SPLK-2003 無料問題集「Splunk Phantom Certified Admin」

（A）Parallel Processing

（B）Juggle Processing

（C）Multithreaded Processing

（D）Serial Processing

（A）Disk Usage

（B）Load Average

（C）Memory Usage

（D）Playbook Usage

（A）To avoid duplication of code across multiple playbooks.

（B）Reduce large complex playbooks which become difficult to maintain.

（C）Reduces amount of playbook data stored in each repo.

（D）Encourages code reuse in a more compartmentalized form.

（A）Install a second Splunk app and configure the query in the second app.

（B）Configure a second Splunk asset with the second query.

（C）Enter the two queries in the asset as comma separated values.

（D）Configure the second query in the Splunk App for SOAR Export.

（A）The existing content indexes on the SOAR server need to be re-indexed to migrate them to Splunk.

（B）The user configured on the SOAR side with Phantomsearch capability is not enabled on Splunk.

（C）Content that existed before configuring external search must be backed up on SOAR and restored on the Splunk search head.

（D）The remote Splunk search head is currently offline.

（A）Action results that may appear in multiple containers.

（B）Artifact values that can appear in multiple containers.

（C）Action result items that determine the flow of execution in a playbook.

（D）Artifact values with special security significance.

（A）Name, Value

（B）Name, Data Type

（C）Name, Data Type, Severity

（D）Name

（A）A prompt block.

（B）An action block.

（C）A format block.

（D）A filter block.

（A）SOAR Server and docs.splunk.com.

（B）SOAR Server and soar.splunk.com.

（C）Slack and Github.

（D）Splunk Server and docs.splunk.com.

（A）phantom.print ()

（B）phantom.debug()

（C）phantom.exception()

（D）phantom.assert()