SPLK-2003 無料問題集「Splunk Phantom Certified Admin」

（A）Install a second Splunk app and configure the query in the second app.

（B）Configure the second query in the Phantom app for Splunk.

（C）Configure a second Splunk asset with the second query.

（D）Enter the two queries in the asset as comma separated values.

（A）Rename the event_id field from the notable event to splunkNotableEventld.

（B）Include the event_id field in the search results and add a CEF definition to Phantom for event_id, datatype splunk notable event id.

（C）Add a custom field to the container named event_id and set the custom field's data type to splunk notable event id.

（D）Include the notable event's event_id field and set the artifacts label to aplunk notable event id.

（A）Add a tag with restricted access to the restricted playbooks.

（B）Make sure the Execute Playbook capability is removed from al roles except admin.

（C）Place restricted playbooks in a second source repository that has restricted access.

（D）Add a filter block to al restricted playbooks that Titters for runRole - "Admin''.

（A）Clicking the arrow next to the action within the recent activities pane.

（B）Viewing the evidence tab within the main display area.

（C）Viewing the action widget within the main display area.

（D）Clicking on the action within the recent activity pane.

（A）Any of the integrated Splunk/Phantom Apps

（B）Splunk App for Phantom Reporting.

（C）Phantom App for Splunk.

（D）Splunk App for Phantom.

（A）Embedded Splunk search engine.

（B）Embedded Elastic search engine.

（C）Embedded SOAR search engine.

（D）Embedded Django search engine.

（A）A note.

（B）A container.

（C）An artifact.

（D）A comment.

（A）LDAP

（B）SAML

（C）OpenID

（D）Local Authentication

（A）The ability to automate Splunk searches within Phantom.

（B）The ability to ingest Splunk notable events into Phantom.

（C）The ability to run more complex reports on Phantom activities.

（D）The ability to display results as Splunk dashboards within Phantom.

（A）SOAR Community and GitHub.

（B）Splunkbase and SOAR Community.

（C）Splunk Answers and Splunkbase.

（D）GitHub and Splunkbase.