Splunk Phantom Certified Admin - SPLK-2003 Exam Practice Test
Two action blocks, geolocate_ip_1 and file_reputation_2, are connected to a decision block.
Which of the following is a correct configuration for making a decision on the action results from one of the given blocks?
Which of the following is a correct configuration for making a decision on the action results from one of the given blocks?
Correct Answer: C
Vote an answer
What values can be applied when creating Custom CEF field?
Correct Answer: D
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Is it possible to import external Python libraries such as the time module?
Correct Answer: A
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Which of the following is a reason to create a new role in SOAR?
Correct Answer: C
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Which of the following is an advantage of using the Visual Playbook Editor?
Correct Answer: B
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
When writing a custom function that uses regex to extract the domain name from a URL, a user wants to create a new artifact for the extracted domain. Which of the following Python API calls will create a new artifact?
Correct Answer: A
Vote an answer
Explanation: Only visible for PassTestking members. You can sign-up / login (it's free).
Which of the following are tabs of an asset configuration?
Correct Answer: C
Vote an answer