Question 1

Is it possible to import external Python libraries such as the time module?

Options :

A : No

B : No, but this can be changed by setting the proper permissions.

C : Yes, in the global block.

D : Yes. from a drop-down menu.

Answer: C

Question 2

A user wants to use their Splunk Cloud instance as the external Splunk instance for Phantom. What ports need to be opened on the Splunk Cloud instance to facilitate this? Assume default ports are in use.

Options :

A : TCP 8088 and TCP 8099.

B : TCP 80 and TCP 443.

C : Splunk Cloud is not supported.

D : TCP 8080 and TCP 8191.

Answer: B

Question 3

If no data matches any filter conditions, what is the next block run by the playbook?

Options :

A : The end block.

B : The start block.

C : The filter block.

D : The next block.

Answer: D

Question 4

After a playbook has run, where are the results stored?

Options :

A : Splunk Index

B : Case

C : Container

D : Log file

Answer: C

Question 5

What are indicators?

Options :

A : Action result items that determine the flow of execution in a playbook.

B : Action results that may appear in multiple containers.

C : Artifact values that can appear in multiple containers.

D : Artifact values with special security significance.

Answer: C