SPLK-2003 · Question #69
Which of the following is a way to access lists?
The correct answer is C. Navigate to Playbooks. Navigating to Playbooks is correct because, in platforms like Splunk SOAR, "Lists" (custom lists used by playbooks for lookups, allow/block lists, etc.) are housed under the Playbooks section alongside other playbook-related resources. Asset Settings (A) is where you configure…
Question
Which of the following is a way to access lists?
Options
- ANavigate to Asset Settings.
- BNavigate to the Investigation page.
- CNavigate to Playbooks.
- DNavigate to Advanced Settings.
How the community answered
(37 responses)- A3% (1)
- B3% (1)
- C95% (35)
Explanation
Navigating to Playbooks is correct because, in platforms like Splunk SOAR, "Lists" (custom lists used by playbooks for lookups, allow/block lists, etc.) are housed under the Playbooks section alongside other playbook-related resources. Asset Settings (A) is where you configure external integrations and connectors, not data lists. The Investigation page (B) is for triaging and working individual events or cases, not managing reusable list objects. Advanced Settings (D) controls system-level platform configuration such as authentication or logging preferences - not list management.
Memory tip: Think of lists as ingredients for playbooks - since playbooks consume them, it makes sense they live in the same section. "Playbooks = Playbooks + the resources they need."
Topics
Community Discussion
No community discussion yet for this question.