Splunk Enterprise Security Certified Admin — Question 82
To observe what network services are in use in a network's activity overall, which of the following dashboards in Enterprise Security will contain the most relevant data?
Answer options
- A. Intrusion Center
- B. Protocol Analysis
- C. User Intelligence
- D. Threat Intelligence
Correct answer: B
Explanation
The correct answer is B, Protocol Analysis, as it specifically focuses on analyzing network protocols, which directly reflects the network services in use. The other options, while relevant to security, do not provide as comprehensive a view of network services: A focuses on intrusion detection, C emphasizes user behavior, and D deals with threat information.