ElasticCertified SIEM Analyst
Domain 4Objective 2
Construct Lens Visualizations for Security Use Cases ELASTIC-CERTIFIED-SIEM-ANALYST Practice Questions (Page 3)
Part of the Visualizations domain, which makes up ~13% of our current practice bank.
20questions here
4free pages
10concepts
Questions 11–15
- 11
In Lens, which feature allows you to narrow down the data to only events with 'event.action: login'?
Select an answer first - 12
For a security analyst investigating a spike in failed logins over the last 24 hours, which time range should be selected in the Lens editor?
Select an answer first - 13
After creating a Lens visualization, which action allows you to add it to an existing security dashboard?
Select an answer first - 14
Which metric aggregation in Lens would you use to count the number of distinct users who triggered a security alert?
Select an answer first - 15
In the Lens visualization editor, which panel is used to configure the metrics and buckets for the visualization?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Elastic. “ELASTIC-CERTIFIED-SIEM-ANALYST” is a trademark of its owner, used for identification only.