フリー問題

問題文

An organization wants Secure Access security events to arrive in Splunk. Which setup does the documentation describe?

選択肢

1. A webhook that holds the URL of the Splunk HTTP listener with basic credentials, plus a third-party integration that selects push security events, is the arrangement that the guide lays out for feeding an analytics platform.
2. A scheduled export to CSV that Splunk fetches over HTTPS on its own timetable, which is why the events arrive there in batches rather than as they happen, is the arrangement that the guide lays out for feeding an analytics platform.
3. A forwarder that is installed on the Secure Access side and pushes the raw log files straight into the Splunk indexers, with no webhook or integration in between, is the arrangement that the guide lays out for feeding an analytics platform.
4. A direct database connection from Splunk to the Secure Access report store, using read-only analyst account credentials, is the arrangement that the guide lays out for feeding an analytics platform.