Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Free Preparation Discussions
MENU
Splunk Exam SPLK-5001 Topic 4 Question 18 Discussion
Actual exam question for
Splunk's
SPLK-5001 exam
Question #: 18
Topic #: 4
[All SPLK-5001 Questions]
Topic #: 4
An analyst investigates an IDS alert and confirms suspicious traffic to a known malicious IP. What Enterprise Security data model would they use to investigate which process initiated the network connection?
Suggested Answer:
A
Currently there are no comments in this discussion, be the first to comment!