Question 1

Configuring SOAR search to use an external Splunk server provides which of the following benefits?

Options :

A : The ability to run more complex reports on SOAR activities.

B : The ability to ingest Splunk notable events into SOAR.

C : The ability to automate Splunk searches within SOAR.

D : The ability to display results as Splunk dashboards within SOAR.

Answer: C

Question 2

When is using decision blocks most useful?

Options :

A : When selecting one (or zero) possible paths in the playbook.

B : When processing different data in parallel.

C : When evaluating complex, multi-value results or artifacts.

D : When modifying downstream data hi one or more paths in the playbook.

Answer: A

Question 3

Which of the following are the default ports that must be configured on Splunk to allow connections from SOAR?

Options :

A : New, In Progress, Closed

B : Low, Medium, High

C : Mew, Open, Resolved

D : Low, Medium, Critical

Answer: C

Question 4

Which of the following expressions will output debug information to the debug window in the Visual Playbook Editor?

Options :

A : phantom.debug()

B : phantom.exception()

C : phantom.print ()

D : phantom.assert()

Answer: A

Question 5

If no data matches any filter conditions, what is the next block run by the playbook?

Options :

A : The end block.

B : The start block.

C : The filter block.

D : The next block.

Answer: D

Higher Test Marks with Free Online SPLK-2003 Exam Practice