Question 1

After a playbook has run, where are the results stored?

Options :

A : Splunk Index

B : Case

C : Container

D : Log file

Answer: C

Question 2

A user wants to use their Splunk Cloud instance as the external Splunk instance for Phantom. What ports need to be opened on the Splunk Cloud instance to facilitate this? Assume default ports are in use.

Options :

A : TCP 8088 and TCP 8099.

B : TCP 80 and TCP 443.

C : Splunk Cloud is not supported.

D : TCP 8080 and TCP 8191.

Answer: B

Question 3

Which of the following are the default ports that must be configured on Splunk to allow connections from SOAR?

Options :

A : New, In Progress, Closed

B : Low, Medium, High

C : Mew, Open, Resolved

D : Low, Medium, Critical

Answer: C

Question 4

What are indicators?

Options :

A : Action result items that determine the flow of execution in a playbook.

B : Action results that may appear in multiple containers.

C : Artifact values that can appear in multiple containers.

D : Artifact values with special security significance.

Answer: C

Question 5

What are the components of the I2A2 design methodology?

Options :

A : Inputs, Interactions, Actions, Apps

B : Inputs, Interactions, Actions, Artifacts

C : Inputs, Interactions, Apps, Artifacts

D : Inputs, Interactions, Actions, Assets

Answer: B

Free SPLK-2003 Mock Exam – Practice Online Confidently

Buying Options: