Question 1

What are benefits of aligning security processes with common methodologies like NIST or MITRE ATT&CK? (Choose two)

Options :

A : Enhancing organizational compliance

B : Accelerating data ingestion rates

C : Ensuring standardized threat responses

D : Improving incident response metrics

Answer: A,C

Question 2

What elements are critical for developing meaningful security metrics? (Choose three)

Options :

A : Relevance to business objectives

B : Regular data validation

C : Visual representation through dashboards

D : Avoiding integration with third-party tools

E : Consistent definitions for key terms

Answer: A,B,E

Question 3

What is the primary purpose of correlation searches in Splunk?

Options :

A : To extract and index raw data

B : To identify patterns and relationships between multiple data sources

C : To create dashboards for real-time monitoring

D : To store pre-aggregated search results

Answer: B

Question 4

What is the purpose of leveraging REST APIs in a Splunk automation workflow?

Options :

A : To configure storage retention policies

B : To integrate Splunk with external applications and automate interactions

C : To compress data before indexing

D : To generate predefined reports

Answer: B

Question 5

A security team needs a dashboard to monitor incident resolution times across multiple regions. Which feature should they prioritize?

Options :

A : Real-time filtering by region

B : Including all raw data logs for transparency

C : Using static panels for historical trends

D : Disabling drill-down for simplicity

Answer: A