SPLK-5002 · Question #97
What is one method used in ESCU content to calculate a risk score when creating a detection that uses the Risk Analysis adaptive response action?
The correct answer is C. Risk Score = (Risk Object Priority * Confidence/100). In Enterprise Security Content Update (ESCU), when creating a detection that uses the Risk Analysis adaptive response action, the risk score is calculated as: Risk Score = (Risk Object Priority * Confidence / 100) This formula weights the inherent priority of the risk object by…
Question
What is one method used in ESCU content to calculate a risk score when creating a detection that uses the Risk Analysis adaptive response action?
Options
- ARisk Score = (Impact * Confidence/100)
- BRisk Score = (Risk Object Severity * Confidence/100)
- CRisk Score = (Risk Object Priority * Confidence/100)
- DRisk Score = (Impact * Priority/100)
How the community answered
(26 responses)- A4% (1)
- B4% (1)
- C81% (21)
- D12% (3)
Explanation
In Enterprise Security Content Update (ESCU), when creating a detection that uses the Risk Analysis adaptive response action, the risk score is calculated as: Risk Score = (Risk Object Priority * Confidence / 100) This formula weights the inherent priority of the risk object by the confidence level of the
Topics
Community Discussion
No community discussion yet for this question.