최신 SPLK-2003 무료덤프 - Splunk Phantom Certified Admin

A. Low, Medium, High

B. New, In Progress, Closed

C. New, Open, Resolved

D. Low, Medium, Critical

A. https://<PHANTOM_URL>/rest/artifact?_filter_cef_md5_insull=false

B. https://<PHANTOM_URL>/rest/artifact?_filter_shal__insull=False

C. https://<PHANTOM_URL>/rest/artifact?_filter_cef_Shal_contains=""

D. https://<PHANTOM_URL>/rest/artifact?_filter_cef_shal_insull=False

A. Workbooks apply service level agreements (SLAs) to containers and monitor completion status on the ROI dashboard.

B. Workbooks guide user activity and coordination during event analysis and case operations.

C. Workbooks may not be customized; only default workbooks are permitted within Phantom.

D. Workbooks automatically implement a customized processing of events using Python code.

A. PIV/CAC

B. OpenID

C. SAML3

D. Biometrics

A. Evidence report.

B. Workbook page Evidence tab.

C. Investigation page Evidence tab.

D. At the bottom of the Investigation page widget panel.

A. Create a new container including Just the artifact in question.

B. Use the run playbook dialog and set the scope to the artifact.

C. Use the contextual menu from the artifact and select the actions.

D. Use the contextual menu from the artifact and select run playbook.

A. phantom.new_list()

B. phantom.add_list()

C. phantom.create_list()

D. phantom.include_list()

A. The ability to automate Splunk searches within SOAR.

B. The ability to ingest Splunk notable events into SOAR.

C. The ability to run more complex reports on SOAR activities.

D. The ability to display results as Splunk dashboards within SOAR.

A. Can select assets by tenant, approver, or app.

B. Can select containers by seventy or status.

C. Can select which blocks have access to container data.

D. Can be used to select data for use by other blocks.

A. phantom.print ()

B. phantom.assert()

C. phantom.debug()

D. phantom.exception()