A government contractor must comply with NIST SP 800-53 controls for their information system. They use Splunk for logging and monitoring. Which Splunk capability is most directly relevant to meeting the 'Audit and Accountability' (AU) control family?

Using machine learning for anomaly detection

Creating dashboards for management review

Collecting and indexing logs from all critical systems

Configuring role-based access control for Splunk users

A SOC wants to use Splunk to map their detections to MITRE ATT&CK techniques. They want to identify gaps in coverage. Which Splunk feature is most useful for this?

Splunk Enterprise Security's MITRE ATT&CK dashboard

Splunk's data onboarding wizards

Splunk's search head clustering

SplunkCertified Cybersecurity Defense Analyst

Domain 1Objective 2

Recognize Common Cyber Industry Controls, Standards and Frameworks and How Splunk Incorporates Those Frameworks. SPLK-5001 Practice Questions (Page 5)

Part of the The Cyber Landscape, Frameworks, and Standards domain, which accounts for 10% of the SPLK-5001 exam. Splunk does not publish an official question count, but from its 75-minute exam (~30–50 total, ~3–5 in this domain), expect 1–2 from this objective — we provide 22 practice questions to prepare you well beyond it. (estimate)

22questions here

5free pages

4concepts

10%of the exam

Questions 21–22

21application · medium
A government contractor must comply with NIST SP 800-53 controls for their information system. They use Splunk for logging and monitoring. Which Splunk capability is most directly relevant to meeting the 'Audit and Accountability' (AU) control family?
Select an answer first
22application · medium
A SOC wants to use Splunk to map their detections to MITRE ATT&CK techniques. They want to identify gaps in coverage. Which Splunk feature is most useful for this?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SPLK-5001

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Splunk. “SPLK-5001” is a trademark of its owner, used for identification only.

Recognize Common Cyber Industry Controls, Standards and Frameworks and How Splunk Incorporates Those Frameworks. SPLK-5001 Practice Questions (Page 5)

Questions 21–22

A government contractor must comply with NIST SP 800-53 controls for their information system. They use Splunk for logging and monitoring. Which Splunk capability is most directly relevant to meeting the 'Audit and Accountability' (AU) control family?

A SOC wants to use Splunk to map their detections to MITRE ATT&CK techniques. They want to identify gaps in coverage. Which Splunk feature is most useful for this?

Keep studying — The Cyber Landscape, Frameworks, and Standards