MENU
Which Splunk Enterprise Security framework provides a way to identify incidents from events and then manage the ownership, triage process, and state of those incidents?
Suggested Answer: B
Get Premium SPLK-5001 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
33 comments · newest first
NO
Noble
2 days ago
I agree, B) is the best choice. It focuses on triage and ownership.
RO
Rozella
7 days ago
I think it's B) Investigation Management. It makes sense for managing incidents.
MA
Markus
12 days ago
But C) is more about alerts, not managing the process like B) does.
HA
Harris
17 days ago
I’m leaning towards C) Notable Event. It highlights significant incidents.
ST
Stephaine
23 days ago
I agree, B) is the best choice. It focuses on triage and ownership.
QU
Quentin
28 days ago
I think it's B) Investigation Management. It makes sense for managing incidents.
DO
Dominic
1 month ago
True, but Investigation Management focuses on managing incidents directly.
EL
Elfriede
1 month ago
But what about C) Notable Event? It sounds relevant too.
TA
Tarra
1 month ago
I agree, it fits the description well.
SH
Shalon
2 months ago
I think it's B) Investigation Management.
CR
Cristen
2 months ago
B sounds right, but I’m surprised it’s not more widely known!
NI
Nikita
2 months ago
Wait, are we sure it's not D) Adaptive Response?
AR
Argelia
2 months ago
Totally agree with B! It’s all about managing incidents.
AR
Artie
2 months ago
I thought it was C) Notable Event.
EA
Earnestine
2 months ago
It's definitely B) Investigation Management!
AL
Alfred
3 months ago
A and D are important too, but B is the one for incidents.
DA
Daniela
3 months ago
Wait, are we sure about that? Seems tricky!
ME
Melissia
3 months ago
B is the right answer, no doubt!
EF
Effie
3 months ago
I thought it was C) Notable Event?
ME
Melvin
3 months ago
Definitely B) Investigation Management!
MI
Michell
4 months ago
A) Asset and Identity seems relevant too, though.
RO
Rossana
5 months ago
Wait, are we sure about that?
CH
Chaya
5 months ago
Totally agree with B!
AD
Adria
5 months ago
I thought it was C) Notable Event.
EV
Eva
6 months ago
It's definitely B) Investigation Management!
MI
Mila
6 months ago
I thought Adaptive Response was more about automating actions rather than managing incidents. This is tricky!
CL
Clay
6 months ago
I feel like Asset and Identity might be involved, but it seems more focused on tracking rather than managing incidents.
CO
Corrie
6 months ago
I remember something about Notable Events being related to incidents, but I can't recall if it manages the triage process.
CA
Cammy
6 months ago
I think it's the Investigation Management framework, but I'm not entirely sure. It sounds familiar from the practice questions we did.
DO
Dorian
6 months ago
D) Adaptive Response seems like it could fit, but I thought it was more about automating responses rather than managing incidents directly.
LE
Leslie
7 months ago
I feel like A) Asset and Identity is more about tracking assets rather than managing incidents. I could be wrong though.
RU
Ruthann
7 months ago
I remember something about C) Notable Event being related to incidents, but I can't recall if it covers the management aspect too.
CH
Christoper
7 months ago
I think the answer might be B) Investigation Management, but I'm not entirely sure. It sounds familiar from the practice questions we did.