SPLK-2003 Practice Online

Question 1

What are indicators?

A : Action result items that determine the flow of execution in a playbook.

B : Action results that may appear in multiple containers.

C : Artifact values that can appear in multiple containers.

D : Artifact values with special security significance.

Answer: C

Question 2

When is using decision blocks most useful?

A : When selecting one (or zero) possible paths in the playbook.

B : When processing different data in parallel.

C : When evaluating complex, multi-value results or artifacts.

D : When modifying downstream data hi one or more paths in the playbook.

Answer: A

Question 3

Which of the following expressions will output debug information to the debug window in the Visual Playbook Editor?

A : phantom.debug()

B : phantom.exception()

C : phantom.print ()

D : phantom.assert()

Answer: D

Question 4

Which Phantom API command is used to create a custom list?

A : phantom.add_list()

B : phantom.create_list()

C : phantom.include_list()

D : phantom.new_list()

Answer: A

Question 5

After a playbook has run, where are the results stored?

A : Splunk Index

B : Case

C : Container

D : Log file

Answer: D

Name:	Splunk SOAR Certified Automation Developer
Exam Code:	SPLK-2003
Certification:	Splunk SOAR Certified Automation Developer
Vendor:	Splunk
Total Questions:	60
Last Updated:	May 08, 2024