Black Friday Exclusive Sitewide 50% off | Please use #SPL50 at checkout

Splunk Phantom Certified Admin

Splunk Phantom Certified Admin

Free Practice Test

Not Available
  • TypeExam Format
  • No. of Questions100
  • AccessImmediate
  • Access DurationLife Long Access
  • Exam DeliveryOnline
  • Test ModesPractice

Practice Exam

Not Available
  • TypeExam Format
  • No. of Questions100
  • AccessImmediate
  • Access DurationLife Long Access
  • Exam DeliveryOnline
  • Test ModesPractice, Exam

Online Course

-
  • Content TypeVideo
  • DeliveryOnline
  • AccessImmediate
  • Access DurationLife Long Access
  • No of videos-
  • No of hours-
Not Available

Splunk Phantom Certified Admin


Splunk Phantom Certified Admin exam is the final step towards completion of the Splunk Phantom Certified Admin certification track. This highly technical certification exam evaluates a candidate’s knowledge and skills in installing and configuring a Phantom server and integrating it with Splunk. This also includes planning, designing, creating, and debugging Playbooks.

A Splunk Phantom Certified Admin has ability to install, configure, and use Phantom servers and plan, designs, creates, and debugs basic playbooks for Phantom. These highly skilled individuals are well proficient in complex Phantom solution development. They can integrate Phantom with Splunk as well as develop playbooks requiring custom coding and REST API usage. 


Recommended Prerequisite Courses:

Candidates for the exam are recommended to complete the lecture, hands-on labs, and quizzes that are part of the course which are:

  • Administering Phantom
  • Developing Phantom Playbooks
  • Advanced Phantom Implementation


Course Structure

The topics covered in this exam include: 

  • Topic 1: Deployment, Installation, and Initial Configuration 5%
  • Topic 2: User Management and Multi-tenancy 5%
  • Topic 3: Apps, Assets, and Playbooks 5%
  • Topic 4: Analyst Queue 5%
  • Topic 5: The Investigation Page 10%
  • Topic 6: Case Management and Workbooks 5%
  • Topic 7: Customizations 5%
  • Topic 8: System Maintenance 5%
  • Topic 9: Introduction to Playbooks 5%
  • Topic 10: Visual Playbook Editor 5%
  • Topic 11: Logic, Filters, and User Interaction 5%
  • Topic 12: Formatted Output and Data Access 5%
  • Topic 13: Modular Playbook Development 5%
  • Topic 14: Custom Lists and Data Routing 5%
  • Topic 15: Configuring External Splunk Search 5%
  • Topic 16: Integrating Phantom into Splunk 10%
  • Topic 17: Custom Coding 5%
  • Topic 18: Using REST 5%


Enrich and upgrade your skills to become Splunk Phantom Certified Admin exam with hundreds of practice exam and expert learning resources. Try Free Test Now!


Exam Format and Information

Exam Name Splunk Phantom Certified Admin
Exam Code -
Exam Duration 117 mins
Exam Format Multiple Choice and Multi-Response Questions
Exam Type Highly Technical certification exam
Number of Questions 121 Questions
Eligibility/Pre-Requisite As suggested*
Exam Fee $125 USD
Exam Language English
Pass Score -

Splunk Phantom Certified Admin FAQs

Candidates will get the exam result immediately after submitting the exam. For candidates testing onsite, a printout of these results will be provided by the on-site proctor. Candidates testing via online proctoring will not receive a hard copy of their results, but will have the option to print a score report via their Pearson online account. Candidates (both onsite and online) who pass the exam will not receive any additional feedback regarding exam performance.
Before applying for the Splunk Phantom Certified Admin exam, candidates are not required to pass any exam.
Splunk Phantom Certified Admin exam is the final step towards completion of the Splunk Phantom Certified Admin certification track. This highly technical certification exam evaluates a candidate’s knowledge and skills in installing and configuring a Phantom server and integrating it with Splunk. This also includes planning, designing, creating, and debugging Playbooks.
There will be a total of 121 questions in the exam.
Candidates for the exam are recommended to complete the lecture, hands-on labs, and quizzes that are part of the course which are Administering Phantom, Developing Phantom Playbooks and Advanced Phantom Implementation.
The exam will cost you $125 USD with additional taxes.
The topics covered in this exam include: Topic 1: Deployment, Installation, and Initial Configuration 5%; Topic 2: User Management and Multi-tenancy 5%; Topic 3: Apps, Assets, and Playbooks 5%; Topic 4: Analyst Queue 5%; Topic 5: The Investigation Page 10%; Topic 6: Case Management and Workbooks 5%; Topic 7: Customizations 5%; Topic 8: System Maintenance 5%; Topic 9: Introduction to Playbooks 5%; Topic 10: Visual Playbook Editor 5%; Topic 11: Logic, Filters, and User Interaction 5%; Topic 12: Formatted Output and Data Access 5%; Topic 13: Modular Playbook Development 5%; Topic 14: Custom Lists and Data Routing 5%; Topic 15: Configuring External Splunk Search 5%; Topic 16: Integrating Phantom into Splunk 10%; Topic 17: Custom Coding 5%; Topic 18: Using REST 5%
Total seat time for the exam is 120 minutes out of which 3 minutes will be given for reviewing the exam agreement and 117 minutes to complete the exam.
A Splunk Phantom Certified Admin has ability to install, configure, and use Phantom servers and plan, designs, creates, and debugs basic playbooks for Phantom. These highly skilled individuals are well proficient in complex Phantom solution development. They can integrate Phantom with Splunk as well as develop playbooks requiring custom coding and REST API usage.
The following content areas are general guidelines for the content to be included on the exam: • Installation/Initial configuration • Apps and assets • User management • Ingesting data • Events and containers • Mission control • Running actions and playbooks • Case management/workflows • Multi-tenacity • Clustering • Automation best practices • The visual playbook editor • Using actions and decisions • Using action results • Testing and debugging playbooks • Using interaction • Output formatting • Complex logic • Interacting with artifacts • Using the vault in a playbook • Custom lists • Integrating Splunk with Phantom
Candidates can schedule the Splunk Phantom Certified Admin exam directly from PearsonVUE. Follow the steps for account creation and exam registration provided at home.pearsonvue.com/splunk. Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase.
The course includes: • Administering Phantom • Developing Phantom Playbooks • Advanced Phantom Implementation
To change or cancel an existing appointment less than 48 hours in advance, please contact Pearson VUE Customer Support. All other appointment changes can be made via your Pearson VUE account.
Candidates who do not pass an exam on their first attempt must wait 7 days to retake the exam. Further, candidates who do not pass an exam on their second attempt must wait 14 days to retake the exam. After that, the subsequent retakes are as follows: ● Fourth attempt 4 weeks or 28 days ● Fifth attempt 8 weeks or 56 days ● Sixth attempt 8 weeks or 56 days The retakes beyond the 6th attempt will be considered on a case-by-case basis. Splunk reserves the right to deny a retake beyond the 6th attempt
All certifications are now subject to a 3-year life cycle. This means that your certification is valid for three years from the date you passed the exam.
Once purchased, the practice exams can be accessed for the lifetime.
Yes testprep training offers free practice tests for Exam which can be used before the final purchase for complete test.
Yes our experts frequently blog about the tips and tricks for exam preparation.
Yes, Testprep Training offers email support for any certification related query while you are preparing for the exam using our practice exams. Your query will be handled by experts in due course.
Yes, we offer nearly 50% discount for the order more than 10 products at a time. You can reach the test prep training Helpdesk for more details. The member of the support staff will respond as soon as possible.

 

We are here to help!

CONTACT US