Free Splunk SPLK-5001 Exam Questions

What is the first phase of the Continuous Monitoring cycle?

The Lockheed Martin Cyber Kill Chain® breaks an attack lifecycle into several stages. A threat actor modified the registry on a compromised Windows system to ensure that their malware would automatically run at boot time. Into which phase of the Kill Chain would this fall?

Which dashboard in Enterprise Security would an analyst use to generate a report on users who are currently on a watchlist? 

What is a common data source used for threat analysis in a SIEM environment?

What is a common characteristic of a supply chain attack?