Question 1

If no data matches any filter conditions, what is the next block run by the playbook?

Options :

A : The end block.

B : The start block.

C : The filter block.

D : The next block.

Answer: D

Question 2

What are the components of the I2A2 design methodology?

Options :

A : Inputs, Interactions, Actions, Apps

B : Inputs, Interactions, Actions, Artifacts

C : Inputs, Interactions, Apps, Artifacts

D : Inputs, Interactions, Actions, Assets

Answer: B

Question 3

Which of the following are the default ports that must be configured on Splunk to allow connections from SOAR?

Options :

A : New, In Progress, Closed

B : Low, Medium, High

C : Mew, Open, Resolved

D : Low, Medium, Critical

Answer: C

Question 4

After a playbook has run, where are the results stored?

Options :

A : Splunk Index

B : Case

C : Container

D : Log file

Answer: C

Question 5

When configuring a Splunk asset for Phantom to connect to a SplunkC loud instance, the user discovers that they need to be able to run two different on_poll searches. How is this possible

Options :

A : Enter the two queries in the asset as comma separated values.

B : Configure the second query in the Phantom app for Splunk.

C : Install a second Splunk app and configure the query in the second app.

D : Configure a second Splunk asset with the second query.

Answer: A

Higher Test Marks with Free Online SPLK-2003 Exam Practice

Buying Options: