QUESTION: 1

The Add-On Builder creates Splunk Apps that start with what?

DA-
SA-
TA-
App-

Answer(s): C

Reference:

https://dev.splunk.com/enterprise/docs/developapps/enterprisesecurity/abouttheessolution/

Reveal Solution Next Question

QUESTION: 2

Which of the following are examples of sources for events in the endpoint security domain dashboards?

REST API invocations.
Investigation final results status.
Workstations, notebooks, and point-of-sale systems.
Lifecycle auditing of incidents, from assignment to resolution.

Answer(s): D

Reference:

https://docs.splunk.com/Documentation/ES/6.1.0/User/EndpointProtectionDomaindashboards

Reveal Solution Next Question

QUESTION: 3

When creating custom correlation searches, what format is used to embed field values in the title, description, and drill-down fields of a notable event?

$fieldname$
“fieldname”
%fieldname%
_fieldname_

Answer(s): C

Reference:

https://docs.splunk.com/Documentation/ITSI/4.4.2/Configure/Createcorrelationsearch

Reveal Solution Next Question

QUESTION: 4

What feature of Enterprise Security downloads threat intelligence data from a web server?

Threat Service Manager
Threat Download Manager
Threat Intelligence Parser
Threat Intelligence Enforcement

Answer(s): B

Reveal Solution Next Question

Free SPLK-3001 Exam Braindumps (page: 1)

Pass your Splunk Enterprise Security Certified Admin exam with these free Actual Questions and Answers

QUESTION: 1

Reference:

QUESTION: 2

Reference:

QUESTION: 3

Reference:

QUESTION: 4