Exam SPLK-2003: Splunk SOAR Certified Automation Developer
| Exam Number: SPLK-2003 | Length of test: 60 mins |
| Exam Name: Splunk SOAR Certified Automation Developer | Number of questions in the actual exam: 60 |
| Format: PDF, VPLUS | Passing Score: +75% |
Total Questions: 96
FREE
Premium VPLUS file
Download practice test questions
| Title | Size | Hits | Download |
|---|---|---|---|
| Splunk.Premium.SPLK-2003.58q - DEMO | 137.75 KB | 49 | Download |
| Splunk.SPLK-2003.by.Tony.36q | 226.12 KB | 42 | Download |
Some new questions:
Q
How can the DECIDED process be restarted?
A. By restarting the playbook daemon.
B. On the System Health page.
C. In Administration > Server Settings.
D. By restarting the automation service.
Q
Which of the following can be configured in the ROI Settings?
A. Number of full time employees (FTEs).
B. Time lost.
C. Analyst hours per month.
D. Annual analyst salary.
Q
What are the components of the I2A2 design methodology?
A. Inputs, Interactions, Actions, Apps
B. Inputs, Interactions, Actions, Artifacts
C. Inputs, Interactions, Apps, Artifacts
D. Inputs, Interactions, Actions, Assets
Q
Some of the playbooks on the SOAR server should only be executed by members of the admin role. How can this rule be applied?
A. Make sure the Execute Playbook capability is removed from all roles except admin.
B. Place restricted playbooks in a second source repository that has restricted access.
C. Add a filter block to all restricted playbooks that filters for runRole = ‘Admin’.
D. Add a tag with restricted access to the restricted playbooks.
Q
Why is it good playbook design to create smaller and more focused playbooks? (select all that apply)
A. Reduces amount of playbook data stored in each repo.
B. Reduce large complex playbooks which become difficult to maintain.
C. Encourages code reuse in a more compartmentalized form.
D. To avoid duplication of code across multiple playbooks.
………..