Splunk Enterprise Security Certified Admin — Question 7
Both `Recommended Actions` and `Adaptive Response Actions` use adaptive response. How do they differ?
Answer options
- A. Recommended Actions show a textual description to an analyst, Adaptive Response Actions show them encoded.
- B. Recommended Actions show a list of Adaptive Responses to an analyst, Adaptive Response Actions run them automatically.
- C. Recommended Actions show a list of Adaptive Responses that have already been run, Adaptive Response Actions run them automatically.
- D. Recommended Actions show a list of Adaptive Resposes to an analyst, Adaptive Response Actions run manually with analyst intervention.
Correct answer: D
Explanation
The correct answer is D because Recommended Actions provide options for analysts to review, while Adaptive Response Actions necessitate analyst intervention for execution. The other options incorrectly describe the functionalities of these actions, either misrepresenting their automation or the nature of their display to analysts.