Which Splunk ES content type allows analysts to visually track the status of a security control or process, such as incident response stages?

• A. Investigation timeline
• B. Correlation search
• C. Glass table
• D. Data model

Whovert's CEO has stated that the company's number one priority is to operate more efficiently and move faster. As an architect, what solution can best help the SOC align to this priority?

• A. CASB
• B. CI/CD or WORM
• C. TIP
• D. SOAR

Which approach most effectively minimizes the risk of secret exposure in CI/CD pipelines while also supporting automated deployments?

• A. Hardcoding secrets in configuration files that are excluded from version control using .gitignore.
• B. Saving secrets as environment variables in shared CI/CD runner configuration files.
• C. Using a dedicated secrets management service to provide secrets only to authorized jobs.
• D. Encrypting secrets and storing them in the same source code repository, then decrypting them at runtime.

Buttercup Games is trying to address control NIST AC-2(7):
ACCOUNT MANAGEMENT | PRIVILEGED USER ACCOUNTS
(a) Establish and administer privileged user accounts in accordance
with [Selection: a role-based access scheme; an attribute-based access
scheme];
(b) Monitor privileged role or attribute assignments;
(c) Monitor changes to roles or attributes; and
(d) Revoke access when privileged role or attribute assignments are no
longer appropriate.
What is the best method to address this control?

• A. Deploy a DLP solution
• B. Enable MFA on all accounts
• C. Collect and monitor IAM logs
• D. Deploy hardware tokens to all privileged users