Splunk Phantom Certified Admin - RETIRED
Splunk Phantom Certified Admin - RETIRED
Splunk Phantom Certified Admin
Splunk Phantom Certified Admin exam is the final step towards completion of the Splunk Phantom Certified Admin certification track. This highly technical certification exam evaluates a candidate’s knowledge and skills in installing and configuring a Phantom server and integrating it with Splunk. This also includes planning, designing, creating, and debugging Playbooks.
A Splunk Phantom Certified Admin has ability to install, configure, and use Phantom servers and plan, designs, creates, and debugs basic playbooks for Phantom. These highly skilled individuals are well proficient in complex Phantom solution development. They can integrate Phantom with Splunk as well as develop playbooks requiring custom coding and REST API usage.
Recommended Prerequisite Courses:
Candidates for the exam are recommended to complete the lecture, hands-on labs, and quizzes that are part of the course which are:
- Administering Phantom
- Developing Phantom Playbooks
- Advanced Phantom Implementation
Course Structure
The topics covered in this exam include:
- Topic 1: Deployment, Installation, and Initial Configuration 5%
- Topic 2: User Management and Multi-tenancy 5%
- Topic 3: Apps, Assets, and Playbooks 5%
- Topic 4: Analyst Queue 5%
- Topic 5: The Investigation Page 10%
- Topic 6: Case Management and Workbooks 5%
- Topic 7: Customizations 5%
- Topic 8: System Maintenance 5%
- Topic 9: Introduction to Playbooks 5%
- Topic 10: Visual Playbook Editor 5%
- Topic 11: Logic, Filters, and User Interaction 5%
- Topic 12: Formatted Output and Data Access 5%
- Topic 13: Modular Playbook Development 5%
- Topic 14: Custom Lists and Data Routing 5%
- Topic 15: Configuring External Splunk Search 5%
- Topic 16: Integrating Phantom into Splunk 10%
- Topic 17: Custom Coding 5%
- Topic 18: Using REST 5%
Enrich and upgrade your skills to become Splunk Phantom Certified Admin exam with hundreds of practice exam and expert learning resources. Try Free Test Now!
Exam Format and Information
| Exam Name Splunk Phantom Certified Admin | Exam Code - |
| Exam Duration 117 mins | Exam Format Multiple Choice and Multi-Response Questions |
| Exam Type Highly Technical certification exam | Number of Questions 121 Questions |
| Eligibility/Pre-Requisite As suggested* | Exam Fee $125 USD |
| Exam Language English | Pass Score - |
Splunk Phantom Certified Admin - RETIRED FAQs
When will I receive my exam result?
Candidates will get the exam result immediately after submitting the exam. For candidates testing onsite, a printout of these results will be provided by the on-site proctor. Candidates testing via online proctoring will not receive a hard copy of their results, but will have the option to print a score report via their Pearson online account. Candidates (both onsite and online) who pass the exam will not receive any additional feedback regarding exam performance.
What is the exam cancellation policy?
To change or cancel an existing appointment less than 48 hours in advance, please contact Pearson VUE Customer Support. All other appointment changes can be made via your Pearson VUE account.
What are the courses recommended for the Splunk Phantom Certified Admin exam?
The course includes:
• Administering Phantom
• Developing Phantom Playbooks
• Advanced Phantom Implementation
What knowledge candidates are recommended for the Splunk Phantom Certified Admin exam?
Candidates for the exam are recommended to complete the lecture, hands-on labs, and quizzes that are part of the course which are Administering Phantom, Developing Phantom Playbooks and Advanced Phantom Implementation.
I just passed a Pearson VUE certification exam. When does my certification expire?
All certifications are now subject to a 3-year life cycle. This means that your certification is valid for three years from the date you passed the exam.
How to schedule the Splunk Phantom Certified Admin exam?
Candidates can schedule the Splunk Phantom Certified Admin exam directly from PearsonVUE. Follow the steps for account creation and exam registration provided at home.pearsonvue.com/splunk. Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase.
Do we have to pass any exam before applying for Splunk Phantom Certified Admin exam?
