Question 1

How can parent and child playbooks pass information to each other?

Options :

A :

The parent can pass arguments to the child when called, and the child can return values from the end block.

B :

The parent can pass arguments to the child when called, but the child can only pass values back as new artifacts in the event.

C :

The parent must create a new artifact in the event named arg_xxx, and the child must return values by creating artifacts with the naming convention return_xxx

D :

The parent must create a new artifact in the event named return_xxx, and the child must return values by creating artifacts with the naming convention arg_xxx.

Answer: A

Question 2

Which Phantom API command is used to create a custom list?

Options :

A : phantom.add_list()

B : phantom.create_list()

C : phantom.include_list()

D : phantom.new_list()

Answer: B

Question 3

Which of the following expressions will output debug information to the debug window in the Visual Playbook Editor?

Options :

A : phantom.debug()

B : phantom.exception()

C : phantom.print ()

D : phantom.assert()

Answer: A

Question 4

Configuring SOAR search to use an external Splunk server provides which of the following benefits?

Options :

A : The ability to run more complex reports on SOAR activities.

B : The ability to ingest Splunk notable events into SOAR.

C : The ability to automate Splunk searches within SOAR.

D : The ability to display results as Splunk dashboards within SOAR.

Answer: C

Question 5

What are indicators?

Options :

A : Action result items that determine the flow of execution in a playbook.

B : Action results that may appear in multiple containers.

C : Artifact values that can appear in multiple containers.

D : Artifact values with special security significance.

Answer: C

Higher Test Marks with Free Online SPLK-2003 Exam Practice

Buying Options: