SPLK-2003 exam

Which of the following are the default ports that must be configured on Splunk to allow connections from Phantom?A . SplunkWeb (8088), SplunkD (8089), HTTP Collector (8000)B . SplunkWeb (8089), SplunkD (8088), HTTP Collector (8000)C . SplunkWeb (8421), SplunkD (8061), HTTP Collector (8798)D . SplunkWeb (8000), SplunkD (8089), HTTP Collector...

Phantom supports multiple user authentication methods such as LDAP and SAML2. What other user authentication method is supported?A . SAML3B . PIV/CACC . BiometricsD . OpenIDView AnswerAnswer: A

Within the 12A2 design methodology, which of the following most accurately describes the last step?A . List of the apps used by the playbook.B . List of the actions of the playbook design.C . List of the outputs of the playbook design.D . List of the data needed to run...

Without customizing container status within Phantom, what are the three types of status for a container?A . New, In Progress, ClosedB . Low, Medium, HighC . Mew, Open, ResolvedD . Low, Medium, CriticalView AnswerAnswer: A

Which app allows a user to send Splunk Enterprise Security notable events to Phantom?A . Any of the integrated Splunk/Phantom AppsB . Splunk App for Phantom Reporting.C . Splunk App for Phantom.D . Phantom App for Splunk.View AnswerAnswer: A