nerdexam
Splunk

SPLK-2003 · Question #69

Which of the following is a way to access lists?

The correct answer is C. Navigate to Playbooks. Navigating to Playbooks is correct because, in platforms like Splunk SOAR, "Lists" (custom lists used by playbooks for lookups, allow/block lists, etc.) are housed under the Playbooks section alongside other playbook-related resources. Asset Settings (A) is where you configure…

Developing Playbooks

Question

Which of the following is a way to access lists?

Options

  • ANavigate to Asset Settings.
  • BNavigate to the Investigation page.
  • CNavigate to Playbooks.
  • DNavigate to Advanced Settings.

How the community answered

(37 responses)
  • A
    3% (1)
  • B
    3% (1)
  • C
    95% (35)

Explanation

Navigating to Playbooks is correct because, in platforms like Splunk SOAR, "Lists" (custom lists used by playbooks for lookups, allow/block lists, etc.) are housed under the Playbooks section alongside other playbook-related resources. Asset Settings (A) is where you configure external integrations and connectors, not data lists. The Investigation page (B) is for triaging and working individual events or cases, not managing reusable list objects. Advanced Settings (D) controls system-level platform configuration such as authentication or logging preferences - not list management.

Memory tip: Think of lists as ingredients for playbooks - since playbooks consume them, it makes sense they live in the same section. "Playbooks = Playbooks + the resources they need."

Topics

#lists#SOAR navigation#playbook resources#custom lists

Community Discussion

No community discussion yet for this question.

Full SPLK-2003 Practice