SPLK-5001 試験問題を無料オンラインアクセス

Storing log checksums in a public blockchain system is most closely linked to which security concept?

• A.Obfuscation
• B.Confidentiality
• C.Integrity
• D.Availability

Which of the following is a best practice when creating performant searches within Splunk?

• A.Utilize multiple wildcards across fields to ensure returned data is complete and available.
• B.Utilize the transaction command to aggregate data for faster analysis.
• C.Utilize specific fields to return only the data that is required.
• D.Utilize Aggregating commands to ensure all data is available prior to Streaming commands.

Splunk detections can be mapped to their appropriate MITRE ATT&CK Techniques using which feature?

• A.Context
• B.Annotations
• C.Correlations
• D.Threat Intelligence

How are Notable Events configured in Splunk Enterprise Security?

• A.Via an Adaptive Response Action in a correlation search.
• B.As part of an audit.
• C.During an investigation.
• D.Via an Adaptive Response Action in a regular search.

Which of the following terms is associated with the behavior of a threat actor and a structured framework for executing a cyberattack, and defines why an attacker is performing an action?

• A.Techniques
• B.Procedures
• C.Tactics
• D.Playbooks