : By encrypting sensitive data to prevent unauthorized access

B : By integrating with cloud-based security platforms

C : By providing predefined searches and dashboards for analyzing data sources

D : By generating automated incident reports

Answer: C

Question 2

The Lockheed Martin Cyber Kill Chain® breaks an attack lifecycle into several stages. A threat actor modified the registry on a compromised Windows system to ensure that their malware would automatically run at boot time. Into which phase of the Kill Chain would this fall?

Options :

A : Act on Objectives

B : Exploitation

C : Delivery

D : Installation

Answer: D

Question 3

How does Splunk Enterprise Security utilize risk scores to prioritize security alerts?

Options :

A : By ignoring risk scores and treating all alerts equally

B : By setting a fixed risk score threshold for all alerts

C : By randomizing risk scores for each alert

D : By assigning higher scores to alerts with potential impact and likelihood of occurrence

Answer: D

Question 4

What are common tiers of Threat Intelligence?

Options :

A : Tactical

B : Technical

C : Operational

D : Strategic

E : Analytical

F : Tactical

Answer: C,D,F

Question 5

Which of the following SPL terms is used for pattern matching and extraction of fields from events?

Options :

A : TRANSACTION

B : REX

C : STATS

D : EVAL

Answer: B

Free SPLK-5001 Mock Exam – Practice Online Confidently

Buying Options: