Splunk Certified Cybersecurity Defense Analyst

0/4 checked

Q_01 domain/d1 · medium single discuss →

An analyst is comparing the two CSA STAR Registry levels for a cloud due-diligence report. Which statement correctly distinguishes CSA STAR Level 1 from CSA STAR Level 2 as applied to Splunk?

A Level 1 is a self-attestation using the CAIQ, whereas Level 2 is a third-party evaluation leveraging ISO 27001:2013 together with the CSA CCM criteria
B Level 1 requires an independent third-party audit, whereas Level 2 is a self-attestation
C Level 1 is based on HIPAA controls, whereas Level 2 is based on PCI-DSS controls
D Both levels are self-attestations that differ only in renewal frequency

Q_02 domain/d1 · medium single discuss →

A U.S. Department of Defense customer needs a Splunk cloud offering that can satisfy their Impact Level 4 (IL4) compliance obligations. Based on Splunk's available assessments, what is the correct guidance?

A Splunk maintains a dedicated IL4 offering assessed separately from IL5, which the customer should procure.
B Splunk has no IL4 offering, but its IL5 offering provides additional controls beyond IL4 and may be leveraged to meet and exceed IL4 obligations.
C The customer must use the FedRAMP Moderate offering, since IL4 is equivalent to public data at IL2.
D IL4 compliance can only be met through Splunk's TX-RAMP level 2 reciprocal authorization.

Q_03 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

Q_04 domain/d1 · medium single

Locked question — unlock this exam to view it.

🔒 locked — unlock to review

2 questions locked

unlock all 2 questions

Splunk Certified Cybersecurity Defense Analyst

Explanation

Explanation