Which of the following contains official SOAR documentation for the latest releases?
A. Slack and Github.
B. SOAR Server and docs.splunk.com.
C. Splunk Server and docs.splunk.com.
D. SOAR Server and soar.splunk.com.
正解:B
質問 2:
Some of the playbooks on the Phantom server should only be executed by members of the admin role. How can this rule be applied?
A. Make sure the Execute Playbook capability is removed from al roles except admin.
B. Add a filter block to al restricted playbooks that Titters for runRole - "Admin''.
C. Add a tag with restricted access to the restricted playbooks.
D. Place restricted playbooks in a second source repository that has restricted access.
正解:A
解説: (Pass4Test メンバーにのみ表示されます)
質問 3:
A user has written a playbook that calls three other playbooks, one after the other. The user notices that the second playbook starts executing before the first one completes. What is the cause of this behavior?
A. The sleep option for the second playbook is not set to a long enough interval.
B. Synchronous execution has not been configured.
C. The first playbook is performing poorly.
D. Incorrect join configuration on the second playbook.
正解:B
解説: (Pass4Test メンバーにのみ表示されます)
質問 4:
Which of the following actions will store a compressed, secure version of an email attachment with suspected malware for future analysis?
A. Use the Upload action of the Secure Store app to store the file in the database.
B. Copy/paste the attachment into a note.
C. Use the Files tab on the Investigation page to upload the attachment.
D. Add a link to the file in a new artifact.
正解:A
解説: (Pass4Test メンバーにのみ表示されます)
質問 5:
Two action blocks, geolocate_ip_1 and file_reputation_2, are connected to a decision block.
Which of the following is a correct configuration for making a decision on the action results from one of the given blocks?
A. Select parameter set to: file_reputation_2:action_result.cef.*.response_code; evaluation option set to: in; and the Select Value set to: United States.
B. Select parameter set to: file_reputation_2:action_result.data.*.response_code; evaluation option set to: ==; and the Select Value set to: custom_list:Banned Countries.
C. Select parameter set to: geolocate_ip_1:action_result.data.*.country_iso_code; evaluation option set to: in; and the Select Value set to: custom_list:Banned Countries.
D. Select parameter set to: geolocate_ip_1:action_result.cef.*.country_iso_code; evaluation option set to: !=; and the Select Value box left empty.
正解:C
質問 6:
How is it possible to evaluate user prompt results?
A. Set the user prompt to reinvoke if it times out.
B. Add a decision Mode
C. Set action_result.summary. status to required.
D. Set action_result. summary. response to required.
正解:D
解説: (Pass4Test メンバーにのみ表示されます)
質問 7:
When assigning an input parameter to an action while building a playbook, a user notices the artifact value they are looking for does not appear in the auto-populated list.
How is it possible to enter the unlisted artifact value?
A. Edit the container to allow CEF parameters.
B. Delete and recreate the artifact.
C. Edit the artifact to enable the List as Parameter option for the CEF value.
D. Type the CEF datapath in manually.
正解:D
解説: (Pass4Test メンバーにのみ表示されます)
976 お客様のコメント





芹泽** -
Pass4Testが提供されたSPLK-2003丁寧な解説によって、要点をしっかり抑えながら学ぶことができます。