Splunk Exam SPLK-3003 Topic 6 Question 10 Discussion

Actual exam question for Splunk's SPLK-3003 exam

Question #: 10
Topic #: 6

Consider the search shown below.

What is this search's intended function?

ATo return all the web_log events from the web index that occur two hours before and after the most recent high severity, denied event found in the firewall index.

BTo find all the denied, high severity events in the firewall index, and use those events to further search for lateral movement within the web index.

CTo return all the web_log events from the web index that occur two hours before and after all high severity, denied events found in the firewall index.

DTo search the firewall index for web logs that have been denied and are of high severity.

Show Suggested Answer

Suggested Answer: C

by Jade at May 05, 2022, 07:39 PM

Limited Time Offer

25%

Off

Get Premium SPLK-3003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!