SPLK-5001 Cyber Landscape And Industry Frameworks Practice Question
You are integrating Splunk with the CIS Benchmarks. Which TWO of the following configurations are necessary to report on 'Secure Configuration' of endpoints?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enablement of the 'Splunk App for CIS Benchmarks'.
To report on CIS benchmarks, you need to collect the configuration data and have a mechanism to compare it against the expected state (the benchmark).
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Configure all logs to use the 'Syslog' protocol only.
Why it's wrong here
Splunk supports multiple ingestion methods; Syslog is not a requirement for CIS compliance.
- ✓
Enablement of the 'Splunk App for CIS Benchmarks'.
Why this is correct
This app provides the logic to compare incoming configuration data against known CIS standards.
- ✗
Install a third-party antivirus solution.
Why it's wrong here
This is a security control, not a mechanism for CIS reporting.
- ✓
Deployment of the Splunk Universal Forwarder on target endpoints.
Why this is correct
You must collect the log or configuration data from the endpoint to perform a check.
- ✗
Configure the index to 'Hot/Warm' storage only.
Why it's wrong here
This affects performance, not compliance reporting.
About these practice questions
This SPLK-5001 question is part of Courseiva's 203-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official Splunk exam blueprint
This SPLK-5001 practice question is part of Courseiva's free Splunk certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SPLK-5001 exam.