Splunk Exam SPLK-3001 Topic 1 Question 82 Discussion

Actual exam question for Splunk's SPLK-3001 exam

Question #: 82
Topic #: 1

[All SPLK-3001 Questions]

Which of the following actions would not reduce the number of false positives from a correlation search?

AReducing the severity.

BRemoving throttling fields.

CIncreasing the throttling window.

DIncreasing threshold sensitivity.

Show Suggested Answer

Suggested Answer: D

by Cecil at Mar 06, 2024, 04:48 AM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

2 days ago

But wouldn't removing throttling fields also help in reducing false positives?

upvoted 0 times

...

3 days ago

I agree with Shayne, increasing threshold sensitivity could potentially increase false positives.

upvoted 0 times

...

7 days ago

I think increasing threshold sensitivity would not reduce false positives.

upvoted 0 times

...