최신Splunk Phantom Certified Admin - SPLK-2003무료샘플문제

A. To define a set of users who have access to an event's reports.

B. To define a set of users who have access to a restricted app.

C. To define a set of users who have access to a sensitive tag.

D. To define a set of users who have access to a special label.

A. Add a tag with restricted access to the restricted playbooks.

B. Place restricted playbooks in a second source repository that has restricted access.

C. Add a filter block to al restricted playbooks that Titters for runRole - "Admin''.

D. Make sure the Execute Playbook capability is removed from al roles except admin.

A. ERROR

B. DEBUG

C. WARN

D. INFO

A. Install a second Splunk app and configure the query in the second app.

B. Configure a second Splunk asset with the second query.

C. Configure the second query in the Splunk App for SOAR Export.

D. Enter the two queries in the asset as comma separated values.

A. superuser, administrator

B. admin, user

C. phantomcreate, phantomedit

D. phantomsearch, phantomdelete

A. The admin, power, and user users are included by default.

B. The admin and automation users are included by default.

C. Only the admin user is included by default.

D. No users are included by default.

A. The user configured on the SOAR side with Phantomsearch capability is not enabled on Splunk.

B. The remote Splunk search head is currently offline.

C. The existing content indexes on the SOAR server need to be re-indexed to migrate them to Splunk.

D. Content that existed before configuring external search must be backed up on SOAR and restored on the Splunk search head.

A. Embedded Elastic search engine.

B. Embedded Phantom search engine.

C. Embedded Splunk search engine.

D. Embedded Django search engine.