Question 6 of 78

An active playbook can be configured to operate on all containers that share which attribute?

Answer

Suggested Answer

The suggested answer is B.

Community Votes1 vote
BSuggested
100%
Question 7 of 78

Which visual playbook editor block is used to assemble commands and data into a valid Splunk search within a SOAR playbook?

Answer

Suggested Answer

The suggested answer is A.

Community Votes5 votes
DMost voted
60%
ASuggested
20%
C
20%
Question 8 of 78

Which of the following contains official SOAR documentation for the latest releases?

Answer

Suggested Answer

The suggested answer is D.

Question 9 of 78

Two action blocks, geolocate_ip_1 and file_reputation_2, are connected to a decision block. Which of the following is a correct configuration for making a decision on the action results from one of the given blocks?

Answer

Suggested Answer

The suggested answer is B.

The correct configuration involves checking the country code obtained from the geolocate_ip_1 action block against a list of banned countries. Therefore, the Select parameter should be set to geolocate_ip_1:action_result.data.*.country_iso_code, the evaluation option should be set to 'in,' and the Select Value should be set to custom_list:Banned Countries. This configuration accurately assesses whether the IP address falls within a banned country based on the geolocation data.

Community Votes1 vote
BSuggested
100%
Question 10 of 78

What is enabled if the Logging option for a playbook' s settings is enabled?

Answer

Suggested Answer

The suggested answer is D.

Enabling the Logging option for a playbook's settings means that more detailed logging information is available in the Investigation page. This aids in thorough inspection and understanding of each step executed, helping in investigating any issues or actions taken by the playbook.

Community Votes2 votes
BMost voted
50%
DSuggested
50%