Question 1

What are common tiers of Threat Intelligence?

Options :

A : Tactical

B : Technical

C :

Operational

D : Strategic

E : Analytical

F : Tactical

Answer: C,D,F

Question 2

How does Splunk Enterprise Security utilize risk scores to prioritize security alerts?

Options :

A : By ignoring risk scores and treating all alerts equally

B : By setting a fixed risk score threshold for all alerts

C : By randomizing risk scores for each alert

D : By assigning higher scores to alerts with potential impact and likelihood of occurrence

Answer: D

Question 3

What is a common responsibility of a SOC Engineer?

Options :

A :

Implementing security controls

B : Designing security policies

C : Analyzing security logs

D : Creating incident reports

Answer: A

Question 4

What are common roles in a SOC?

Options :

A : Analyst, Engineer, Architect

B : Investigator, Operator, Supervisor

C : Specialist, Coordinator, Administrator

D : Developer, Manager, Technician

Answer: A

Question 5

What is the purpose of using the TRANSACTION command in SPL?

Options :

A :

To perform statistical analysis on event data

B :

To group events based on common field values

C :

To filter events based on time ranges

D : To extract data from unstructured text

Answer: B