What is the first step in a basic risk assessment process?

Identify assets and their value

Document the risk assessment report

A company runs a customer-facing web portal that handles financial transactions. To improve security, the CISO wants to enforce multi-factor authentication (MFA) for all users. However, the customer support team reports that this will slow down login times and frustrate customers. The CISO must balance security with user experience. What is the most appropriate action?

Implement MFA for all users immediately, regardless of impact.

Do not implement MFA because it will frustrate customers.

Implement MFA only for internal employees, not customers.

Implement MFA for high-risk actions, such as large transactions, and keep single-factor for low-risk actions.

SplunkCertified Cybersecurity Defense Analyst

Domain 1Objective 3

Describe Key Security Concepts Surrounding Information Assurance Including Confidentiality, Integrity and Availability and Basic Risk Management. SPLK-5001 Practice Questions (Page 3)

Part of the The Cyber Landscape, Frameworks, and Standards domain, which accounts for 10% of the SPLK-5001 exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

7concepts

10%of the exam

Questions 11–15

11application · easy
During a risk assessment, the security team identifies that a disgruntled employee could potentially steal sensitive data. In risk terminology, what is the disgruntled employee?
Select an answer first
12application · easy
During a risk assessment, the security team notes that a web application has a known unpatched vulnerability. An attacker could exploit this to gain unauthorized access. In risk terminology, what is the unpatched vulnerability?
Select an answer first
13foundation · easy
What is the first step in a basic risk assessment process?
Select an answer first
14expert · hard
A company runs a customer-facing web portal that handles financial transactions. To improve security, the CISO wants to enforce multi-factor authentication (MFA) for all users. However, the customer support team reports that this will slow down login times and frustrate customers. The CISO must balance security with user experience. What is the most appropriate action?
Select an answer first
15application · easy
A company's risk assessment identifies that a critical server has a high likelihood of being compromised due to a known vulnerability. The impact of a compromise is rated as high because the server contains sensitive data. What is the risk level?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SPLK-5001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-5001” is a trademark of its owner, used for identification only.

Describe Key Security Concepts Surrounding Information Assurance Including Confidentiality, Integrity and Availability and Basic Risk Management. SPLK-5001 Practice Questions (Page 3)

Questions 11–15

During a risk assessment, the security team identifies that a disgruntled employee could potentially steal sensitive data. In risk terminology, what is the disgruntled employee?

During a risk assessment, the security team notes that a web application has a known unpatched vulnerability. An attacker could exploit this to gain unauthorized access. In risk terminology, what is the unpatched vulnerability?

What is the first step in a basic risk assessment process?

A company's risk assessment identifies that a critical server has a high likelihood of being compromised due to a known vulnerability. The impact of a compromise is rated as high because the server contains sensitive data. What is the risk level?

Keep studying — The Cyber Landscape, Frameworks, and Standards