Independence Day - 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: av54zq84

Exact2Pass Menu

Question # 4

How is it possible to evaluate user prompt results?

A.

Set action_result.summary. status to required.

B.

Set the user prompt to reinvoke if it times out.

C.

Set action_result. summary. response to required.

D.

Add a decision Mode

Full Access
Question # 5

What does a user need to do to have a container with an event from Splunk use context-aware actions designed for notable events?

A.

Include the notable event's event_id field and set the artifacts label to aplunk notable event id.

B.

Rename the event_id field from the notable event to splunkNotableEventld.

C.

Include the event_id field in the search results and add a CEF definition to Phantom for event_id, datatype splunk notable event id.

D.

Add a custom field to the container named event_id and set the custom field's data type to splunk notable event id.

Full Access
Question # 6

How can an individual asset action be manually started?

A.

With the > action button in the analyst queue page.

B.

By executing a playbook in the Playbooks section.

C.

With the > action button in the Investigation page.

D.

With the > asset button in the asset configuration section.

Full Access
Question # 7

Which is the primary system requirement that should be increased with heavy usage of the file vault?

A.

Amount of memory.

B.

Number of processors.

C.

Amount of storage.

D.

Bandwidth of network.

Full Access
Question # 8

Is it possible to import external Python libraries such as the time module?

A.

No.

B.

No, but this can be changed by setting the proper permissions.

C.

Yes, in the global block.

D.

Yes. from a drop down menu.

Full Access