SPLK-5003 試験問題を無料オンラインアクセス

How should the control network be separated from other networks in a water treatment plant?

• A.With Access Control Lists
• B.Physically, using a VPN if needed
• C.Using RFC1918 addresses
• D.Physically, using a diode if needed

Sebastian is an incident responder encountering friction when coordinating and communicating with business units outside of his organization on large-scale incidents. What should he ensure is in place first to enable more seamless incident communications in the future?

• A.Decentralized incident commander function where all incident information is stored.
• B.Defined urgency and priority standards purpose-built to drive escalations with external business units.
• C.Establish a formal incident communication plan, including points of contact per business unit.
• D.Broad data classification standards to enabling sharing of incident details without restriction.

Which of the following best describes "detection as code" as a practice relevant to a Cybersecurity Defense Architect?

• A.Writing detections exclusively in Python outside of Splunk
• B.Avoiding documentation of detection logic
• C.Manually recreating detections after every Splunk upgrade
• D.Managing correlation searches and detection logic under version control with testing and CI/CD pipelines

Buttercup Games is an organization which allows employees to bring their own devices. The organization does not mandate VPN or MDM usage to access company resources. How will this architecture impact security operations? (Choose all that apply.)

• A.Patch management can be orchestrated across all client devices.
• B.Network visibility will be limited to company-managed assets.
• C.Employees will not be able to access company resources from home.
• D.eDiscovery and legal hold processes may be ineffective.

A SOC lead wants a single measurement that reflects how much of the organization's known attack surface has automated detection coverage. Which artifact would best provide this?

• A.A MITRE ATT&CK Navigator heatmap built from correlation search annotations
• B.A license usage report
• C.A list of all installed technology add-ons
• D.A daily indexing volume report