Splunk SPLK-2003 - Splunk SOAR Certified Automation Developer Exam
Page: 2 / 16
Total 78 questions
Question #6 (Topic: Exam A)
An active playbook can be configured to operate on all containers that share which attribute?
A. Tag
B. Label
C. Artifact
D. Severity
Answer: B
Question #7 (Topic: Exam A)
Which visual playbook editor block is used to assemble commands and data into a valid Splunk search within a SOAR playbook?
A. An action block.
B. A filter block.
C. A prompt block.
D. A format block.
Answer: A
Question #8 (Topic: Exam A)
Which of the following contains official SOAR documentation for the latest releases?
A. Slack and Github.
B. Splunk Server and docs.splunk.com.
C. SOAR Server and soar.splunk.com.
D. SOAR Server and docs.splunk.com.
Answer: D
Question #9 (Topic: Exam A)
Two action blocks, geolocate_ip_1 and file_reputation_2, are connected to a decision block. Which of the following is a correct configuration for making a decision on the action results from one of the given blocks?
A. Select parameter set to: file_reputation_2:action_result.data.*.response_code; evaluation option set to: ==; and the Select Value set to: custom_list:Banned Countries.
B. Select parameter set to: geolocate_ip_1:action_result.data.*.country_iso_code; evaluation option set to: in; and the Select Value set to: custom_list:Banned Countries.
C. Select parameter set to: geolocate_ip_1:action_result.cef.*.country_iso_code; evaluation option set to: !=; and the Select Value box left empty.
D. Select parameter set to: file_reputation_2:action_result.cef.*.response_code; evaluation option set to: in; and the Select Value set to: United States.
Answer: B
Question #10 (Topic: Exam A)
What is enabled if the Logging option for a playbook' s settings is enabled?
A. The playbook will write detailed execution information into the spawn.loq.
B. More detailed information is available in the debug window.
C. All modifications to the playbook will be written to the audit log.
D. More detailed logging information is available in the Investigation page.
Answer: B
