Exam Name: | Splunk SOAR Certified Automation Developer Exam | ||
Exam Code: | SPLK-2003 Dumps | ||
Vendor: | Splunk | Certification: | Splunk SOAR Certified Automation Developer |
Questions: | 96 Q&A's | Shared By: | halima |
A filter block with only one condition configured which states: artifact.*.cef .sourceAddress !- , would permit which of the following data to pass forward to the next block?
In addition to full backups. Phantom supports what other backup type using backup?
Some of the playbooks on the Phantom server should only be executed by members of the admin role. How can this rule be applied?
Some of the playbooks on the SOAR server should only be executed by members of the admin role. How can this rule be applied?