Splunk Exam SPLK-3001 Topic 2 Question 86 Discussion

Actual exam question for Splunk's SPLK-3001 exam

Question #: 86
Topic #: 2

Which of the following lookup types in Enterprise Security contains information about known hostile IP addresses?

ASecurity domains.

BThreat intel.

CAssets.

DDomains.

Show Suggested Answer

Suggested Answer: B

by Pearlene at Apr 27, 2024, 06:40 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

6 months ago

Okay, B makes more sense now. Thanks, guys!

upvoted 0 times

...

6 months ago

Yeah, Threat intel is specific to hostile IPs.

upvoted 0 times

...

6 months ago

No, Security domains usually refer to broader categories.

upvoted 0 times

...

7 months ago

Wait, what about Security domains? Could it be A?

upvoted 0 times

...

7 months ago

Agreed, Threat intel does seem logical.

upvoted 0 times

...

7 months ago

I think it's B) Threat intel.

upvoted 0 times

...