<< Prev Question Next Question >>

Question 27/42

A user wants to use their Splunk Cloud instance as the external Splunk instance for Phantom. What ports need to be opened on the Splunk Cloud instance to facilitate this? Assume default ports are in use.

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (42q)
Question 1: Which of the following can be configured in the ROl Settings...
Question 2: Seventy can be set during ingestion and later changed manual...
Question 3: A user selects the New option under Sources on the menu. Wha...
Question 4: A user wants to get the playbook results for a single artifa...
Question 5: Without customizing container status within SOAR, what are t...
Question 6: Which of the following queries would return all artifacts th...
Question 7: On a multi-tenant Phantom server, what is the default tenant...
Question 8: An active playbook can be configured to operate on all conta...
Question 9: To limit the impact of custom code on the VPE, where should ...
Question 10: How can the debug log for a playbook execution be viewed?...
Question 11: During a second test of a playbook, a user receives an error...
Question 12: Which of the following are examples of things commonly done ...
Question 13: Within the 12A2 design methodology, which of the following m...
Question 14: What metrics can be seen from the System Health Display? (se...
Question 15: What are indicators?
Question 16: When configuring a Splunk asset for SOAR to connect to a Spl...
Question 17: Which app allows a user to send Splunk Enterprise Security n...
Question 18: Which app allows a user to run Splunk queries from within Ph...
Question 19: Which of the following is a best practice for use of the glo...
Question 20: Which Phantom API command is used to create a custom list?...
Question 21: Which of the following can be done with the System Health Di...
Question 22: How can a child playbook access the parent playbook's action...
Question 23: Why does SOAR use wildcards within artifact data paths?...
Question 24: Where in SOAR can a user view the JSON data for a container?...
Question 25: What are the differences between cases and events?...
Question 26: When configuring a Splunk asset for Phantom to connect to a ...
Question 27: A user wants to use their Splunk Cloud instance as the exter...
Question 28: When working with complex data paths, which operator is used...
Question 29: What values can be applied when creating Custom CEF field?...
Question 30: Which of the following will show all artifacts that have the...
Question 31: Which of the following can be edited or deleted in the Inves...
Question 32: Which of the following are the default ports that must be co...
Question 33: After enabling multi-tenancy, which of the Mowing is the fir...
Question 34: Where can the Splunk App for SOAR Export be downloaded from?...
Question 35: A customer wants to design a modular and reusable set of pla...
Question 36: Splunk user account(s) with which roles must be created to c...
Question 37: Which two playbook blocks can discern which path in the play...
Question 38: When assigning an input parameter to an action while buildin...
Question 39: What users are included in a new installation of SOAR?...
Question 40: Without customizing container status within Phantom, what ar...
Question 41: How does a user determine which app actions are available?...
Question 42: What are the components of the I2A2 design methodology?...