Splunk Enterprise Security Certified Admin — Question 23

`10.22.63.159`, `websvr4`, and `00:26:08:18: CF:1D` would be matched against what in ES?

Answer options

• A. A user.
• B. A device.
• C. An asset.
• D. An identity.

Correct answer: C

Explanation

The correct answer is C, as `10.22.63.159`, `websvr4`, and `00:26:08:18:CF:1D` are identifiers related to network resources that can be categorized as assets within an Enterprise Security framework. Options A, B, and D do not accurately describe the nature of these identifiers, which are specifically linked to assets rather than users, devices, or identities.