Splunk SPLK-2003 Splunk SOAR Certified Automation Developer Exam Online Training
Splunk SPLK-2003 Online Training
The questions for SPLK-2003 were last updated at Apr 21,2025.
- Exam Code: SPLK-2003
- Exam Name: Splunk SOAR Certified Automation Developer Exam
- Certification Provider: Splunk
- Latest update: Apr 21,2025
Which of the following will show all artifacts that have the term results in a filePath CEF value?
- A . …/rest/artifact?_filter_cef_filePath_icontain=”results”
- B . …rest/artifacts/filePath=”%results%”
- C . …/result/artifacts/cef/filePath= ‘%results%”
- D . …/result/artifact?_query_cef_filepath_icontains=”results
Which of the following can be configured in the ROl Settings?
- A . Analyst hours per month.
- B . Time lost.
- C . Number of full time employees (FTEs).
- D . Annual analyst salary.
Which of the following expressions will output debug information to the debug window in the Visual Playbook Editor?
- A . phantom.debug()
- B . phantom.exception()
- C . phantom.print ()
- D . phantom.assert()
Which of the following supported approaches enables Phantom to run on a Windows server?
- A . Install the Phantom RPM in a GNU Cygwin implementation.
- B . Run the Phantom OVA as a cloud instance.
- C . Install the Phantom RPM file in Windows Subsystem for Linux (WSL).
- D . Run the Phantom OVA as a virtual machine.
Which of the following can the format block be used for?
- A . To generate arrays for input into other functions.
- B . To generate HTML or CSS content for output in email messages, user prompts, or comments.
- C . To generate string parameters for automated action blocks.
- D . To create text strings that merge state text with dynamic values for input or output.