An administrator is asked to configure an "Nslookup" adaptive response action, so that it appears as a selectable option in the notable event's action menu when an analyst is working in the Incident Review dashboard. What steps would the administrator take to configure this option?
Answer(s): D
What are the steps to add a new column to the Notable Event table in the Incident Review dashboard?
https://docs.splunk.com/Documentation/ES/6.1.0/Admin/Customizenotables
To observe what network services are in use in a network's activity overall, which of the following dashboards in Enterprise Security will contain the most relevant data?
Answer(s): B
https://docs.splunk.com/Documentation/ES/6.1.0/User/NetworkProtectionDomaindashboards
Adaptive response action history is stored in which index?
Answer(s): A
https://docs.splunk.com/Documentation/ES/6.1.0/Install/Indexes
Which of the following actions would not reduce the number of false positives from a correlation search?
Post your Comments and Discuss Splunk SPLK-3001 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the SPLK-3001 content, but please register or login to continue.