← Back to exam page

SPLK-2003 – Splunk Phantom Certified Admin

Loading demo links...

Showing 1–3 of 10 questions

Question 1

Which of the following can the format block be used for?

Select an option, then click Submit answer.

  • ○

    To generate arrays for input into other functions.
  • ○

    To generate HTML or CSS content for output in email messages, user prompts, or comments.
  • ○

    To generate string parameters for automated action blocks.
  • ○

    To create text strings that merge state text with dynamic values for input or output.
Question 2

A user has written a playbook that calls three other playbooks, one after the other. The user notices that the second playbook starts executing before the first one completes. What is the cause of this behavior?

Select an option, then click Submit answer.

  • ○

    Incorrect Join configuration on the second playbook.
  • ○

    The first playbook is performing poorly.
  • ○

    The steep option for the second playbook is not set to a long enough interval.
  • ○

    Synchronous execution has not been configured.
Question 3

When analyzing events a working on a case, significant items can be marked as evidence. Where can ail of a case's evidence items be viewed together?

Select an option, then click Submit answer.

  • ○

    Workbook page Evidence tab.
  • ○

    Evidence report.
  • ○

    Investigation page Evidence tab.
  • ○

    At the bottom of the Investigation page widget panel.