Question 1

Is it possible to import external Python libraries such as the time module?

Options :

A : No

B : No, but this can be changed by setting the proper permissions.

C : Yes, in the global block.

D : Yes. from a drop-down menu.

Answer: C

Question 2

Phantom supports multiple user authentication methods such as LDAP and SAML2. What other user authentication method is supported?

Options :

A : SAML3

B : PIV/CAC

C : Biometrics

D : OpenID

Answer: B

Question 3

When is using decision blocks most useful?

Options :

A : When selecting one (or zero) possible paths in the playbook.

B : When processing different data in parallel.

C : When evaluating complex, multi-value results or artifacts.

D : When modifying downstream data hi one or more paths in the playbook.

Answer: A

Question 4

When configuring a Splunk asset for Phantom to connect to a SplunkC loud instance, the user discovers that they need to be able to run two different on_poll searches. How is this possible

Options :

A : Enter the two queries in the asset as comma separated values.

B : Configure the second query in the Phantom app for Splunk.

C : Install a second Splunk app and configure the query in the second app.

D : Configure a second Splunk asset with the second query.

Answer: A

Question 5

A user wants to use their Splunk Cloud instance as the external Splunk instance for Phantom. What ports need to be opened on the Splunk Cloud instance to facilitate this? Assume default ports are in use.

Options :

A : TCP 8088 and TCP 8099.

B : TCP 80 and TCP 443.

C : Splunk Cloud is not supported.

D : TCP 8080 and TCP 8191.

Answer: B

Free SPLK-2003 Mock Exam – Practice Online Confidently

Buying Options: