Practice · Splunk Certified Cybersecurity Defense Analyst

~/splunk-splk-5001 · splunk-splk-5001_d1_c0a95e98002a ▊

← Splunk Certified Cybersecurity Defense Analyst · practice sheet

splunk-splk-5001_d1_c0a95e98002a domain/d1 · medium single

An analyst is comparing the two CSA STAR Registry levels for a cloud due-diligence report. Which statement correctly distinguishes CSA STAR Level 1 from CSA STAR Level 2 as applied to Splunk?

A Level 1 is a self-attestation using the CAIQ, whereas Level 2 is a third-party evaluation leveraging ISO 27001:2013 together with the CSA CCM criteria
B Level 1 requires an independent third-party audit, whereas Level 2 is a self-attestation
C Level 1 is based on HIPAA controls, whereas Level 2 is based on PCI-DSS controls
D Both levels are self-attestations that differ only in renewal frequency

Unlock this exam to join the per-question discussion and vote on questions.

next question →