Which Enterprise Security framework provides a mechanism for running preconfigured actions within the Splunk platform or integrating with external applications?
Correct Answer:
D
🗳️
Which of the following Splunk Enterprise Security features allows industry frameworks such as CIS Critical Security Controls, MITRE ATT&CK, and the Lockheed Martin Cyber Kill Chain® to be mapped to Correlation Search results?
Correct Answer:
A
🗳️
Which of the following is the primary benefit of using the CIM in Splunk?
Correct Answer:
A
🗳️
Tactics, Techniques, and Procedures (TTPs) are methods or behaviors utilized by attackers. In which framework are these categorized?
Correct Answer:
D
🗳️