Splunk
SPLK-5001 · Question #111
Which Splunk ES feature detects complex behavior over a "period of time" instead of "point in time" alerting?
The correct answer is B. Risk Based Alerting (RBA). Risk Based Alerting evaluates and accumulates risk scores for entities over a defined time window, enabling detection of evolving threats across a period rather than at a single point in
Threat Detection and Alerting
Question
Which Splunk ES feature detects complex behavior over a "period of time" instead of "point in time" alerting?
Options
- ANotable Based Alerting (NBA)
- BRisk Based Alerting (RBA)
- CAdaptive Actions
- DAnalytic Stories
How the community answered
(16 responses)- A6% (1)
- B88% (14)
- D6% (1)
Explanation
Risk Based Alerting evaluates and accumulates risk scores for entities over a defined time window, enabling detection of evolving threats across a period rather than at a single point in
Topics
#Risk Based Alerting#RBA#Enterprise Security#behavioral detection
Community Discussion
No community discussion yet for this question.