Exam SPLK-5001 Topic 4 Question 40 Discussion

Actual exam question for Splunk's SPLK-5001 exam
Question #: 40
Topic #: 4
A threat hunter generates a report containing the list of users who have logged in to a particular database during the last 6 months, along with the number of times they have each authenticated.
They sort this list and remove any user names who have logged in more than 6 times. The remaining names represent the users who rarely log in, as their activity is more suspicious. The hunter examines each of these rare logins in detail.
This is an example of what type of threat-hunting technique?

Suggested Answer: B Vote an answer

by Don at Oct 06, 2026, 12:51 AM

Limited Time Offer

15%

Off

Get Premium SPLK-5001 Questions as Interactive Self Test Engine or PDF

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Nick name: Submit Cancel
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
0
0
0
10