Question 1

If no data matches any filter conditions, what is the next block run by the playbook?

Options :

A : The end block.

B : The start block.

C : The filter block.

D : The next block.

Answer: D

Question 2

Which of the following roles is appropriate for a Splunk SOAR account that will only be used to execute automated tasks?

Options :

A : Non-Human

B : Automation

C : Automation Engineer

D : Service Account

Answer: B

Question 3

When configuring a Splunk asset for Phantom to connect to a SplunkC loud instance, the user discovers that they need to be able to run two different on_poll searches. How is this possible

Options :

A : Enter the two queries in the asset as comma separated values.

B : Configure the second query in the Phantom app for Splunk.

C : Install a second Splunk app and configure the query in the second app.

D : Configure a second Splunk asset with the second query.

Answer: A

Question 4

Which two playbook blocks can discern which path in the playbook to take next?

Options :

A : Prompt and decision blocks.

B : Decision and action blocks.

C : Filter and decision blocks.

D : Filter and prompt blocks.

Answer: A

Question 5

A user wants to use their Splunk Cloud instance as the external Splunk instance for Phantom. What ports need to be opened on the Splunk Cloud instance to facilitate this? Assume default ports are in use.

Options :

A : TCP 8088 and TCP 8099.

B : TCP 80 and TCP 443.

C : Splunk Cloud is not supported.

D : TCP 8080 and TCP 8191.

Answer: B