最新的Splunk Certified Cybersecurity Defense Architect - SPLK-5003免費考試真題
Which Splunk feature allows querying data that resides in a separate, remote Splunk deployment without duplicating ingestion?
正確答案: D
說明：（僅 Fast2test 成員可見）
The growing rate of cyber attacks has led many countries to adopt laws and regulations pertaining to the collection, handling, and security of their citizens' private information regardless of where it is stored. Which of the following terms best describes these laws?
正確答案: B
說明：（僅 Fast2test 成員可見）
Siobhan is a security architect for a financial services company. They have determined the organization has a low risk tolerance for data breaches and insider threats, but a higher tolerance for minor system outages. How would this influence security program metrics Siobhan wants to implement? (Choose all that apply.)
正確答案: C,D
說明：（僅 Fast2test 成員可見）
During a security code review, one of the senior developers complains to the security architect that there have been unauthorized modifications to the code going into the nightly builds. Which of the following methods can ensure only authorized code modifications are part of the nightly builds?
正確答案: A
說明：（僅 Fast2test 成員可見）
How can an organization best improve its Mean Time to Respond (MTTR) metrics?
正確答案: D
說明：（僅 Fast2test 成員可見）
Which Splunk ES content type allows analysts to visually track the status of a security control or process, such as incident response stages?
正確答案: A
說明：（僅 Fast2test 成員可見）
An organization is collecting over 700TB of security data per day. What is one strategy they can use to reduce the amount of data that is collected and still let detection engineering run full breadth detections in the SIEM?
正確答案: D
說明：（僅 Fast2test 成員可見）
Why should Attack Surface Management capabilities be integrated and automated in an environment?
正確答案: C
說明：（僅 Fast2test 成員可見）
Justin's company is interested in pursuing ISO 27001 certification. What do they need to have in order to meet the requirements?
正確答案: D
說明：（僅 Fast2test 成員可見）
Melinda's team is responsible for maintaining detection content for a large organization. Her team consists of ten detection engineers, who need to log in to multiple SIEMs in order to make any changes to rules. Melinda wants to evaluate a "detection as code" methodology using the organization's version control and continuous integration systems. What benefits can detection as code provide her team? (Choose all that apply.)
正確答案: A,B,C
說明：（僅 Fast2test 成員可見）
A SOC wants new detections to automatically map to MITRE ATT&CK techniques for reporting purposes. Where in Splunk ES should this mapping be configured?
正確答案: C
說明：（僅 Fast2test 成員可見）
An organization is migrating from their current firewalls to a next generation firewall system. As they begin to collect telemetry from their new firewalls, which of the following methods will ensure continuity of existing detections?
正確答案: B
說明：（僅 Fast2test 成員可見）
While working with the Security Automation team, an architect is reviewing a playbook that automates the handling of compromised credentials. The playbook contains the following stages:
- Examine account to ensure that it is not a service or control
account.
- Access all identity platforms and lock the user account.
- Revoke all current sessions (email, VPN, etc.).
The architect points out the potential for the compromised credentials to be used remotely again.
Which of the following actions need to be added to the playbook to alleviate this?
- Examine account to ensure that it is not a service or control
account.
- Access all identity platforms and lock the user account.
- Revoke all current sessions (email, VPN, etc.).
The architect points out the potential for the compromised credentials to be used remotely again.
Which of the following actions need to be added to the playbook to alleviate this?
正確答案: B
說明：（僅 Fast2test 成員可見）
Clara is responsible for how her organization's SIEM ingests and stores event data. The newest version of the SIEM now includes APIs for managing the data ingestion pipelines. Clara wants to evaluate methods to programmatically manage those pipelines using her company's version control and continuous integration systems. What benefits would this provide to the organization?
(Choose all that apply.)
(Choose all that apply.)
正確答案: A,B,C
說明：（僅 Fast2test 成員可見）
Ahmed was recently hired as a security architect. He wants to measure how well his new organization is covering threat actor tactics like establishing persistence and escalating privileges.
What step should Ahmed take first?
What step should Ahmed take first?
正確答案: C
說明：（僅 Fast2test 成員可見）