Question 6 of 78
An active playbook can be configured to operate on all containers that share which attribute?
Correct Answer: B

Question 7 of 78
Which visual playbook editor block is used to assemble commands and data into a valid Splunk search within a SOAR playbook?
Correct Answer: A

Question 8 of 78
Which of the following contains official SOAR documentation for the latest releases?
Correct Answer: D

Question 9 of 78
Two action blocks, geolocate_ip_1 and file_reputation_2, are connected to a decision block. Which of the following is a correct configuration for making a decision on the action results from one of the given blocks?
Correct Answer: B

The correct configuration involves checking the country code obtained from the geolocate_ip_1 action block against a list of banned countries. Therefore, the Select parameter should be set to geolocate_ip_1:action_result.data.*.country_iso_code, the evaluation option should be set to 'in,' and the Select Value should be set to custom_list:Banned Countries. This configuration accurately assesses whether the IP address falls within a banned country based on the geolocation data.

Question 10 of 78
What is enabled if the Logging option for a playbook' s settings is enabled?
Correct Answer: D

Enabling the Logging option for a playbook's settings means that more detailed logging information is available in the Investigation page. This aids in thorough inspection and understanding of each step executed, helping in investigating any issues or actions taken by the playbook.