QUESTION: 37

Which of the following threat intelligence types can ES download? (Choose all that apply.)

Text
STIX/TAXII
VulnScanSPL
SplunkEnterpriseThreatGenerator

Answer(s): B

Reference:

https://docs.splunk.com/Documentation/ES/6.1.0/Admin/Downloadthreatfeed

A site has a single existing search head which hosts a mix of both CIM and non-CIM compliant applications. All of the applications are mission-critical. The customer wants to carefully control cost, but wants good ES performance. What is the best practice for installing ES?

Install ES on the existing search head.
Add a new search head and install ES on it.
Increase the number of CPUs and amount of memory on the search head, then install ES.
Delete the non-CIM-compliant apps from the search head, then install ES.

Answer(s): B

Reference:

https://www.splunk.com/pdfs/technical-briefs/splunk-validated-architectures.pdf

Reveal Solution Next Question

QUESTION: 39

Enterprise Security’s dashboards primarily pull data from what type of knowledge object?

Tstats
KV Store
Data models
Dynamic lookups

Answer(s): C

Reference:

https://docs.splunk.com/Splexicon:Knowledgeobject

Reveal Solution Next Question

QUESTION: 40

To which of the following should the ES application be uploaded?

The indexer.
The KV Store.
The search head.
The dedicated forwarder.

Answer(s): C

Reference:

https://docs.splunk.com/Documentation/ES/6.1.0/Install/InstallEnterpriseSecuritySHC

Reveal Solution Next Question

Free SPLK-3001 Exam Braindumps (page: 11)

QUESTION: 37

Reference:

QUESTION: 38

Reference:

QUESTION: 39

Reference:

QUESTION: 40

Reference:

SPLK-3001 Discussions & Posts