Which of the following is the correct way to add a visualization to a dashboard in Elastic?

Drag and drop a saved search from the Discover page onto the dashboard

Type a query in the dashboard's search bar to generate a visualization

Click 'Add panel' and select an existing visualization from the list

Use the 'Import' button to upload a visualization file

A SOC manager has created a dashboard that shows the current security posture. The manager wants to share this dashboard with the rest of the SOC team so they can view it in Kibana, but they should not be able to modify it. What is the most appropriate way to share it?

Duplicate the dashboard and give the team 'edit' access to the duplicate

Share the dashboard's Kibana link with the team and ensure their roles have 'read' access to the dashboard

Embed the dashboard in a wiki page using an iframe

Export the dashboard as a PDF and email it to the team

What is the purpose of the panel settings (gear icon) on a dashboard panel?

To delete the panel from the dashboard

To share the panel with other users

To change the visualization type of the panel

To configure panel-specific options such as title and time range

A SOC analyst is investigating a potential data exfiltration. The analyst has a dashboard with a table of network connections and a line chart of bytes transferred. The analyst wants to see only connections to a specific external IP address, and then drill down into the individual events. What is the most efficient sequence of actions?

Use the global search bar to type the external IP, then click on the table to view the events

Click on the external IP in the table, select 'Filter for value', then click on a data point in the line chart to view surrounding documents

Create a new dashboard, add the same visualizations, and apply the filter there

Edit the table's visualization to add a query filter for the external IP, then save the dashboard

What is the primary purpose of arranging visualizations in a meaningful layout on a dashboard?

To group related data and improve readability and analysis efficiency

To make the dashboard visually appealing for presentations

To ensure all panels are the same size for consistency

To reduce the number of visualizations needed on the dashboard

ElasticCertified SIEM Analyst

Domain 5Objective 2

Demonstrate the Use of Dashboards ELASTIC-CERTIFIED-SIEM-ANALYST Practice Questions (Page 3)

Part of the Dashboards domain, which makes up ~11% of our current practice bank.

26questions here

6free pages

8concepts

Questions 11–15

11foundation · easy
Which of the following is the correct way to add a visualization to a dashboard in Elastic?
Select an answer first
12application · medium
A SOC manager has created a dashboard that shows the current security posture. The manager wants to share this dashboard with the rest of the SOC team so they can view it in Kibana, but they should not be able to modify it. What is the most appropriate way to share it?
Select an answer first
13foundation · easy
What is the purpose of the panel settings (gear icon) on a dashboard panel?
Select an answer first
14expert · hard
A SOC analyst is investigating a potential data exfiltration. The analyst has a dashboard with a table of network connections and a line chart of bytes transferred. The analyst wants to see only connections to a specific external IP address, and then drill down into the individual events. What is the most efficient sequence of actions?
Select an answer first
15foundation · easy
What is the primary purpose of arranging visualizations in a meaningful layout on a dashboard?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ELASTIC-CERTIFIED-SIEM-ANALYST

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Elastic. “ELASTIC-CERTIFIED-SIEM-ANALYST” is a trademark of its owner, used for identification only.