Which of the following is an adaptive action that is configured by default for ES?

The correct answer is B. Create notable event. https://docs.splunk.com/Documentation/ES/6.6.2/Admin/Configureadaptiveresponse#Included_ad aptive_response_actions

Risk Analysis and Adaptive Response

Question

Options

ACreate new asset
BCreate notable event
CCreate investigation
DCreate new correlation search

How the community answered

(25 responses)

B
92% (23)
C
4% (1)
D
4% (1)

Explanation

https://docs.splunk.com/Documentation/ES/6.6.2/Admin/Configureadaptiveresponse#Included_ad aptive_response_actions

Topics

#adaptive actions#create notable event#default configuration

Community Discussion

No community discussion yet for this question.

Full SPLK-3001 Practice