Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam SPLK-5001 All Questions

View all questions & answers for the SPLK-5001 exam

Exam SPLK-5001 topic 1 question 14 discussion

Actual exam question from Splunk's SPLK-5001
Question #: 14
Topic #: 1
[All SPLK-5001 Questions]

According to David Bianco's Pyramid of Pain, which indicator type is least effective when used in continuous monitoring?

  • A. Domain names
  • B. TTPs
  • C. Network/Host artifacts
  • D. Hash values
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
CeeCapi
2 weeks, 6 days ago
D. Hash values According to David Bianco's Pyramid of Pain, hash values are considered the least effective indicator for continuous monitoring because they are easy for attackers to change. This means that using hash values as indicators creates minimal pain for attackers, as they can simply modify the file slightly to generate a new hash and evade detection.
upvoted 1 times
...
nosavotor
1 month, 3 weeks ago
Friends could you please confirm this answer
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...