ElasticCertified SIEM Analyst
Domain 4Objective 2
Construct Lens Visualizations for Security Use Cases ELASTIC-CERTIFIED-SIEM-ANALYST Practice Questions (Page 1)
Part of the Visualizations domain, which makes up ~13% of our current practice bank.
20questions here
4free pages
10concepts
Questions 1–5
- 1
To make a security dashboard clearer, which Lens feature would you use to change the label of a metric from 'Count' to 'Failed Logins'?
Select an answer first - 2
To compare the number of security events across different hosts, which visualization type would be most appropriate?
Select an answer first - 3
In Lens, which option allows you to display a metric value as a percentage instead of a raw number?
Select an answer first - 4
Which Lens visualization type is most appropriate for showing the trend of security events over time?
Select an answer first - 5
To display the total number of bytes transferred in a security event log, which metric aggregation should you configure in Lens?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Elastic. “ELASTIC-CERTIFIED-SIEM-ANALYST” is a trademark of its owner, used for identification only.