SPLK-5001 무료 덤프문제 온라인 액세스

Splunk detections can be mapped to their appropriate MITRE ATT&CK Techniques using which feature?

• A.Annotations
• B.Context
• C.Threat Intelligence
• D.Correlations

A security analyst wants to enrich public IP addresses found within logs with the Autonomous System Number and owner of the address. What Splunk feature would enable the analyst to do this?

• A.Using rex to extract this information at search time.
• B.Using lookup to include relevant information.
• C.Using eval commands to calculate the ASN.
• D.Using makeresults to add the ASNs to the search.

Which of the following use cases is best suited to be a Splunk SOAR Playbook?

• A.A Forming hypothesis for Threat Hunting
• B.Taking containment action on a compromised host
• C.Creating persistent field extractions.
• D.Visualizing complex datasets.

Which Splunk search mode is best for searches that contain commands such as chart, timechart, and top, but the analyst still wants results in the events tab?

• A.Fast
• B.Smart
• C.Verbose
• D.Adaptive

Which Splunk app can help an organization inventory their data then find, deploy, and evaluate security detections to advance their security journey?

• A.Splunk ES Content Updates
• B.Splunk Threat Intelligence Management
• C.Splunk Attack Analyzer
• D.Splunk Security Essentials