Which feature contains scenarios that are useful during ES Implementation?
A.
Use Case Library
B.
Correlation Searches
C.
Predictive Analytics
D.
Adaptive Responses
Correlation Searches
Reference: https://www.splunk.com/pdfs/professional-services/2019/splunk-enterprisesecurity-
implementation-success.pdf
After installing Enterprise Security, the distributed configuration management tool can be used to create which app to configure indexers?
A.
Splunk_DS_ForIndexers.spl
B.
Splunk_ES_ForIndexers.spl
C.
Splunk_SA_ForIndexers.spl
D.
Splunk_TA_ForIndexers.spl
Splunk_TA_ForIndexers.spl
Reference: https://docs.splunk.com/Documentation/ES/6.1.0/Install/InstallTechnologyAddons
How is it possible to navigate to the list of currently-enabled ES correlation searches?
A.
Configure -> Correlation Searches -> Select Status “Enabled”
B.
Settings -> Searches, Reports, and Alerts -> Filter by Name of “Correlation”
C.
Configure -> Content Management -> Select Type “Correlation” and Status “Enabled”
D.
Settings -> Searches, Reports, and Alerts -> Select App of
“SplunkEnterpriseSecuritySuite” and filter by “- Rule”
Configure -> Content Management -> Select Type “Correlation” and Status “Enabled”
Reference: https://docs.splunk.com/Documentation/ES/6.1.0/Admin/Listcorrelationsearches
The Remote Access panel within the User Activity dashboard is not populating with the most recent hour of data. What data model should be checked for potential errors such as skipped searches?
A.
Web
B.
Risk
C.
Performance
D.
Authentication
Web
Reference: https://answers.splunk.com/answers/565482/how-to-resolve-skippedscheduled-
searches.html
“10.22.63.159”, “websvr4”, and “00:26:08:18: CF:1D” would be matched against what in
ES?
A.
A user.
B.
A device.
C.
An asset.
D.
An identity.
A device.
An administrator is provisioning one search head prior to installing ES. What are the reference minimum requirements for OS, CPU, and RAM for that machine?
A.
OS: 32 bit, RAM: 16 MB, CPU: 12 cores
B.
OS: 64 bit, RAM: 32 MB, CPU: 12 cores
C.
OS: 64 bit, RAM: 12 MB, CPU: 16 cores
D.
OS: 64 bit, RAM: 32 MB, CPU: 16 cores
OS: 64 bit, RAM: 12 MB, CPU: 16 cores
Reference:
https://docs.splunk.com/Documentation/Splunk/8.0.2/Capacity/Referencehardware
| Page 2 out of 17 Pages |
| Previous |
Contact Us - Privacy Policy ... Copyright © - All Rights Reserved