Free Splunk SPLK-5001 Exam Dumps Questions & Answers

Which Splunk Enterprise Security framework provides a way to identify incidents from events and then manage the ownership, triage process, and state of those incidents?

• A.  Investigation Management
• B.  Notable Event
• C.  Asset and Identity
• D.  Adaptive Response

A network security tool that continuously monitors a network for malicious activity and takes action to block it is known as which of the following?

• A.  Intrusion Prevention System
• B.  SIEM
• C.  Intrusion Detection System
• D.  Packet Sniffer

While investigating a finding in Splunk, an analyst manually searches for threat intelligence matches and adds them to a list if they come back as malicious. Then, they send a request to contain the compromised host.
What would be the best solution to fully automate this process?

• A.  Document those steps in the team's runbook.
• B.  A model-assisted threat hunt.
• C.  A SOAR playbook triggered by the detection.
• D.  An intelligence response action.

Which of the following is not considered an Indicator of Compromise (IOC)?

• A.  A specific file hash of a malicious executable.
• B.  A specific password for a compromised account.
• C.  A specific domain that is utilized for phishing.
• D.  A specific IP address used in a cyberattack.

A threat hunter is analyzing incoming emails during the past 30 days, looking for spam or phishing campaigns targeting many users. This involves finding large numbers of similar, but not necessarily identical, emails.
The hunter extracts key datapoints from each email record, including the sender's address, recipient's address, subject, embedded URLs, and names of any attachments. Using the Splunk App for Data Science and Deep Learning, they then visualize each of these messages as points on a graph, looking for large numbers of points that occur close together.
This is an example of what type of threat-hunting technique?

• A.  Most Frequency of Occurrence Analysis
• B.  Time Series Analysis
• C.  Least Frequency of Occurrence Analysis
• D.  Clustering