QUESTION: 1

A user wants to get the playbook results for a single artifact. Which steps will accomplish the?

Use the contextual menu from the artifact and select run playbook.
Use the run playbook dialog and set the scope to the artifact.
Create a new container including Just the artifact in question.
Use the contextual menu from the artifact and select the actions.

Answer(s): C

Reveal Solution Next Question

QUESTION: 2

Which Phantom VPE Nock S used to add information to custom lists?

Action blocks
Filter blocks
API blocks
Decision blocks

Answer(s): C

Reveal Solution Next Question

QUESTION: 3

When configuring a Splunk asset for Phantom to connect to a SplunkC loud instance, the user discovers that they need to be able to run two different on_poll searches. How is this possible

Enter the two queries in the asset as comma separated values.
Configure the second query in the Phantom app for Splunk.
Install a second Splunk app and configure the query in the second app.
Configure a second Splunk asset with the second query.

Answer(s): A

Reveal Solution Next Question

Which of the following are the steps required to complete a full backup of a Splunk
Phantom deployment' Assume the commands are executed from /opt/phantom/bin and that no other backups have been made.

On the command line enter: rode sudo python ibackup.pyc --setup, then audo phenv python ibackup.pyc --backup.
On the command line enter: sudo phenv python ibackup.pyc --backup --backup-type full, then sudo phenv python ibackup.pyc --setup.
Within the UI: Select from the main menu Administration > System Health > Backup.
Within the UI: Select from the main menu Administration > Product Settings > Backup.

Answer(s): B

Reveal Solution Next Question

Free SPLK-2003 Exam Braindumps (page: 4)

QUESTION: 1

QUESTION: 2

QUESTION: 3

QUESTION: 4

SPLK-2003 Exam Discussions & Posts