Splunk SPLK-2003 Splunk SOAR Certified Automation Developer Exam Exam Practice Test Questions

• Question 1

  Which of the following are the default ports that must be configured on Splunk to allow connections from Phantom?

  • SplunkWeb (8088), SplunkD (8089), HTTP Collector (8000)
  • SplunkWeb (8089), SplunkD (8088), HTTP Collector (8000)
  • SplunkWeb (8421), SplunkD (8061), HTTP Collector (8798)
  • SplunkWeb (8000), SplunkD (8089), HTTP Collector (8088)

  Show Answer Answer: D Next

• Question 2

  What is the simplest way to pass data between playbooks?

  • Action results
  • File system
  • Artifacts
  • KV Store

  Show Answer Answer: B Next

• Question 3

  After a playbook has run, where are the results stored?

  • Splunk Index
  • Case
  • Container
  • Log file

  Show Answer Answer: D Next

• Question 4

  Which app allows a user to run Splunk queries from within Phantom?

  • Splunk App for Phantom?
  • The Integrated Splunk/Phantom app.
  • Phantom App for Splunk.
  • Splunk App for Phantom Reporting.

  Show Answer Answer: A Next

• Question 5

  A user wants to get the playbook results for a single artifact. Which steps will accomplish the?

  • Use the contextual menu from the artifact and select run playbook.
  • Use the run playbook dialog and set the scope to the artifact.
  • Create a new container including Just the artifact in question.
  • Use the contextual menu from the artifact and select the actions.

  Show Answer Answer: C Next