Which factor is most important when prioritizing detection use cases?

The popularity of the threat among security vendors

The risk and business impact of the threat being detected

The ease of writing the detection logic

The number of detection rules already in place

How does threat intelligence contribute to detection engineering prioritization?

It replaces the need for risk assessment

It provides a list of all known vulnerabilities

It automatically generates detection rules

It helps identify which threats are most likely to target the organization

How can MITRE ATT&CK be used to prioritize detection engineering efforts?

By identifying which techniques are most commonly used by adversaries targeting your industry

By replacing the need for risk assessment

By automatically patching vulnerabilities

By calculating the financial impact of a breach

SplunkCertified Cybersecurity Defense Engineer

Domain 3Objective 2

Use Common Methodologies for Risk and Detection Prioritization. CYBERSECURITY-DEFENSE-ENGINEER Practice Questions (Page 3)

Part of the Building Effective Security Processes and Programs domain, which accounts for 20% of the CYBERSECURITY-DEFENSE-ENGINEER exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~6–10 in this domain), expect 2–3 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

9concepts

20%of the exam

Questions 11–15

11application · easy
A small business has identified a high-risk vulnerability in a legacy application that is critical to operations but has no available patch. The cost to replace the application is prohibitive. The business decides to implement additional monitoring and access controls to reduce the likelihood of exploitation. Which risk treatment option is being applied?
Select an answer first
12foundation · easy
Which factor is most important when prioritizing detection use cases?
Select an answer first
13foundation · easy
How does threat intelligence contribute to detection engineering prioritization?
Select an answer first
14foundation · easy
How can MITRE ATT&CK be used to prioritize detection engineering efforts?
Select an answer first
15foundation · easy
Which threat modeling methodology uses a structured approach that includes identifying assets, creating an architecture overview, decomposing the application, and identifying threats?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CYBERSECURITY-DEFENSE-ENGINEER

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “CYBERSECURITY-DEFENSE-ENGINEER” is a trademark of its owner, used for identification only.

Use Common Methodologies for Risk and Detection Prioritization. CYBERSECURITY-DEFENSE-ENGINEER Practice Questions (Page 3)

Questions 11–15

Which factor is most important when prioritizing detection use cases?

How does threat intelligence contribute to detection engineering prioritization?

How can MITRE ATT&CK be used to prioritize detection engineering efforts?

Which threat modeling methodology uses a structured approach that includes identifying assets, creating an architecture overview, decomposing the application, and identifying threats?

Keep studying — Building Effective Security Processes and Programs