nerdexam
Splunk

SPLK-2003 · Question #85

What users are included in a new installation of SOAR?

The correct answer is A. The admin and automation users are included by default. In a fresh SOAR installation, two built-in accounts are created automatically: the admin user (for administrative configuration) and the automation user (a service account used internally to execute playbooks and automated actions). This makes A correct. Why the distractors are…

Splunk SOAR Environment

Question

What users are included in a new installation of SOAR?

Options

  • AThe admin and automation users are included by default.
  • BThe admin, power, and user users are included by default.
  • CNo users are included by default.
  • DOnly the admin user is included by default.

How the community answered

(41 responses)
  • A
    90% (37)
  • B
    5% (2)
  • C
    2% (1)
  • D
    2% (1)

Explanation

In a fresh SOAR installation, two built-in accounts are created automatically: the admin user (for administrative configuration) and the automation user (a service account used internally to execute playbooks and automated actions). This makes A correct.

Why the distractors are wrong:

  • B is wrong because "power" and "user" role accounts are not pre-created - those are role types you assign when creating additional users manually.
  • C is wrong because a completely empty installation would leave you unable to log in or run automations at all; the system bootstraps with the essentials.
  • D is wrong because it omits the automation user, which is equally critical since SOAR's core function depends on it for executing automated workflows.

Memory tip: Think of the two defaults as "human + machine" - admin is for the human operator, automation is for the machine. A SOAR system without either one can't do its job out of the box.

Topics

#default users#admin user#automation user#installation

Community Discussion

No community discussion yet for this question.

Full SPLK-2003 Practice