Free Splunk SPLK-2003 Exam Dumps Questions & Answers

A customer wants to design a modular and reusable set of playbooks that all communicate with each other. Which of the following is a best practice for data sharing across playbooks?

• A.  Create artifacts using one playbook and collect those artifacts in another playbook.
• B.  Use the py-postgresq1 module to directly save the data in the Postgres database.
• C.  Cal the child playbooks getter function.
• D.  Use the Handle method to pass data directly between playbooks.

When working with complex datapaths, which operator is used to access a sub-element inside another element?

• A.  . (dot)
• B.  | (pipe)
• C.  : (colon)
• D.  * (asterisk)

Which of the following is a best practice for use of the global block?

• A.  Execute custom code after each run of the playbook.
• B.  Execute code at the beginning of each run of the playbook.
• C.  Import packages which will be used within the playbook.
• D.  Declare outputs which will be selectable within playbook blocks.

Which of the following is the complete list of the types of backups that are supported by Phantom?

• A.  Full backups.
• B.  Full, delta, and incremental backups.
• C.  Full and delta backups.
• D.  Full and incremental backups.

Which of the following items cannot be modified once entered into SOAR?

• A.  A comment.
• B.  An artifact.
• C.  A container.
• D.  A note.