Examice

Exam SPLK-3001 All QuestionsBrowse all questions from this exam

Go to Exam

Question 93

How does ES know local customer domain names so it can detect internal vs. external emails?

Web and email domain names are set in General –> General Configuration.

ES extracts local email and web domains automatically from SMTP and HTTP logs.

ES uses the User Activity index and applies machine learning to determine internal and external domains.

The Corporate Web and Email Domain Lookups are edited during initial configuration.

Correct Answer: D

ES (Enterprise Security) can determine local customer domain names by editing the Corporate Web and Email Domain Lookups during initial configuration. This enables the system to differentiate between internal and external emails.

Discussion

fuchi_pixelOption: D

D is correct. Page 140 "Administering Splunk ES 7.1" Edit any of the Domain lookups: – Corporate Web Domains – Corporate Email Domains – Cloud Domains (external vendor sites)

hesbeeOption: D

D is the correct answer