Splunk SPLK-2003 Exam - Topic 1 Question 43 Discussion

Actual exam question for Splunk's SPLK-2003 exam

Question #: 43
Topic #: 1

[All SPLK-2003 Questions]

A user wants to use their Splunk Cloud instance as the external Splunk instance for Phantom. What ports need to be opened on the Splunk Cloud instance to facilitate this? Assume default ports are in use.

ATCP 8088 and TCP 8099.

BTCP 80 and TCP 443.

CSplunk Cloud is not supported.

DTCP 8080 and TCP 8191.

Show Suggested Answer

Suggested Answer: D

by Ruby at May 28, 2024, 10:30 PM

Limited Time Offer

25%

Off

Get Premium SPLK-2003 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cathern

3 months ago

Nope, it's 8088 and 8099 for sure!

upvoted 0 times

...

Erinn

3 months ago

I thought it was TCP 80 and 443?

upvoted 0 times

...

Gerri

3 months ago

Wait, is Splunk Cloud even supported for this?

upvoted 0 times

...

Nenita

4 months ago

Definitely agree with that!

upvoted 0 times

...

Casandra

4 months ago

You need TCP 8088 and TCP 8099 for Phantom.

upvoted 0 times

...

Patrick

4 months ago

I don't recall TCP 8080 and TCP 8191 being mentioned in my studies. They seem off to me, but I could be mistaken.

upvoted 0 times

...

Kindra

4 months ago

I feel like I read somewhere that Splunk Cloud might not support Phantom at all. Is that option C?

upvoted 0 times

...

Ronald

4 months ago

I remember practicing a similar question, and I think it was about using TCP 80 and TCP 443 for web traffic. Could that be relevant here?

upvoted 0 times

...

Delisa

5 months ago

I think it might be TCP 8088 and TCP 8099, but I'm not completely sure if those are the right ones for Phantom integration.

upvoted 0 times

...

Lindsey

5 months ago

Ah, I remember learning about this in class. Splunk Cloud uses the standard web ports, so the answer is B - TCP 80 and TCP 443.

upvoted 0 times

...

Antione

5 months ago

I'm a little confused by this question. I don't have much experience with Splunk Cloud, so I'm not sure which ports would need to be opened. I'll have to make an educated guess on this one.

upvoted 0 times

...

Vincent

5 months ago

Okay, let me think this through. Phantom needs to communicate with the external Splunk instance, so the ports needed would be the ones used for that communication. I'm guessing the answer is either B or D.

upvoted 0 times

...

Stephaine

5 months ago

Hmm, I'm a bit unsure about this one. I know Splunk has a lot of different ports, so I'll need to think carefully about the default ports used for Splunk Cloud.

upvoted 0 times

...

Tegan

5 months ago

This seems like a straightforward question about Splunk Cloud configuration. I'm pretty confident I can figure this out.

upvoted 0 times

...

Giuseppe

5 months ago

Hmm, I'm a bit unsure about the difference between "server" and "peer" in the NTP commands. I'll need to think this through carefully.

upvoted 0 times

...

Maryanne

5 months ago

Hmm, I'm a bit confused on this one. I know we need certain privileges to create a view, but I can't remember if it's just SELECT or if there are other requirements. I'll have to think this through carefully.

upvoted 0 times

...

Karan

5 months ago

I think the answer might be WS-Trust, since it deals with issuing and managing security tokens, but I'm not entirely sure.

upvoted 0 times

...

Carma

2 years ago

D seems logical, since Phantom usually uses the Splunk API ports. But I guess Splunk Cloud has its own special snowflake ports. Who knows what goes on behind those clouds!

upvoted 0 times

Phillip

2 years ago

D seems logical, since Phantom usually uses the Splunk API ports. But I guess Splunk Cloud has its own special snowflake ports. Who knows what goes on behind those clouds!

upvoted 0 times

...

Daryl

2 years ago

A) TCP 8088 and TCP 8099.

upvoted 0 times

...

Sherita

2 years ago

Haha, good one! Splunk Cloud not supported, that's a real knee-slapper. What's next, Splunk on a Commodore 64?

upvoted 0 times

Jamika

2 years ago

C) Splunk Cloud is not supported.

upvoted 0 times

...

Dahlia

2 years ago

B) TCP 80 and TCP 443.

upvoted 0 times

...

Ryan

2 years ago

A) TCP 8088 and TCP 8099.

upvoted 0 times

...

Marnie

2 years ago

C is the correct answer. Splunk Cloud is not supported as an external Splunk instance for Phantom. That's the whole point of using Splunk Cloud - you don't have to manage the Splunk infrastructure yourself!

upvoted 0 times

...