Splunk Observability Cloud Certified Metrics User — Question 69
Which of the Enterprise Security frameworks provides additional automatic context and correlation to fields that exist within raw data?
Answer options
- A. Asset and Identity
- B. Threat Intelligence
- C. Adaptive Response
- D. Risk
Correct answer: A
Explanation
The correct answer is A, Asset and Identity, as it enhances the understanding of raw data by providing additional context and correlation. The other options do not focus on augmenting raw data in the same manner; Threat Intelligence deals with external threat data, Adaptive Response relates to responding to incidents, and Risk focuses on assessing potential threats.