Alice is tasked with improving the organization's digital resilience, specifically focusing on the ability to recover from unplanned events that impact business operations. What should Alice's first project be to advance this initiative?

• A.Update the corporate Incident Response Plan to encompass ransomware response and continuity of business.
• B.Test replication and failover between multiple AWS availability zones.
• C.Initiate cross-functional collaboration on a new Business Continuity Plan.
• D.Implement IT Infrastructure Library (ITIL) 4 methods and practices.

Comment: *

Name: *

Email: *

Verification: *

An architect needs to justify a request for additional indexer capacity. Which piece of evidence is most directly relevant?

• A.Number of open notable events
• B.Daily ingestion volume trend approaching license or hardware ceiling
• C.Number of SOAR playbooks deployed
• D.Number of dashboards in use

Comment: *

Name: *

Email: *

Verification: *

A security architect is designing a Splunk deployment that must support 90 days of searchable retention for 15TB/day of ingestion while minimizing storage costs. Which architecture component should be prioritized in the design?

• A.Search head clustering
• B.SmartStore with remote object storage
• C.Universal forwarder load balancing
• D.Data model acceleration

Comment: *

Name: *

Email: *

Verification: *

Justin's company is interested in pursuing ISO 27001 certification. What do they need to have in order to meet the requirements?

• A.A firewall and intrusion detection system in every data center
• B.A centralized log management and event correlation system
• C.Documented information security policies and procedures
• D.Separation of duties for change management

Comment: *

Name: *

Email: *

Verification: *

A security architect is working with their cloud architect peer to enable additional controls in the non-production cloud environment. During testing, it is shown that the implementation of four of these controls will have a significant cost associated with them. Which of the following actions needs to be done before presenting their findings to the CISO?

• A.Pick one of the controls to recommend for implementation
• B.Review controls with compliance to evaluate their need
• C.Understand the control requirements and cost versus operational benefit
• D.Review the burn down on current cloud contract and remaining budget

Comment: *

Name: *

Email: *

Verification: *