IT認証試験問題集
GOWUKAKU｜IT認定資格の最新の試験問題集（PDF版・無料サンプル問題）を提供しています
 ホームページ / Splunk 問題集 / SPLK-5001 問題集  / SPLK-5001 問題練習

Splunk SPLK-5001 問題練習

Splunk Certified Cybersecurity Defense Analyst 試験

最終更新日: 2026/10/14　 収録内容確認済　｜　PDF問題集: 全 66 問収録

【仕様案内】：SPLK-5001 問題集（PDF版）は日本語版＆英語版の2言語セットに対応しております（日本語版が準備中の科目は英語版を即時ダウンロードのうえ、日本語版は準備完了次第ご登録メールへ自動送付いたします）。

本ページでは問題集の無料サンプル問題を公開しており、出題形式や現在の理解度を確認することができます。

全66問を収録したPDF版は、SPLK-5001 問題集からご確認いただけます。

 / 3

Question No : 1
When searching in Splunk, which of the following SPL commands can be used to run a subsearch across every field in a wildcard field list?

正解:

Question No : 2
Why is tstats more efficient than stats for large datasets?

正解:

Question No : 3
A threat hunter generates a report containing the list of users who have logged in to a particular database during the last 6 months, along with the number of times they have each authenticated. They sort this list and remove any user names who have logged in more than 6 times. The remaining names represent the users who rarely log in, as their activity is more suspicious. The hunter examines each of these rare logins in detail.
This is an example of what type of threat-hunting technique?

正解:

Question No : 4
An analyst would like to test how certain Splunk SPL commands work against a small set of data.
What command should start the search pipeline if they wanted to create their own data instead of utilizing data contained within Splunk?

正解:

Question No : 5
A Risk Notable Event has been triggered in Splunk Enterprise Security, an analyst investigates the alert, and determines it is a false positive.
What metric would be used to define the time between alert creation and close of the event?

正解:

Question No : 6
Which metric would track improvements in analyst efficiency after dashboard customization?

正解:

Question No : 7
A Risk Rule generates events on Suspicious Cloud Share Activity and regularly contributes to confirmed incidents from Risk Notables. An analyst realizes the raw logs these events are generated from contain information which helps them determine what might be malicious.
What should they ask their engineer for to make their analysis easier?

正解:

Question No : 8
While the top command is utilized to find the most common values contained within a field, a Cyber Defense Analyst hunts for anomalies.
Which of the following Splunk commands returns the least common values?

正解:

Question No : 9
The following list contains examples of Tactics, Techniques, and Procedures (TTPs):
• Exploiting a remote service
• Extend movement
• Use EternalBlue to exploit a remote SMB server
In which order are they listed below?

正解:

Question No : 10
Which of the following roles is commonly responsible for selecting and designing the infrastructure and tools that a security analyst utilizes to effectively complete their job duties?

正解:

Question No : 11
What Splunk feature would enable enriching public IP addresses with ASN and owner information?

正解:

Question No : 12
What is the first phase of the Continuous Monitoring cycle?

正解:

Question No : 13
What is the main difference between hypothesis-driven and data-driven Threat Hunting?

正解:

Question No : 14
The field file_acl contains access controls associated with files affected by an event.
In which data model would an analyst find this field?

正解:

Question No : 15
Which of the following use cases is best suited to be a Splunk SOAR Playbook?

正解:

 / 3
Splunk
SPLK-5003 問題集