Question 1

The Add-On Builder creates Splunk Apps that start with what?

Accepted Answer

Reference: https://dev.splunk.com/enterprise/docs/developapps/enterprisesecurity/abouttheessolution/

Question 2

Which of the following is a way to test for a property normalized data model?

Accepted Answer

Reference: https://docs.splunk.com/Documentation/CIM/4.15.0/User/UsetheCIMtonormalizedataatsearchtime

Question 3

When investigating, what is the best way to store a newly-found IOC?

Accepted Answer

Correct answer: B

Question 4

Which of the following are data models used by ES? (Choose all that apply)

Accepted Answer

Reference: https://dev.splunk.com/enterprise/docs/developapps/enterprisesecurity/datamodelsusedbyes/

Question 5

At what point in the ES installation process should Splunk_TA_ForIndexes.spl be deployed to the indexers?

Accepted Answer

Reference: https://docs.splunk.com/Documentation/ES/6.1.0/Install/InstallTechnologyAdd-ons

Question 6

Which correlation search feature is used to throttle the creation of notable events?

Accepted Answer

Reference: https://docs.splunk.com/Documentation/ES/6.1.0/Admin/Configurecorrelationsearches

/SPLK-3001-exam/ (97 Q&As)

Question 7

Both “Recommended Actions” and “Adaptive Response Actions” use adaptive response. How do they differ?

Accepted Answer

Reference: https://docs.splunk.com/Documentation/ES/latest/Admin/Configureadaptiveresponse

Question 8

What does the Security Posture dashboard display?

Accepted Answer

The Security Posture dashboard is designed to provide high-level insight into the notable events across all domains of your deployment, suitable for display in a
Security Operations Center (SOC). This dashboard shows all events from the past 24 hours, along with the trends over the past 24 hours, and provides real-time
event information and updates.
Reference: https://docs.splunk.com/Documentation/ES/6.1.0/User/SecurityPosturedashboard

Question 9

Glass tables can display static images and text, the results of ad-hoc searches, and which of the following objects?

Accepted Answer

Reference: https://docs.splunk.com/Documentation/ES/6.1.0/User/CreateGlassTable

Question 10

Which of the following is a key feature of a glass table?

Accepted Answer

Correct answer: B