Discuss Splunk SPLK-3001 Exam Topic 2 Question 47

How should an administrator add a new lookup through the ES app?

AUpload the lookup file in Settings -> Lookups -> Lookup Definitions

BUpload the lookup file in Settings -> Lookups -> Lookup table files

CAdd the lookup file to /etc/apps/SplunkEnterpriseSecuritySuite/lookups

DUpload the lookup file using Configure -> Content Management -> Create New Content -> Managed Lookup

Suggested Answer: D

Get Premium SPLK-3001 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Brianne 11 months ago

Not sure about A, I thought it was more complicated than that.

Sonia 11 months ago

Wait, can you really do it through D? That’s new to me!

Valda 12 months ago

C seems a bit outdated, right?

Fannie 12 months ago

I think B is the right way, not A.

Franklyn 12 months ago

Definitely option A, that's how I've always done it.

Ettie 1 year ago

I vaguely remember something about using the Configure menu for managed lookups, but I can't remember if that's the right approach for this question.

Brandon 1 year ago

I thought we had to add the lookup file directly to the file system, like in that /etc/apps path, but that seems a bit outdated.

Rasheeda 1 year ago

I remember practicing a similar question, and I feel like the right option might be about managing content, but I can't recall the exact steps.

Sylvia 1 year ago

I think we need to upload the lookup file in the Settings section, but I'm not sure if it's under Lookup Definitions or Lookup table files.

Mona 1 year ago

The key here is that the attacker doesn't know the IP address yet, so they need to bind to the empty string to listen on all available interfaces. I'm pretty sure D is the right answer.

Goldie 1 year ago

This looks like a tricky one. I'm not totally sure how to calculate the projected error, but I'll give it my best shot.

Cyndy 1 year ago

I'm a bit confused by this question. I know the IANA has something to do with internet addressing and protocols, but I'm not sure about the specific port range they manage. I'll have to review my notes on IANA responsibilities before answering.

Wilbert 1 year ago

I'm pretty sure this is about professional ethics. Looks like Maria is crossing a line by stating her opinion on guilt before legal proceedings.

Splunk SPLK-3001 Exam - Topic 2 Question 47 Discussion