[2023年03月11日] 問題集お試しセットSPLK-2003テストエンジントレーニング問題集には60問あります
Splunk SPLK-2003問題集で100%カバー率リアル試験問題
質問 35
A user wants to use their Splunk Cloud instance as the external Splunk instance for Phantom. What ports need to be opened on the Splunk Cloud instance to facilitate this? Assume default ports are in use.
- A. TCP 8080 and TCP 8191.
- B. TCP 8088 and TCP 8099.
- C. TCP 80 and TCP 443.
- D. Splunk Cloud is not supported.
正解: A
質問 36
Which of the following are the steps required to complete a full backup of a Splunk Phantom deployment' Assume the commands are executed from /opt/phantom/bin and that no other backups have been made.
- A. On the command line enter: rode sudo python ibackup.pyc --setup, then audo phenv python ibackup.pyc
--backup. - B. On the command line enter: sudo phenv python ibackup.pyc --backup -backup-type full, then sudo phenv python ibackup.pyc --setup.
- C. Within the UI: Select from the main menu Administration > Product Settings > Backup.
- D. Within the UI: Select from the main menu Administration > System Health > Backup.
正解: B
質問 37
How does a user determine which app actions are available?
- A. Add an action block to a playbook canvas area.
- B. In the visual playbook editor, click Active and click the Available App Actions dropdown.
- C. Search the Apps category in the global search field.
- D. From the Apps menu, click the supported actions dropdown for each app.
正解: C
質問 38
A filter block with only one condition configured which states: artifact.*.cef .sourceAddress !- , would permit which of the following data to pass forward to the next block?
- A. Null values
- B. Non-null destinationAddresses
- C. Non-null IP addresses
- D. Null IP addresses
正解: A
質問 39
How can the debug log for a playbook execution be viewed?
- A. On the Investigation page, select Debug Log from the playbook's action menu in the Recent Activity panel.
- B. In Administration > System Health > Playbook Run History, select the playbook execution entry, then select Log.
- C. Click Expand Scope m the debug window.
- D. Open the playbook in the Visual Playbook Editor, and select Debug Logs in Settings.
正解: C
質問 40
Without customizing container status within Phantom, what are the three types of status for a container?
- A. Low, Medium, Critical
- B. Mew, Open, Resolved
- C. New, In Progress, Closed
- D. Low, Medium, High
正解: C
質問 41
In this image, which container fields are searched for the text "Malware"?
- A. Event Name or ID.
- B. Event Name and Artifact Names.
- C. Event Name, Notes, Comments.
正解: B
質問 42
Seventy can be set during ingestion and later changed manually. What other mechanism can change the severity or a container?
- A. Notes
- B. Playbooks
- C. Service level agreement (SLA) expiration
- D. Actions
正解: D
質問 43
Which Phantom API command is used to create a custom list?
- A. phantom.include_list()
- B. phantom.new_list()
- C. phantom.add_list()
- D. phantom.create_list()
正解: C
質問 44
A customer wants to design a modular and reusable set of playbooks that all communicate with each other.
Which of the following is a best practice for data sharing across playbooks?
- A. Use the py-postgresq1 module to directly save the data in the Postgres database.
- B. Use the Handle method to pass data directly between playbooks.
- C. Cal the child playbooks getter function.
- D. Create artifacts using one playbook and collect those artifacts in another playbook.
正解: A
質問 45
Which of the following are the default ports that must be configured on Splunk to allow connections from Phantom?
- A. SplunkWeb (8088), SplunkD (8089), HTTP Collector (8000)
- B. SplunkWeb (8421), SplunkD (8061), HTTP Collector (8798)
- C. SplunkWeb (8000), SplunkD (8089), HTTP Collector (8088)
- D. SplunkWeb (8089), SplunkD (8088), HTTP Collector (8000)
正解: C
質問 46
A user has written a playbook that calls three other playbooks, one after the other. The user notices that the second playbook starts executing before the first one completes. What is the cause of this behavior?
- A. Incorrect Join configuration on the second playbook.
- B. The first playbook is performing poorly.
- C. Synchronous execution has not been configured.
- D. The steep option for the second playbook is not set to a long enough interval.
正解: A
質問 47
During a second test of a playbook, a user receives an error that states: 'an empty parameters list was passed to phantom.act()." What does this indicate?
- A. The playbook debugger's scope is set to new.
- B. The playbook is using an incorrect container.
- C. The container has artifacts not parameters.
- D. The playbook debugger's scope is set to all.
正解: C
質問 48
What is enabled if the Logging option for a playbook's settings is enabled?
- A. More detailed logging information Is available m the Investigation page.
- B. The playbook will write detailed execution information into the spawn.log.
- C. More detailed information is available in the debug window.
- D. All modifications to the playbook will be written to the audit log.
正解: B
質問 49
Some of the playbooks on the Phantom server should only be executed by members of the admin role. How can this rule be applied?
- A. Make sure the Execute Playbook capability is removed from al roles except admin.
- B. Add a filter block to al restricted playbooks that Titters for runRole - "Admin''.
- C. Place restricted playbooks in a second source repository that has restricted access.
- D. Add a tag with restricted access to the restricted playbooks.
正解: B
質問 50
Which of the following can be configured in the ROl Settings?
- A. Time lost.
- B. Number of full time employees (FTEs).
- C. Annual analyst salary.
- D. Analyst hours per month.
正解: C
質問 51
Splunk user account(s) with which roles must be created to configure Phantom with an external Splunk Enterprise instance?
- A. phantomsearch, phantomdelete
- B. admin,user
- C. superuser, administrator
- D. phantomcreate. phantomedit
正解: C
質問 52
......
実際にあるSPLK-2003問題集PDFで100%合格率保証付きます：https://jp.fast2test.com/SPLK-2003-premium-file.html