FirstTry
Cybersecurity Defense AnalystSplunk Certified Cybersecurity Defense Analyst

Practice Exam 2

5 of this form’s 66 questions, drawn from across its domains, free. The explanation on every one of them is free too, at every tier, and always will be.

  1. Question 1 of 5

    1-3The Cyber Landscape, Frameworks, and Standards

    An analyst asks what NIST includes in the process of risk management. Which set does the glossary name?

  2. Question 2 of 5

    2-4Threat and Attack Types, Motivations, and Tactics

    An engineer adds a custom framework under Unmanaged Annotations. What does Splunk say will not happen to it?

  3. Question 3 of 5

    3-2Defenses, Data Sources, and SIEM Best Practices

    An administrator turns off acceleration on a CIM model in the CIM Setup page, and it comes back on. Enterprise Security is installed. What does Splunk say is happening?

  4. Question 4 of 5

    4-1Investigation, Event Handling, Correlation, and Risk

    An analyst asks which routes Splunk names for being notified that a security incident needs investigating. Which set does the documentation give?

  5. Question 5 of 5

    5-2SPL and Efficient Searching

    An analyst asks what Splunk names as the key to fast searching. Which principle does the documentation give?

0 of 66 completed

0%

The other 61 questions are the rest of this form: same 75 minute clock, same 750 cut score, and the same explanation on every question, which is never behind the wall. Practice Exam 2 of 2 on Cybersecurity Defense Analyst.

What this exam covers

  • The Cyber Landscape, Frameworks, and Standards7 questions / 10% of the exam
  • Threat and Attack Types, Motivations, and Tactics13 questions / 20% of the exam
  • Defenses, Data Sources, and SIEM Best Practices13 questions / 20% of the exam
  • Investigation, Event Handling, Correlation, and Risk13 questions / 20% of the exam
  • SPL and Efficient Searching13 questions / 20% of the exam
  • Threat Hunting and Remediation7 questions / 10% of the exam

Checking what you already have access to.

Every question is original, written from the published objectives. We never reproduce, paraphrase, or imitate real exam content, and neither should anything else you study from.