Before applying for the Splunk Phantom Certified Admin exam, candidates are not required to pass any exam.
What is Splunk Phantom Certified Admin exam?
Splunk Phantom Certified Admin exam is the final step towards completion of the Splunk Phantom Certified Admin certification track. This highly technical certification exam evaluates a candidate’s knowledge and skills in installing and configuring a Phantom server and integrating it with Splunk. This also includes planning, designing, creating, and debugging Playbooks.
How many questions will be there on the Splunk Phantom Certified Admin exam?
There will be a total of 121 questions in the exam.
What is the exam retake process?
Candidates who do not pass an exam on their first attempt must wait 7 days to retake the exam. Further, candidates who do not pass an exam on their second attempt must wait 14 days to retake the exam. After that, the subsequent retakes are as follows:
● Fourth attempt 4 weeks or 28 days
● Fifth attempt 8 weeks or 56 days
● Sixth attempt 8 weeks or 56 days
The retakes beyond the 6th attempt will be considered on a case-by-case basis. Splunk reserves the right to deny a retake beyond the 6th attempt
What is the course structure for the Splunk Phantom Certified Admin exam?
The topics covered in this exam include:
Topic 1: Deployment, Installation, and Initial Configuration 5%;
Topic 2: User Management and Multi-tenancy 5%;
Topic 3: Apps, Assets, and Playbooks 5%;
Topic 4: Analyst Queue 5%;
Topic 5: The Investigation Page 10%;
Topic 6: Case Management and Workbooks 5%;
Topic 7: Customizations 5%;
Topic 8: System Maintenance 5%;
Topic 9: Introduction to Playbooks 5%;
Topic 10: Visual Playbook Editor 5%;
Topic 11: Logic, Filters, and User Interaction 5%;
Topic 12: Formatted Output and Data Access 5%;
Topic 13: Modular Playbook Development 5%;
Topic 14: Custom Lists and Data Routing 5%;
Topic 15: Configuring External Splunk Search 5%;
Topic 16: Integrating Phantom into Splunk 10%;
Topic 17: Custom Coding 5%;
Topic 18: Using REST 5%
What is the total time duration for the Splunk Phantom Certified Admin exam?
Total seat time for the exam is 120 minutes out of which 3 minutes will be given for reviewing the exam agreement and 117 minutes to complete the exam.
What is the cost of the Splunk Phantom Certified Admin exam?
The exam will cost you $125 USD with additional taxes.
Which are the important content areas for the Splunk Phantom Certified Admin exam?
The following content areas are general guidelines for the content to be included on the exam:
• Installation/Initial configuration
• Apps and assets
• User management
• Ingesting data
• Events and containers
• Mission control
• Running actions and playbooks
• Case management/workflows
• Multi-tenacity
• Clustering
• Automation best practices
• The visual playbook editor
• Using actions and decisions
• Using action results
• Testing and debugging playbooks
• Using interaction
• Output formatting
• Complex logic
• Interacting with artifacts
• Using the vault in a playbook
• Custom lists
• Integrating Splunk with Phantom
What is the role of a Splunk Phantom Certified Admin?
A Splunk Phantom Certified Admin has ability to install, configure, and use Phantom servers and plan, designs, creates, and debugs basic playbooks for Phantom. These highly skilled individuals are well proficient in complex Phantom solution development. They can integrate Phantom with Splunk as well as develop playbooks requiring custom coding and REST API usage.
Do you offer any discount on the bulk purchase?
Yes, we offer nearly 50% discount for the order more than 10 products at a time. You can reach the test prep training Helpdesk for more details. The member of the support staff will respond as soon as possible.
Is there any assistance from Testprep Training in terms of exam preparation?
Yes, Testprep Training offers email support for any certification related query while you are preparing for the exam using our practice exams. Your query will be handled by experts in due course.
Do you provide any preparation guidance for this certification exam?
Yes our experts frequently blog about the tips and tricks for exam preparation.
Can we try the free test before purchasing the practice exam?
Yes testprep training offers free practice tests for Exam which can be used before the final purchase for complete test.
For how long is the license valid after purchase?
Once purchased, the practice exams can be accessed for the lifetime.