Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free Splunk SOAR Certified Automation Developer Exam Practice Questions

Question # 21

Within the 12A2 design methodology, which of the following most accurately describes the last step?

Options:

A.  

List of the apps used by the playbook.

B.  

List of the actions of the playbook design.

C.  

List of the outputs of the playbook design.

D.  

List of the data needed to run the playbook.

Discussion 0
Question # 22

Without customizing container status within Phantom, what are the three types of status for a container?

Options:

A.  

New, In Progress, Closed

B.  

Low, Medium, High

C.  

Mew, Open, Resolved

D.  

Low, Medium, Critical

Discussion 0
Question # 23

Which of the following is the complete list of the types of backups that are supported by Phantom?

Options:

A.  

Full backups.

B.  

Full, delta, and incremental backups.

C.  

Full and incremental backups.

D.  

Full and delta backups.

Discussion 0
Question # 24

Under Asset Ingestion Settings, how many labels must be applied when configuring an asset?

Options:

A.  

Labels are not configured under Asset Ingestion Settings.

B.  

One.

C.  

One or more.

D.  

Zero or more.

Discussion 0
Question # 25

Which of the following views provides a holistic view of an incident - providing event metadata, Service Level Agreement status, Severity, sensitivity of an event, and other detailed event info?

Options:

A.  

Executive

B.  

Investigation

C.  

Technical

D.  

Analyst

Discussion 0
Question # 26

Which of the following can be configured in the ROI Settings?

Options:

A.  

Number of full time employees (FTEs).

B.  

Time lost.

C.  

Analyst hours per month.

D.  

Annual analyst salary.

Discussion 0
Question # 27

When is using decision blocks most useful?

Options:

A.  

When selecting one (or zero) possible paths in the playbook.

B.  

When processing different data in parallel.

C.  

When evaluating complex, multi-value results or artifacts.

D.  

When modifying downstream data hi one or more paths in the playbook.

Discussion 0
Question # 28

When the Splunk App for SOAR Export executes a Splunk search, which activities are completed?

Options:

A.  

CEF fields are mapped to CIM flelds and a container is created on the SOAR server.

B.  

CIM fields are mapped to CEF fields and a container is created on the SOAR server.

C.  

CEF fields are mapped to CIM and a container is created on the Splunk server.

D.  

CIM fields are mapped to CEF and a container is created on the Splunk server.

Discussion 0
Question # 29

A user has written a playbook that calls three other playbooks, one after the other. The user notices that the second playbook starts executing before the first one completes. What is the cause of this behavior?

Options:

A.  

Incorrect Join configuration on the second playbook.

B.  

The first playbook is performing poorly.

C.  

The steep option for the second playbook is not set to a long enough interval.

D.  

Synchronous execution has not been configured.

Discussion 0
Question # 30

Which of the following will show all artifacts that have the term results in a filePath CEF value?

Options:

A.  

.../rest/artifact?_filter_cef_filePath_icontain=''results''

B.  

...rest/artifacts/filePath=''%results%''

C.  

.../result/artifacts/cef/filePath= '%results%''

D.  

.../result/artifact?_query_cef_filepath_icontains=''results

Discussion 0

SPLK-2003 PDF

SPLK-2003 PDF (Printable)
$46.5
$154.99

SPLK-2003 Testing Engine

SPLK-2003 PDF (Printable)
$51
$169.99

SPLK-2003 PDF + Testing Engine

SPLK-2003 PDF (Printable)
$63.9
$212.99

Free Exams Sample Questions