nerdexam
Splunk

SPLK-5002 · Question #85

A cyber defense engineer plays a role in maintaining a secure SOAR Cloud configuration. Which network security statement is correct about SOAR Cloud?

The correct answer is C. The Automation Broker initiates an outbound SSL connection to Splunk Cloud, and also initiates. In Splunk SOAR Cloud, the Automation Broker is responsible for maintaining connectivity. It initiates an outbound SSL connection to Splunk Cloud (so no inbound firewall rules are needed) and also makes outbound connections to the managed endpoints to execute playbook actions

Security Automation and Orchestration

Question

A cyber defense engineer plays a role in maintaining a secure SOAR Cloud configuration. Which network security statement is correct about SOAR Cloud?

Options

  • AThe Automation Broker initiates an inbound SSL connection to Splunk Cloud, and also initiates an
  • BSplunk Cloud initiates an outbound SSL connection to both the Automation Broker and managed
  • CThe Automation Broker initiates an outbound SSL connection to Splunk Cloud, and also initiates
  • DThe Automation Broker initiates an outbound SSL connection to Splunk Cloud, and the managed

How the community answered

(27 responses)
  • A
    19% (5)
  • B
    7% (2)
  • C
    70% (19)
  • D
    4% (1)

Explanation

In Splunk SOAR Cloud, the Automation Broker is responsible for maintaining connectivity. It initiates an outbound SSL connection to Splunk Cloud (so no inbound firewall rules are needed) and also makes outbound connections to the managed endpoints to execute playbook actions

Topics

#SOAR Cloud#Automation Broker#SSL connections#network security

Community Discussion

No community discussion yet for this question.

Full SPLK-5002 Practice