Question 1
A financial institution requires that all security event data is retained in a highly available, tamper-evident state for compliance purposes. Which Splunk architectural feature should the Cybersecurity Defense Architect recommend to ensure data immutability and high availability?
Question 2
Which Splunk ES content type allows analysts to visually track the status of a security control or process, such as incident response stages?
Question 3
Samuel is a security architect working for a retail firm based in France. The firm is building a software product to track, store, and analyze clicks on their website. It intends to use this data for developing advertising tailored to each user to offer promotional items. Samuel is responsible for making sure the software meets the firm's compliance requirements. What feature must Samuel ensure is included?
Question 4
An architect is designing SOAR (Splunk SOAR) playbooks for phishing response. Which action should typically occur first in the playbook logic?
Question 5
June has been hired as the first security architect at a U.S. based public healthcare company.
She needs to establish a baseline of controls which should be evaluated in the environment.
Which frameworks should she include as part of the baseline? (Choose all that apply.)