QUESTION: 13

Upon investigating a report of a web server becoming unavailable, the security analyst finds that the web server's access log has the same log entry millions of times:

147.186.119.200 - - [28/Jul/2023:12:04:13 -0300] "GET /login/ HTTP/1.0" 200 3733

What kind of attack is occurring?

Denial of Service Attack
Distributed Denial of Service Attack
Cross-Site Scripting Attack
Database Injection Attack

Answer(s): B

Reveal Solution Next Question

QUESTION: 14

According to David Bianco's Pyramid of Pain, which indicator type is least effective when used in continuous monitoring?

Domain names
TTPs
NetworM-lost artifacts
Hash values

Answer(s): D

Reveal Solution Next Question

QUESTION: 15

An analysis of an organization's security posture determined that a particular asset is at risk and a new process or solution should be implemented to protect it. Typically, who would be in charge of implementing the new process or solution that was selected?

Security Architect
SOC Manager
Security Engineer
Security Analyst

Answer(s): C

Reveal Solution Next Question

QUESTION: 16

Which of the following is a correct Splunk search that will return results in the most performant way?

index=foo host=i-478619733 | stats range(_time) as duration by src_ip | bin duration span=5min | stats count by duration, host
| stats range(_time) as duration by src_ip | index=foo host=i-478619733 | bin duration span=5min | stats count by duration, host
index=foo host=i-478619733 | transaction src_ip |stats count by host
index=foo | transaction src_ip |stats count by host | search host=i-478619733

Answer(s): A

Reveal Solution Next Question

Free SPLK-5001 Exam Braindumps (page: 5)

QUESTION: 13

QUESTION: 14

QUESTION: 15

QUESTION: 16

SPLK-5001 Exam Discussions & Posts