MENU
Without customizing container status within Phantom, what are the three types of status for a container?
Suggested Answer: A
Get Premium SPLK-2003 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Within Splunk SOAR, containers (which represent incidents, cases, or events) have a lifecycle that is tracked through their status. The default statuses available without any customization are 'New', 'In Progress', and 'Closed'. These statuses help in organizing and managing the incident response process, allowing users to easily track the progress of investigations and responses from initial detection through to resolution.
4 comments · newest first
RA
Rasheeda
38 minutes ago
I thought there was a question similar to this in our last review session, and I think it was about "Mew, Open, Resolved," but that doesn't seem correct now.
DA
Dawne
5 days ago
I’m pretty sure the correct answer is A) New, In Progress, Closed, but I might be mixing it up with another topic.
MI
Mila
10 days ago
I remember practicing a question about container statuses, and I feel like "Low, Medium, High" was mentioned, but it doesn't sound right for this context.
RO
Rodolfo
16 days ago
I think the container statuses are something like New, In Progress, and Closed, but I’m not entirely sure.