Which of the following steps will make the Threat Activity dashboard the default landing page in ES?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
C
Explanation
:
Q: 2
Which lookup table does the Default Account Activity Detected correlation search use to flag known
default accounts?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
C
Explanation
:
Q: 3
Following the installation of ES, an admin configured users with the ess_user role the ability to close
notable events.
How would the admin restrict these users from being able to change the status of Resolved notable
events to Closed?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
C
Explanation
:
Q: 4
What is the main purpose of the Dashboard Requirements Matrix document?
When investigating, what is the best way to store a newly-found IOC?
Options
Discussion
No comments yet. Be the first to comment.
Be respectful. No spam.
Correct Answer:
C
Explanation
:
Q: 11
When creating custom correlation searches, what format is used to embed field values in the title,
description, and drill-down fields of a notable event?
