Question 1

Configuring SOAR search to use an external Splunk server provides which of the following benefits?

Options :

A : The ability to run more complex reports on SOAR activities.

B : The ability to ingest Splunk notable events into SOAR.

C : The ability to automate Splunk searches within SOAR.

D : The ability to display results as Splunk dashboards within SOAR.

Answer: C

Question 2

What are the components of the I2A2 design methodology?

Options :

A : Inputs, Interactions, Actions, Apps

B : Inputs, Interactions, Actions, Artifacts

C : Inputs, Interactions, Apps, Artifacts

D : Inputs, Interactions, Actions, Assets

Answer: B

Question 3

Phantom supports multiple user authentication methods such as LDAP and SAML2. What other user authentication method is supported?

Options :

A : SAML3

B : PIV/CAC

C : Biometrics

D : OpenID

Answer: B

Question 4

Which of the following are the default ports that must be configured on Splunk to allow connections from SOAR?

Options :

A : New, In Progress, Closed

B : Low, Medium, High

C : Mew, Open, Resolved

D : Low, Medium, Critical

Answer: C

Question 5

What are indicators?

Options :

A : Action result items that determine the flow of execution in a playbook.

B : Action results that may appear in multiple containers.

C : Artifact values that can appear in multiple containers.

D : Artifact values with special security significance.

Answer: C

Higher Test Marks with Free Online SPLK-2003 Exam Practice