Online Access Free SPLK-5001 Practice Test

Storing log checksums in a public blockchain system is most closely linked to which security concept?

• A.Integrity
• B.Obfuscation
• C.Availability
• D.Confidentiality

When should adaptive response actions be used in threat hunting?

• A.Adaptive response actions should be used to automate responses to security incidents.
• B.Adaptive response actions should only be used for low-risk threats.
• C.Adaptive response actions should always be used for any security incident.
• D.Adaptive response actions are optional and not necessary for threat hunting.

An analyst is investigating how an attacker successfully performs a brute-force attack to gain a foothold into an organizations systems. In the course of the investigation the analyst determines that the reason no alerts were generated is because the detection searches were configured to run against Windows data only and excluding any Linux data.
This is an example of what?

• A.A True Positive.
• B.A True Negative.
• C.A False Positive.
• D.A False Negative.

Associated with the behavior of a threat actor and a structured framework for executing a cyberattack, which of the following terms defines exactly how a threat actor achieves a tactical goal?

• A.Techniques
• B.Playbooks
• C.Tactics
• D.Procedures

In Splunk Risk-Based Alerting, what are a set of conditions that dynamically adjust risk scores for an entity, such as an asset or identity?

• A.Risk entities
• B.Risk values
• C.Risk factors
• D.Risk entries