Question 1

A user wants to use their Splunk Cloud instance as the external Splunk instance for Phantom. What ports need to be opened on the Splunk Cloud instance to facilitate this? Assume default ports are in use.

Options :

A : TCP 8088 and TCP 8099.

B : TCP 80 and TCP 443.

C : Splunk Cloud is not supported.

D : TCP 8080 and TCP 8191.

Answer: B

Question 2

After a playbook has run, where are the results stored?

Options :

A : Splunk Index

B : Case

C : Container

D : Log file

Answer: C

Question 3

When is using decision blocks most useful?

Options :

A : When selecting one (or zero) possible paths in the playbook.

B : When processing different data in parallel.

C : When evaluating complex, multi-value results or artifacts.

D : When modifying downstream data hi one or more paths in the playbook.

Answer: A

Question 4

Is it possible to import external Python libraries such as the time module?

Options :

A : No

B : No, but this can be changed by setting the proper permissions.

C : Yes, in the global block.

D : Yes. from a drop-down menu.

Answer: C

Question 5

What are indicators?

Options :

A : Action result items that determine the flow of execution in a playbook.

B : Action results that may appear in multiple containers.

C : Artifact values that can appear in multiple containers.

D : Artifact values with special security significance.

Answer: C

Higher Test Marks with Free Online SPLK-2003 Exam Practice

Buying Options: