Splunk Phantom Certified Admin - SPLK-2003 FREE EXAM DUMPS QUESTIONS & ANSWERS

A. Mew, Open, Resolved B. Low, Medium, Critical C. New, In Progress, Closed D. Low, Medium, High

A. Files tab items and artifacts are the only data sources that can populate active cases. B. Files tab items cannot be added to investigations. Instead, add them to action blocks. C. A user can upload the output from a detonate action to the the files tab for further investigation. D. Phantom memory requirements remain static, regardless of Files tab usage.

A. Synchronous execution has not been configured. B. Incorrect join configuration on the second playbook. C. The sleep option for the second playbook is not set to a long enough interval. D. The first playbook is performing poorly.

A. By setting scope to ALL when starting the child. B. Child playbooks can access parent playbook data while the parent Is still running. C. The parent can create an artifact with the data needed by the did. D. When configuring the playbook block in the parent, add the desired results in the Scope parameter.

A. Tag B. Label C. Severity D. Artifact

A. Supports Python or Javascript. B. Easier playbook maintenance. C. The Visual Playbook Editor is the only way to generate user prompts. D. Eliminates any need to use Python code.