SPLK-2003 試験問題を無料オンラインアクセス

Which of the following is a reason to create a new role in SOAR?

• A.To define a set of users who have access to a sensitive tag.
• B.To define a set of users who have access to a restricted app.
• C.To define a set of users who have access to a special label.
• D.To define a set of users who have access to an event's reports.

In a playbook, more than one Action block can be active at one time. What is this called?

• A.Parallel Processing
• B.Juggle Processing
• C.Multithreaded Processing
• D.Serial Processing

Why is it good playbook design to create smaller and more focused playbooks? (select all that apply)

• A.Encourages code reuse in a more compartmentalized form.
• B.To avoid duplication of code across multiple playbooks.
• C.Reduces amount of playbook data stored in each repo.
• D.Reduce large complex playbooks which become difficult to maintain.

After a playbook has run, where are the results stored?

• A.Container
• B.Splunk Index
• C.Log file
• D.Case

Is it possible to import external Python libraries such as the time module?

• A.Yes. from a drop down menu.
• B.Yes, in the global block.
• C.No.
• D.No, but this can be changed by setting the proper permissions.