Splunk Exam SPLK-2003 Topic 1 Question 45 Discussion

Actual exam question for Splunk's SPLK-2003 exam

Question #: 45
Topic #: 1

[All SPLK-2003 Questions]

Which of the following actions will store a compressed, secure version of an email attachment with suspected malware for future analysis?

ACopy/paste the attachment into a note.

BAdd a link to the file in a new artifact.

CUse the Files tab on the Investigation page to upload the attachment.

DUse the Upload action of the Secure Store app to store the file in the database.

Show Suggested Answer

Suggested Answer: B

by Stephaine at Jul 03, 2024, 09:26 PM

Limited Time Offer

25%

Off

Get Premium SPLK-2003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Elke

3 months ago

A link to the file? Nah, man, that's just asking for trouble. Gotta use that Secure Store app to keep it safe.

upvoted 0 times

Leonor

1 months ago

Definitely, better to be safe than sorry when dealing with malware.

upvoted 0 times

...

Ahmed

1 months ago

I agree, it's the safest option for storing suspicious attachments.

upvoted 0 times

...

Matthew

1 months ago

Yeah, using the Secure Store app is definitely the way to go.

upvoted 0 times

...

Svetlana

3 months ago

I'm not sure, but I think D) Use the Upload action of the Secure Store app could also be a good option for storing the file securely.

upvoted 0 times

...

Frankie

3 months ago

I agree with Ruthann, option C seems like the best choice for storing a secure version of the email attachment.

upvoted 0 times

...

Alverta

3 months ago

Haha, copying and pasting the attachment into a note? What is this, the 90s? Definitely going with option D!

upvoted 0 times

Lenny

2 months ago

User 2: Lenny is right, option D is the way to go. Use the Upload action of the Secure Store app to store the file in the database.

upvoted 0 times

...

Sharmaine

2 months ago

User 1: Haha, copying and pasting the attachment into a note? What is this, the 90s?

upvoted 0 times

...

Ruthann

3 months ago

I think the answer is C) Use the Files tab on the Investigation page to upload the attachment.

upvoted 0 times

...

Lyndia

3 months ago

I'm not sure, but D) using the Upload action of the Secure Store app sounds secure too.

upvoted 0 times

...

Quentin

3 months ago

I'm pretty sure the Files tab on the Investigation page is the best choice here. That's where I usually upload files for analysis.

upvoted 0 times

Ashley

2 months ago

D) Use the Upload action of the Secure Store app to store the file in the database.

upvoted 0 times

...

Cecil

2 months ago

C) Use the Files tab on the Investigation page to upload the attachment.

upvoted 0 times

...

Rikki

2 months ago

B) Add a link to the file in a new artifact.

upvoted 0 times

...

Nickie

2 months ago

A) Copy/paste the attachment into a note.

upvoted 0 times

...

Lizbeth

3 months ago

I agree with Nana, storing the attachment in the Files tab makes sense for future analysis.

upvoted 0 times

...

Carmelina

3 months ago

Option D seems like the way to go. The Secure Store app is designed for storing potentially malicious files securely.

upvoted 0 times

...

Nana

3 months ago

I think the answer is C) Use the Files tab on the Investigation page to upload the attachment.

upvoted 0 times

...