Splunk Enterprise Security Certified Admin — Question 50

An administrator wants to ensure that none of the ES indexed data could be compromised through tampering.
What feature would satisfy this requirement?

Answer options

• A. Index consistency.
• B. Data integrity control.
• C. Indexer acknowledgement.
• D. Index access permissions.

Correct answer: B

Explanation

The correct answer is B, as data integrity control specifically focuses on ensuring that data remains accurate and unaltered. Options A and C do not directly address tampering; index consistency relates to maintaining uniformity, while indexer acknowledgement pertains to message confirmation. Option D deals with access restrictions, which can help prevent unauthorized access but does not prevent tampering of existing data.