Recognize Common Cyber Industry Controls, Standards and Frameworks and How Splunk Incorporates Those Frameworks. SPLK-5001 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A healthcare organization must comply with regulations that require a formal information security management system (ISMS) with documented policies and risk assessments. They want to use Splunk to support their compliance evidence. Which standard should they align with?

   • ACIS Controls
   • BNIST CSF
   • CISO 27001
   • DMITRE ATT&CK
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A security operations team is adopting the NIST Cybersecurity Framework (CSF) and wants to use Splunk to support the 'Detect' function. They need to identify which Splunk capability most directly aligns with this function. Which capability should they prioritize?

   • AUsing Splunk to create dashboards for executive reporting on security posture
   • BDeploying Splunk Enterprise Security with correlation searches and notable events
   • CConfiguring Splunk to send alerts to a ticketing system for incident response
   • DImplementing Splunk's data onboarding to collect firewall logs
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A security team wants to use Splunk to support the 'Respond' function of the NIST CSF. They need to ensure that when a notable event is triggered, the right people are notified and the response is tracked. Which Splunk feature should they configure?

   • AData models for faster search
   • BDashboards for executive reporting
   • CCorrelation searches that create notable events
   • DWorkflow actions that send notifications and create tickets
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   An organization deploys a security information and event management (SIEM) system to collect and analyze logs to identify potential security incidents. Which type of security control does this deployment primarily represent?

   • ADetective control
   • BCompensating control
   • CCorrective control
   • DPreventive control
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which framework provides a knowledge base of adversary tactics and techniques based on real-world observations, organized by tactics such as Initial Access, Execution, and Persistence?

   • AISO/IEC 27001
   • BMITRE ATT&CK
   • CCIS Controls
   • DNIST CSF
   Reveal Solution Discussion Select an answer first