Online Access Free SPLK-3001 Exam Questions

What feature of Enterprise Security downloads threat intelligence data from a web server?

• A.Threat Intelligence Parser
• B.Threat Service Manager
• C.Threat Intelligence Enforcement
• D.Threat Download Manager

An administrator is provisioning one search head prior to installing ES.
What are the reference minimum requirements for OS, CPU, and RAM for that machine?

• A.OS: 64 bit, RAM: 32 MB, CPU: 16 cores
• B.OS: 64 bit, RAM: 32 MB, CPU: 12 cores
• C.OS: 32 bit, RAM: 16 MB, CPU: 12 cores
• D.OS: 64 bit, RAM: 12 MB, CPU: 16 cores

Which correlation search feature is used to throttle the creation of notable events?

• A.Schedule window.
• B.Window interval.
• C.Window duration.
• D.Schedule priority.

After managing source types and extracting fields, which key step comes next in the Add-On Builder?

• A.Create alert actions.
• B.Validate and package.
• C.Map to data models.
• D.Configure data collection.

What is the first step when preparing to install ES?

• A.Install ES.
• B.Determine the hardware required.
• C.Determine the size and scope of installation.
• D.Determine the data sources used.