Splunk Exam SPLK-3001 Topic 4 Question 104 Discussion

Actual exam question for Splunk's SPLK-3001 exam

Question #: 104
Topic #: 4

Which of the following lookup types in Enterprise Security contains information about known hostile IP addresses?

ASecurity domains.

BThreat intel.

CAssets.

DDomains.

Show Suggested Answer

Suggested Answer: B

by Dan at Dec 05, 2024, 09:19 PM

Limited Time Offer

25%

Off

Contribute your Thoughts:

Submit Cancel

4 days ago

I believe Threat intel is the best option because it specifically deals with threats like hostile IP addresses.

upvoted 0 times

...

13 days ago

I'm not sure, but I think it could also be A) Security domains.

upvoted 0 times

...

15 days ago

I agree with Vanesa, Threat intel makes sense for known hostile IP addresses.

upvoted 0 times

...

19 days ago

I think the answer is B) Threat intel.

upvoted 0 times

...

19 days ago

Threat intel, duh! That's where they keep the blacklist of all the bad IP addresses.

upvoted 0 times

...