Splunk Certified Cybersecurity Defense Engineer Practice Questions - Splunk Certified Cybersecurity Defense Engineer (SPLK-5002) Exam

Access More Questions

A correlation search is firing 400 notables a day for the same Active Directory service account. Which configuration change reduces noise without disabling the rule?

Lower the cron schedule frequency to once per week Add throttling on the user field with a suitable window Switch the search to real-time mode Set the severity to informational

Correct Answer:

Add throttling on the user field with a suitable window

Access more questions from this quiz

Continue to Splunk Certified Cybersecurity Defense Engineer Practice Questions - Splunk Certified Cybersecurity Defense Engineer (SPLK-5002) Exam for more practice questions and the full quiz experience.

Access More Questions