SPLK-5002 · Question #2
In a Risk-Based Alerting implementation with Splunk Enterprise Security, which of the following best describes a risk factor?
The correct answer is B. A multiplier of risk that depends on the characteristics of the specific user or asset. In Risk-Based Alerting (RBA), a risk factor is a multiplier of risk applied based on the characteristics of a user or asset, such as criticality or sensitivity. This allows higher-risk entities to accumulate risk more quickly and ensures prioritization aligns with business…
Question
In a Risk-Based Alerting implementation with Splunk Enterprise Security, which of the following best describes a risk factor?
Options
- AA SOAR action that is drawn from annotations.
- BA multiplier of risk that depends on the characteristics of the specific user or asset.
- CA tool to enable risk data model acceleration.
- DAn event that modifies risk based on the characteristics of the specific user or asset.
How the community answered
(31 responses)- A13% (4)
- B77% (24)
- C6% (2)
- D3% (1)
Explanation
In Risk-Based Alerting (RBA), a risk factor is a multiplier of risk applied based on the characteristics of a user or asset, such as criticality or sensitivity. This allows higher-risk entities to accumulate risk more quickly and ensures prioritization aligns with business impact.
Topics
Community Discussion
No community discussion yet for this question.