QUESTION: 25

Which of the following is a key feature of a glass table?

Rigidity.
Customization.
Interactive investigations.
Strong data for later retrieval.

Answer(s): B

An administrator is asked to configure an “Nslookup” adaptive response action, so that it appears as a selectable option in the notable event’s action menu when an analyst is working in the Incident Review dashboard.

What steps would the administrator take to configure this option?

Configure -> Content Management -> Type: Correlation Search -> Notable -> Nslookup
Configure -> Type: Correlation Search -> Notable -> Recommended Actions -> Nslookup
Configure -> Content Management -> Type: Correlation Search -> Notable -> Next Steps -> Nslookup
Configure -> Content Management -> Type: Correlation Search -> Notable -> Recommended Actions -> Nslookup

Answer(s): D

Reveal Solution Next Question

QUESTION: 27

What are the steps to add a new column to the Notable Event table in the Incident Review dashboard?

Configure -> Incident Management -> Notable Event Statuses
Configure -> Content Management -> Type: Correlation Search
Configure -> Incident Management -> Incident Review Settings -> Event Management
Configure -> Incident Management -> Incident Review Settings -> Table Attributes

Answer(s): C

Reference:

https://docs.splunk.com/Documentation/ES/6.1.0/Admin/Customizenotables

Reveal Solution Next Question

QUESTION: 28

To observe what network services are in use in a network’s activity overall, which of the following dashboards in Enterprise Security will contain the most relevant data?

Intrusion Center
Protocol Analysis
User Intelligence
Threat Intelligence

Answer(s): A

Reference:

https://docs.splunk.com/Documentation/ES/6.1.0/User/NetworkProtectionDomaindashboards

Reveal Solution Next Question

Free SPLK-3001 Exam Braindumps (page: 7)

QUESTION: 25

QUESTION: 26

QUESTION: 27

Reference:

QUESTION: 28

Reference: