Discuss Splunk SPLK-3001 Exam Topic 6 Question 65

How does ES know local customer domain names so it can detect internal vs. external emails?

AWeb and email domain names are set in General -> General Configuration.

BES uses the User Activity index and applies machine learning to determine internal and external domains.

CThe Corporate Web and Email Domain Lookups are edited during initial configuration.

DES extracts local email and web domains automatically from SMTP and HTTP logs.

Suggested Answer: C

Get Premium SPLK-3001 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Hermila 11 months ago

I always thought it was B, but now I'm not so sure.

Tu 11 months ago

I disagree, D seems more accurate since it pulls from logs.

Ludivina 12 months ago

Wait, does ES really use machine learning for this? Sounds fancy!

Ezekiel 12 months ago

Definitely A, that's where you configure domain names!

Lenna 12 months ago

I think it's C, those lookups are set up during config.

Willow 1 year ago

I believe ES pulls local domains from logs, but I’m not sure if it’s specifically from SMTP and HTTP logs or if it’s something else entirely.

Kenneth 1 year ago

I vaguely remember that the Corporate Web and Email Domain Lookups are important during setup, but I’m not confident if that’s the answer here.

Aron 1 year ago

I feel like there was a practice question about how ES identifies internal versus external emails, and I think it might have involved machine learning, but I can't recall the specifics.

Loise 1 year ago

I think I remember something about configuring domains in the General settings, but I'm not entirely sure if that's the right place for local customer domains.

Tiffiny 1 year ago

Hmm, I'm not entirely sure about this one. The options all sound a bit technical and I'm not super familiar with the MML commands for 5G networks. I'll have to think this through carefully.

Stephaine 1 year ago

Okay, let me see. I think the key inputs are the time since the user was last chosen to create a block, the size of their stake, and their overall activity on the blockchain. The age of the account doesn't seem directly relevant.

Marjory 1 year ago

I'm a bit confused on this one. I think I'd want to present both the list of noncompliance findings and an overall evaluation, but I'm not sure if that's the "best" approach according to the question. Guess I'll have to think it through carefully.

Splunk SPLK-3001 Exam - Topic 6 Question 65 Discussion