Splunk IT Service Intelligence Certified Admin — Question 35

Which app allows a user to send Splunk Enterprise Security notable events to SOAR?

Answer options

• A. Splunk App for SOAR.
• B. Any of the integrated Splunk/SOAR Apps.
• C. Splunk App for SOAR Export.
• D. Splunk App for SOAR Reporting.

Correct answer: C

Explanation

The correct answer is C, as the Splunk App for SOAR Export is specifically designed to facilitate the transfer of notable events to SOAR. Options A, B, and D do not provide this specific functionality, making them incorrect in this context.