A user has written a playbook that calls three other playbooks, one after the other. The user notices that the second playbook starts executing before the first one completes. What is the cause of this behavior?
What is the primary objective of using the I2A2 playbook design methodology?
After a successful POST to a Phantom REST endpoint to create a new object what result is returned?
After enabling multi-tenancy, which of the Mowing is the first configuration step?
Which of the following are examples of things commonly done with the Phantom REST APP
What does a user need to do to have a container with an event from Splunk use context-aware actions designed for notable events?
Which of the following queries would return all artifacts that contain a SHA1 file hash?
In a playbook, more than one Action block can be active at one time. What is this called?
Which of the following applies to filter blocks?
Seventy can be set during ingestion and later changed manually. What other mechanism can change the severity or a container?
Without customizing container status within Phantom, what are the three types of status for a container?
Is it possible to import external Python libraries such as the time module?
Which of the following is a reason to create a new role in SOAR?
On a multi-tenant Phantom server, what is the default tenant's ID?
How can the DECIDED process be restarted?
Which Phantom API command is used to create a custom list?
Configuring Phantom search to use an external Splunk server provides which of the following benefits?
What do assets provide for app functionality?
When is using decision blocks most useful?
When analyzing events, a working on a case, significant items can be marked as evidence. Where can ail of a case's evidence items be viewed together?
Which of the following actions will store a compressed, secure version of an email attachment with suspected malware for future analysis?
What values can be applied when creating Custom CEF field?
Which of the following describes the use of labels in Phantom?
Which is the primary system requirement that should be increased with heavy usage of the file vault?
Which of the following supported approaches enables Phantom to run on a Windows server?
During a second test of a playbook, a user receives an error that states: 'an empty parameters list was passed to phantom.act()." What does this indicate?
A customer wants to design a modular and reusable set of playbooks that all communicate with each other. Which of the following is a best practice for data sharing across playbooks?