Practice · Splunk Certified Cybersecurity Defense Architect

~/splunk-splunk-certified-cybersecurity-defense-architect · splunk-splunk-certified-cybersecurity-defense-architect_d1_11e1ec556d1f ▊

← Splunk Certified Cybersecurity Defense Architect · practice sheet

splunk-splunk-certified-cybersecurity-defense-architect_d1_11e1ec556d1f domain/d1 · medium single

A SOC is overwhelmed by tedious, manual phishing investigations that require analysts to pivot between multiple disjointed security tools to understand the threat. Which capability of Splunk Enterprise Security is designed to address this problem?

A Automated Threat Analysis, which breaks down phishing attack chains to reach the final payload and extract forensic evidence within ES
B Risk-Based Alerting, which aggregates low-fidelity alerts into a single risk score
C Asset and Risk Intelligence, which supplies asset associations and asset health context
D The Enhanced Risk Analysis Dashboard, which visualizes notable event timelines

Unlock this exam to join the per-question discussion and vote on questions.

next question →