Splunk SPLK-2003 Practice Test - Questions Answers, Page 9

List of questions
Question 81

The SOAR server has been configured to use an external Splunk search head for search and searching on SOAR works; however, the search results don't include content that was being returned by search before configuring external search. Which of the following could be the problem?
Question 82

Which of the following is an advantage of using the Visual Playbook Editor?
Question 83

A user has written a playbook that calls three other playbooks, one after the other. The user notices that the second playbook starts executing before the first one completes. What is the cause of this behavior?
Question 84

Where in SOAR can a user view the JSON data for a container?
Question 85

When assigning an input parameter to an action while building a playbook, a user notices the artifact value they are looking for does not appear in the auto-populated list.
How is it possible to enter the unlisted artifact value?
Question 86

Which of the following actions will store a compressed, secure version of an email attachment with suspected malware for future analysis?
Question 87

Without customizing container status within SOAR, what are the three types of status for a container?
Question 88

Which of the following are the default ports that must be configured on Splunk to allow connections from SOAR?
Question 89

If no data matches any filter conditions, what is the next block run by the playbook?
Question 90

How can more than one user perform tasks in a workbook?
Question