nerdexam
Splunk

SPLK-5002 · Question #97

What is one method used in ESCU content to calculate a risk score when creating a detection that uses the Risk Analysis adaptive response action?

The correct answer is C. Risk Score = (Risk Object Priority * Confidence/100). In Enterprise Security Content Update (ESCU), when creating a detection that uses the Risk Analysis adaptive response action, the risk score is calculated as: Risk Score = (Risk Object Priority * Confidence / 100) This formula weights the inherent priority of the risk object by…

Custom Content Development

Question

What is one method used in ESCU content to calculate a risk score when creating a detection that uses the Risk Analysis adaptive response action?

Options

  • ARisk Score = (Impact * Confidence/100)
  • BRisk Score = (Risk Object Severity * Confidence/100)
  • CRisk Score = (Risk Object Priority * Confidence/100)
  • DRisk Score = (Impact * Priority/100)

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    4% (1)
  • C
    81% (21)
  • D
    12% (3)

Explanation

In Enterprise Security Content Update (ESCU), when creating a detection that uses the Risk Analysis adaptive response action, the risk score is calculated as: Risk Score = (Risk Object Priority * Confidence / 100) This formula weights the inherent priority of the risk object by the confidence level of the

Topics

#risk scoring#ESCU#Risk Analysis adaptive response#impact confidence

Community Discussion

No community discussion yet for this question.

Full SPLK-5002 Practice