What is data exfiltration?

The unauthorized transfer of data from a system or network to an external location.

The process of backing up data to a secure location.

The process of encrypting data to protect it from unauthorized access.

The deletion of data to prevent it from being accessed.

Which of the following is an example of a threat actor?

A software vulnerability that allows unauthorized access.

A firewall that blocks malicious traffic.

A cybercriminal group that conducts ransomware attacks.

A security policy that requires strong passwords.

What is an adversary in the context of cybersecurity?

A vulnerability that can be exploited by attackers.

A type of malware that encrypts data.

A security tool that detects and blocks attacks.

An entity that opposes or attacks an organization, often synonymous with threat actor.

SplunkCertified Cybersecurity Defense Analyst

Domain 2Objective 2

Define Common Terms Including Supply Chain Attack, Ransomware, Registry, Exfiltration, Social Engineering, DoS, DDoS, Bot and Botnet, C2, Zero Trust, Account Takeover, Email Compromise, Threat Actor, APT, Adversary. SPLK-5001 Practice Questions (Page 1)

Part of the Threat and Attack Types, Motivations, and Tactics domain, which accounts for 20% of the SPLK-5001 exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~6–10 in this domain), expect 1–2 from this objective — we provide 46 practice questions to prepare you well beyond it. (estimate)

46questions here

10free pages

15concepts

20%of the exam

15 Concepts in This Objective

Supply Chain Attack
Ransomware
Registry
Exfiltration
Social Engineering
Denial of Service (DoS)
Distributed Denial of Service (DDoS)
Bot and Botnet
Command and Control (C2)
Zero Trust
Account Takeover
Email Compromise
Threat Actor
Advanced Persistent Threat (APT)
Adversary

Questions 1–5

1foundation · easy
What is data exfiltration?
Select an answer first
2foundation · easy
Which of the following is an example of a threat actor?
Select an answer first
3foundation · easy
What is an adversary in the context of cybersecurity?
Select an answer first
4application · medium
A security analyst at a manufacturing firm discovers that a software update pushed by a third-party vendor's patch management tool contained malicious code. The vendor's own systems were compromised, and the attacker used the trusted update channel to deploy backdoors across multiple client organizations. Which term best describes this attack vector?
Select an answer first
5application · medium
A user reports that their corporate account has been used to send phishing emails to internal employees. The user claims they did not send the emails and that their password was recently exposed in a phishing attempt. Which term best describes the attack on the user's account?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-5001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-5001” is a trademark of its owner, used for identification only.

Define Common Terms Including Supply Chain Attack, Ransomware, Registry, Exfiltration, Social Engineering, DoS, DDoS, Bot and Botnet, C2, Zero Trust, Account Takeover, Email Compromise, Threat Actor, APT, Adversary. SPLK-5001 Practice Questions (Page 1)

Questions 1–5

What is data exfiltration?

Which of the following is an example of a threat actor?

What is an adversary in the context of cybersecurity?

A user reports that their corporate account has been used to send phishing emails to internal employees. The user claims they did not send the emails and that their password was recently exposed in a phishing attempt. Which term best describes the attack on the user's account?

Keep studying — Threat and Attack Types, Motivations, and Tactics