Splunk SPLK-2003 Practice Test - Questions Answers, Page 9
List of questions
Question 81
The SOAR server has been configured to use an external Splunk search head for search and searching on SOAR works; however, the search results don't include content that was being returned by search before configuring external search. Which of the following could be the problem?
Question 82
Which of the following is an advantage of using the Visual Playbook Editor?
Question 83
A user has written a playbook that calls three other playbooks, one after the other. The user notices that the second playbook starts executing before the first one completes. What is the cause of this behavior?
Question 84
Where in SOAR can a user view the JSON data for a container?
Question 85
When assigning an input parameter to an action while building a playbook, a user notices the artifact value they are looking for does not appear in the auto-populated list.
How is it possible to enter the unlisted artifact value?
Question 86
Which of the following actions will store a compressed, secure version of an email attachment with suspected malware for future analysis?
Question 87
Without customizing container status within SOAR, what are the three types of status for a container?
Question 88
Which of the following are the default ports that must be configured on Splunk to allow connections from SOAR?
Question 89
If no data matches any filter conditions, what is the next block run by the playbook?
Question 90
How can more than one user perform tasks in a workbook?
Question