Splunk Enterprise Security Certified Admin — Question 1

Which of the following are examples of sources for events in the endpoint security domain dashboards?

Answer options

• A. REST API invocations.
• B. Investigation final results status.
• C. Workstations, notebooks, and point-of-sale systems.
• D. Lifecycle auditing of incidents, from assignment to resolution.

Correct answer: C

Explanation

Option C is correct as workstations, notebooks, and point-of-sale systems are common endpoints that generate security events. The other options refer to processes or statuses related to security operations but do not represent direct sources of events in the endpoint security context.