Câu 1: SPLK-5003: Splunk Certified Cybersecurity Defense Architect

Sophia manages data ingestion for her organization’s SIEM. The data science team wants to perform real-time analytics on security data and asks Sophia for a copy of all new endpoint telemetry from the current point forward. The SIEM currently collects 15TB of endpoint telemetry every day. Which of the following solutions can Sophia use to best help the data science team?

1. A. Export the last 12 months of telemetry data from the SIEM in OCSF.
2. B. Use a message bus to send data to both the SIEM and data science team. — đáp án hiện tại
3. C. Export the last 12 months of telemetry data from the SIEM in JSON format.
4. D. Configure the SIEM to export a CSV report of all new telemetry data every night.