Exam SPLK-5001 topic 1 question 34 discussion

Answer - C. Annotations Annotations in Splunk Enterprise Security allow correlation searches to be tagged with relevant frameworks, like NIST 800-171, CIS, or MITRE ATT&CK. This tagging provides context to the analyst, showing how specific searches align with these frameworks. It effectively maps correlation searches to compliance guidelines or security frameworks. Framework mapping isn't an official Splunk Enterprise Security feature or term. The closest feature that performs this mapping function in Splunk is indeed Annotations. So, C. Annotations is correct because it is the feature in Splunk Enterprise Security designed for mapping correlation searches to frameworks like NIST.

I'm not sure about that