Develop Automation and Orchestration for Standard Operating Procedures. CYBERSECURITY-DEFENSE-ENGINEER Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the purpose of conditional logic in an automated security workflow?

   • ATo encrypt the workflow's data at rest
   • BTo ensure the workflow runs at a specific time each day
   • CTo make the workflow take different actions based on the incident's characteristics
   • DTo log all actions taken by the workflow
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is a best practice for maintaining automated SOPs over time?

   • AReview and update them regularly to reflect changes in the environment or procedures
   • BKeep them unchanged to ensure consistency
   • COnly update them when a major incident occurs
   • DDelete them after they are deployed to production
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is a playbook in the context of security automation?

   • AA document that lists all security tools used in an organization
   • BA report summarizing past security incidents
   • CA configuration file for Splunk's search head
   • DA step-by-step set of automated actions to handle a specific type of security incident
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   What is the primary purpose of encoding a standard operating procedure (SOP) as an automated workflow in Splunk?

   • ATo replace the need for human analysts in all security operations
   • BTo automatically generate new SOPs based on past incidents
   • CTo bypass security controls to speed up incident response
   • DTo ensure consistent, repeatable execution of the SOP's steps with reduced manual effort
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   Which practice is essential for securing automation scripts in Splunk?

   • ADisabling authentication for internal APIs
   • BStoring credentials in plain text within the script
   • CSharing the same API key across all integrations
   • DUsing dedicated service accounts with least-privilege permissions
   Reveal Solution Discussion Select an answer first