nerdexam
Splunk

SPLK-5002 · Question #9

How does Mission Control decipher which response template to assign to findings?

The correct answer is B. Response templates are assigned to specific incident types. In Mission Control, response templates are assigned to specific incident types. When a finding is generated and categorized under an incident type, the corresponding response template is automatically applied, ensuring consistency in investigation and response actions.

Splunk Basics

Question

How does Mission Control decipher which response template to assign to findings?

Options

  • AThis is determined when creating a detection in ES, which gets carried over to Mission Control.
  • BResponse templates are assigned to specific incident types.
  • CThe only way to configure this is with SOAR.
  • DMission Control uses AI to decipher which response templates are assigned.

How the community answered

(34 responses)
  • A
    3% (1)
  • B
    71% (24)
  • C
    9% (3)
  • D
    18% (6)

Explanation

In Mission Control, response templates are assigned to specific incident types. When a finding is generated and categorized under an incident type, the corresponding response template is automatically applied, ensuring consistency in investigation and response actions.

Topics

#Mission Control#response templates#incident types#ES workflow

Community Discussion

No community discussion yet for this question.

Full SPLK-5002 Practice