nerdexam
Splunk

SPLK-2003 · Question #48

SPLK-2003 Question #48: Real Exam Question with Answer & Explanation

The correct answer is C. API blocks. Filter blocks are used to add information to custom lists in Phantom VPE. Filter blocks allow the user to specify a list name and a filter expression to select the data to be added to the list. Action blocks are used to execute app actions, API blocks are used to make REST API ca

Question

Which Phantom VPE Nock S used to add information to custom lists?

Options

  • AAction blocks
  • BFilter blocks
  • CAPI blocks
  • DDecision blocks

Explanation

Filter blocks are used to add information to custom lists in Phantom VPE. Filter blocks allow the user to specify a list name and a filter expression to select the data to be added to the list. Action blocks are used to execute app actions, API blocks are used to make REST API calls, and decision blocks are used to evaluate conditions and branch the playbook execution. In the Phantom Visual Playbook Editor (VPE), an API block is used to interact with various external APIs, including custom lists within Phantom. Custom lists are key-value stores that can be used to maintain state, aggregate data, or track information across multiple playbook runs. API blocks allow the playbook to make GET, POST, PUT, and DELETE requests to these lists, facilitating the addition, retrieval, update, or removal of information. This makes API blocks a versatile tool in managing custom list data within playbooks.

Community Discussion

No community discussion yet for this question.

Full SPLK-2003 Practice