フリー問題

Splunk Certified Cybersecurity Defense Engineer のフリー問題 13 / 20 問目

問題文

Several detections must run at exact times because downstream reporting depends on them, while others can tolerate being delayed. Which setting expresses that difference, and what is its relationship to the schedule window?

選択肢

  1. The scheduling option; choosing continuous for the time-critical ones guarantees they run at the exact scheduled moment, whereas real time leaves the moment to the scheduler within each window that it opens.
  2. The schedule priority; raising it makes the scheduler run that detection ahead of others, and because priority overrides the window there is no need to configure both on the same detection.
  3. The schedule window; setting it to zero on the time-critical detections and to auto on the others achieves the same effect, and the priority setting is only relevant for real-time searches, which makes the window the single setting an engineer has to reason about.
  4. The cron schedule; giving the time-critical detections an offset of a few seconds past the minute boundary removes contention because most detections are scheduled on the boundary and the offset spreads the load across the minute.

解答・解説を確認するには

正解と解説の確認、回答の記録には無料登録が必要です。登録すると演習モードでフリー問題に回答し、正誤と解説をその場で確認できます。