Splunk IT Service Intelligence Certified Admin — Question 15

What are indicators?

Answer options

• A. Artifact values that can appear in multiple containers.
• B. Action results that may appear in multiple containers.
• C. Artifact values with special security significance.
• D. Action result items that determine the flow of execution in a playbook.

Correct answer: C

Explanation

The correct answer is C because indicators are specifically defined as artifact values that have special security significance, helping to highlight potential threats. Options A and B are incorrect as they do not capture the security aspect, and option D, while related to actions in a playbook, does not pertain to the concept of indicators.