Question 11 · 23 in bank
Risk scores are associated with how many levels of risk in Enterprise Security by default?
Show answer
Answer: C
Splunk Certified Cybersecurity Defense Engineer23 questions across 3 pages are complete and free, with no account or card.
23 questions in this bank
Free access · progress saved on this device
Risk scores are associated with how many levels of risk in Enterprise Security by default?
Answer: C
While working with the SOC analysts to review current contextualization processes, a request for automation has been raised by the SOC team. They are asking for a new automation that will check a potentially malicious URL against a remote URL filtering list. Which of the following options will work for them?
Answer: B
What is one method used in ESCU content to calculate a risk score when creating a detection that uses the Risk Analysis adaptive response action?
Answer: C
Lookups append fields from an external source to events based on the values of fields that are already present in those events. What are the four supported lookup types?
Answer: B
When creating a detection, how might an engineer ensure that all possible contextual fields about a given asset and identity are added to a risk event?
Answer: B
Which of the following is a reason to utilize an index-based search (index=…) over a data model search (| tstats…) in a detection?
Answer: B
Which field in the risk index is used to describe the activity within a finding?
Answer: D
Which REST call will show a list of alerts with their specific commands, app, and title?
Answer: B
What is Enterprise Security's default way of determining the urgency of a finding (notable event)?
Answer: D
Which of the following should be the primary reference when designing a new playbook in Splunk SOAR?
Answer: C
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SPLK-5002 practice, question 11. 23 questions available.
Version 1.0.0. How we source questions