Question 46
Which of the following is the most appropriate metric to track SOC analyst efficiency over time?
Question 47
Which MLTK command can be combined with tstats in an ES detection to apply a machine learning model to search results?
Question 48
In a CI/CD pipeline, long-running SAST/DAST security scans often have which of the following effects?
Question 49
An architect wants to reduce alert fatigue by aggregating multiple low-severity detections into a single higher-fidelity notable event tied to a specific entity. Which ES capability should be used?
Question 50
AJ is a security architect at an organization. The organization wants to expand into a new market that requires processing of credit cards. However, the organization wants to limit their exposure to PCI compliance and audits. Of the options below, which is the best way to reduce risk while enabling the business?