Weekend Sale - Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: sntaclus

After enabling multi-tenancy, which of the Mowing is the first configuration step?

A.

Select the associated tenant artifacts.

B.

Change the tenant permissions.

C.

Set default tenant base address.

D.

Configure the default tenant.

Where can the Splunk App for SOAR Export be downloaded from?

A.

GitHub and Splunkbase.

B.

SOAR Community and GitHub.

C.

Splunkbase and SOAR Community.

D.

Splunk Answers and Splunkbase.

Which of the following is an advantage of using the Visual Playbook Editor?

A.

Eliminates any need to use Python code.

B.

The Visual Playbook Editor is the only way to generate user prompts.

C.

Supports Python or Javascript.

D.

Easier playbook maintenance.

Which visual playbook editor block is used to assemble commands and data into a valid Splunk search within a SOAR playbook?

A.

An action block.

B.

A filter block.

C.

A format block.

D.

A prompt block.

Which of the following items cannot be modified once entered into SOAR?

A.

A container.

B.

An artifact.

C.

A comment.

D.

A note.

Which two playbook blocks can discern which path in the playbook to take next?

A.

Prompt and decision blocks.

B.

Decision and action blocks.

C.

Filter and decision blocks.

D.

Filter and prompt blocks.

A user wants to use their Splunk Cloud instance as the external Splunk instance for Phantom. What ports need to be opened on the Splunk Cloud instance to facilitate this? Assume default ports are in use.

A.

TCP 8088 and TCP 8099.

B.

TCP 80 and TCP 443.

C.

Splunk Cloud is not supported.

D.

TCP 8080 and TCP 8191.

Which of the following are the default ports that must be configured on Splunk to allow connections from SOAR?

A.

SplunkWeb (8088), SplunkD (8089), HTTP Collector (8000)

B.

SplunkWeb (8089), SplunkD (8088), HTTP Collector (8000)

C.

SplunkWeb (8000), SplunkD (8089), HTTP Collector (8088)

D.

SplunkWeb (8469), SplunkD (8702), HTTP Collector (8864)

What is the main purpose of using a customized workbook?

A.

Workbooks automatically implement a customized processing of events using Python code.

B.

Workbooks guide user activity and coordination during event analysis and case operations.

C.

Workbooks apply service level agreements (SLAs) to containers and monitor completion status on the ROI dashboard.

D.

Workbooks may not be customized; only default workbooks are permitted within Phantom.

After a playbook has run, where are the results stored?

A.

Splunk Index

B.

Case

C.

Container

D.

Log file