SPLK-3001 Splunk Enterprise Security Admin Exam

This course is built for students who are ready to take the Splunk Enterprise Security Certified Admin certification.

Splunk Enterprise Security Certified Admin Exam Description:

The Splunk Enterprise Security (ES) Certified Admin exam is the final step towards the completion of the Splunk ES Certified Admin certification. This app-specific certification exam is a 57-minute, 66-question assessment that evaluates a candidate’s knowledge and skills in the installation, configuration, and management of Splunk Enterprise Security. Candidates can expect an additional 3 minutes to review the exam agreement, for a total seat time of 60 minutes.

Topics Include:

1.0 ES Introduction 5%

2.0 Monitoring and Investigation 10%

3.0 Security Intelligence 5%

4.0 Forensics, Glass Tables, and Navigation Control 10%

5.0 ES Deployment 10%

6.0 Installation and Configuration 15%

7.0 Validating ES Data 10%

8.0 Custom Add-ons 5%

9.0 Tuning Correlation Searches 10%

10.0 Creating Correlation Searches 10%

11.0 Lookups and Identity Management 5%

12.0 Threat Intelligence Framework 5%

Rating Distribution

• 1 stars: 3 votes
• 2 stars: 6 votes
• 3 stars: 1 votes
• 4 stars: 9 votes
• 5 stars: 5 votes

Frequently Asked Questions

How long do I have access to the course materials?

You can view and review the lecture materials indefinitely, like an on-demand channel.

Can I take my courses with me wherever I go?

Definitely! If you have an internet connection, courses on Udemy are available on any device at any time. If you don’t have an internet connection, some instructors also let their students download course lectures. That’s up to the instructor though, so make sure you get on their good side!