SPLK-2003 by Splunk Valid Free Exam Practice Test

Question 1

Splunk user account(s) with which roles must be created to configure Phantom with an external Splunk Enterprise instance?

A. phantomsearch, phantomdelete B. superuser, administrator C. admin,user D. phantomcreate. phantomedit

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 2

Which of the following is a reason to create a new role in SOAR?

A. To define a set of users who have access to a restricted app. B. To define a set of users who have access to an event's reports. C. To define a set of users who have access to a sensitive tag. D. To define a set of users who have access to a special label.

Correct Answer: A

Question 3

A filter block with only one condition configured which states: artifact.*.cef .sourceAddress !- , would permit which of the following data to pass forward to the next block?

A. Null values B. Non-null destinationAddresses C. Null IP addresses D. Non-null IP addresses

Correct Answer: D

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 4

Which visual playbook editor block is used to assemble commands and data into a valid Splunk search within a SOAR playbook?

A. A format block. B. An action block. C. A prompt block. D. A filter block.

Correct Answer: B

Question 5

Which of the following are the default ports that must be configured on Splunk to allow connections from SOAR?

A. SplunkWeb (8089), SplunkD (8088), HTTP Collector (8000) B. SplunkWeb (8000), SplunkD (8089), HTTP Collector (8088) C. SplunkWeb (8088), SplunkD (8089), HTTP Collector (8000) D. SplunkWeb (8469), SplunkD (8702), HTTP Collector (8864)

Correct Answer: B

Explanation: Only visible for ExamsLabs members. You can sign-up / login (it's free).

Question 6

Which of the following cannot be marked as evidence in a container?

A. Comment B. Artifact C. Action result D. Note

Correct Answer: A

Splunk Phantom Certified Admin - SPLK-2003 Exam Practice Test