Splunk
SPLK-5001 · Question #102
Which dashboard in Enterprise Security would an analyst use to generate a report on users who are currently on a watchlist?
The correct answer is B. Identity Tracker. The Identity Tracker dashboard in Splunk Enterprise Security lists users currently on watchlists, letting analysts quickly report on their status and activity.
Incident Investigation and Response
Question
Which dashboard in Enterprise Security would an analyst use to generate a report on users who are currently on a watchlist?
Options
- AAccess Tracker
- BIdentity Tracker
- CIdentity Center
- DAccess Center
How the community answered
(26 responses)- B88% (23)
- C8% (2)
- D4% (1)
Explanation
The Identity Tracker dashboard in Splunk Enterprise Security lists users currently on watchlists, letting analysts quickly report on their status and activity.
Topics
#Enterprise Security dashboards#Identity Tracker#watchlist#user monitoring
Community Discussion
No community discussion yet for this question.