最新的Splunk Certified Cybersecurity Defense Architect - SPLK-5003免費考試真題
問題1
Buttercup Games is under a multi-vector phishing attack. This attack is leveraging the trust in a popular machine learning development platform. Malicious emails impersonating the platform's employees are directing developers to compromised models that contain embedded malware.
How can Buttercup Games leverage automated threat detection and orchestrate a response strategy for alerts when users report phishing emails? (Choose all that apply.)
How can Buttercup Games leverage automated threat detection and orchestrate a response strategy for alerts when users report phishing emails? (Choose all that apply.)
正確答案: B,C,D
說明：（僅 VCESoft 成員可見）
問題2
The security engineering team is in the process of deploying a new PAM solution. How do they ensure the organization is aware of the implementation and is authorized to move forward?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題3
Which of the following explains the benefits of modern cybersecurity defense data architectures using technologies such as data fabric, data lakes, message bus, and federated search?
正確答案: A
說明：（僅 VCESoft 成員可見）
問題4
Buttercup Games' incident response team has found IOC's related to the "Water Curse" campaign within their dev environment. Suspicious activity shows unauthorized access to developer workstations and potential manipulation to their source code in their version control software, GitLow. Given "Water Curse's" known weaponization of open-source dependencies, a forensic investigation is required to determine the breach's full scope, identify affected systems, and collect evidence. To support a forensic investigation into the "Water Curse" compromise at Buttercup Games, what triage steps should be performed? (Choose all that apply.)
正確答案: A,B,D
說明：（僅 VCESoft 成員可見）
問題5
A global enterprise is experiencing severe performance issues on their Splunk Enterprise Security Search Head due to an overwhelming number of distinct Asset and Identity lookups being performed simultaneously. What is the BEST architectural recommendation to resolve this performance issue?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題6
Which of the following are valid use cases for the MLTK (Machine Learning Toolkit) in a security context? (Choose all that apply.)
正確答案: A,B,C
說明：（僅 VCESoft 成員可見）
問題7
While working with the Security Automation team, an architect is reviewing a playbook that automates the handling of compromised credentials. The playbook contains the following stages:
- Examine account to ensure that it is not a service or control
account.
- Access all identity platforms and lock the user account.
- Revoke all current sessions (email, VPN, etc.).
The architect points out the potential for the compromised credentials to be used remotely again.
Which of the following actions need to be added to the playbook to alleviate this?
- Examine account to ensure that it is not a service or control
account.
- Access all identity platforms and lock the user account.
- Revoke all current sessions (email, VPN, etc.).
The architect points out the potential for the compromised credentials to be used remotely again.
Which of the following actions need to be added to the playbook to alleviate this?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題8
Where should high value, low volume data be stored for searching (i.e. alerts generated by security tools)?
正確答案: D
說明：（僅 VCESoft 成員可見）
問題9
Kevin is a security architect at a publicly traded company. Why does the business care about a Security Operations Center (SOC)'s metrics for Mean Time to Detect (MTTD)?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題10
What is a Software Bill of Materials (SBOM)?
正確答案: C
說明：（僅 VCESoft 成員可見）
問題11
A corporate cybersecurity team operating within the retail sector finds that its existing cyber threat intelligence (CTI) feeds are noisy and lack relevance to the environment. What type of CTI provider feed, shared among other retail organizations, should they consider to improve their CTI effectiveness?
正確答案: B
說明：（僅 VCESoft 成員可見）
問題12
An architect needs to justify a request for additional indexer capacity. Which piece of evidence is most directly relevant?
正確答案: C
說明：（僅 VCESoft 成員可見）
