Splunk Phantom Certified Admin Practice Exam FAQ
What is Splunk Phantom Certified Admin Exam?
The Splunk Phantom Certified Admin practice exam examines the candidate’s ability to install, configure, and uses Phantom servers and plans, designs, creates and debugs basic playbooks for Phantom. The Splunk Phantom Certified Admin is a highly skilled individual who is proficient in complex Phantom solution development and can integrate Phantom with Splunk and develop playbooks requiring custom coding and REST API usage. This certification demonstrates an individual’s knowledge and skills in installing and configuring a Phantom server and integrating it with Splunk and planning, designing, creating, and debugging Playbooks.
What is the job role of Splunk Phantom Certified Admin?
The Splunk Phantom Certified Admin practice exam includes the topics such as Installation/Initial configuration, Apps and assets, User management, Ingesting data, Events and containers, Mission control, Running actions and playbooks, Case management/workflows, Multi-tenacity, Clustering, Automation best practices, The visual playbook editor, Using actions and decisions, Using action results, Testing and debugging playbooks, Custom lists, Integrating Splunk with Phantom, etc.
What is the course structure for the Exam?
The exam course covers the following domains-
- Deployment, Installation, and Initial Configuration
- User Management and Multi-tenancy
- Apps, Assets, and Playbooks
- Analyst Queue
- The Investigation Page
- Case Management and Workbook
- Customizations
- System Maintenance
- Introduction to Playbooks
- Visual Playbook Editor
- Logic, Filters, and User Interaction
- Formatted Output and Data Access
- Modular Playbook Development
- Custom Lists and Data Routing
- Configuring External Splunk Search
- Integrating Phantom into Splunk
- Use Splunk search from playbooks\Custom Coding
- Using REST
How many questions are there in the Exam?
There are a total of 58 Questions in the exam.
What is the time duration of the exam?
The exam needs to be completed in 60 minutes.
In which language can the exam be taken?
The exam is available in English language only.
What is the exam fee?
The exam fee is $125 USD.
What payment methods are available?
You can use Visa, American Express, or MasterCard debit or credit cards. Candidates testing within some sanctioned countries will need to contact the test center directly to inquire about other methods of payment.
How can the exam be taken?
The splunk certification exams can be taken in either of the following ways-
- Firstly, In-person at a Pearson Test Center.
- Or at home via online proctoring
How Do I register for the Splunk exam?
The Splunk exam can be registered by following the steps-
- First-time registrants need to connect your Splunk account to the Pearson VUE platform.
- Additionally, you will have to submit complete, accurate contact information to testing partner Pearson VUE.
- Then you need to wait for Authorization to Test email from Pearson View for two days from your form submission.
- Subsequently, create an account with Pearson VUE.
- Further, you need to schedule an exam appointment. Your Pearson VUE Home screen provides a full list of exams for which you are eligible. Click through the verification screens and proceed to Schedule this Exam, followed by Proceed to Scheduling.
- Further, you need to verify exam appointment details and confirm contact information. Agree to policies (please read carefully). Enter payment information (or Voucher code, if applicable). Submit Order.
- Lastly, you will receive a registration confirmation email from Pearson VUE.
I already have an account with Pearson VUE. Do I need to make a new one?
Yes. The Pearson VUE platform requires that candidates have a unique account for each certification program in which they’d like to participate.
What is the exam retake policy?
If you are not able to pass the exam in the first attempt Splunk offers you to take the exam again. You must wait 7 days to retake the exam.
Do I need to pay additional fee in order to retake the exam?
The re-take fee for the exam is $125.
Is it possible to retake previously passed exam?
Candidates will not be permitted to retake any exam they have previously passed unless directly related to a recertification requirement approved by Splunk.
Can the exam be rescheduled ?
All scheduled exams are subject to a minimum 24-hour cancellation and/or rescheduling policy. Failure to cancel or reschedule an exam within this timeframe results in forfeiture of the registration fee.
For how long is the Splunk Phantom Certified Admin Certification valid?
The certification is valid for a period of 3 years.
How can I prepare for the Splunk Phantom Certified Admin exam?
The candidate has to follow some preparatory steps which is mentioned in our tutorial i.e. visiting the official, reading and understanding related books and guides, attending seminars and webinars, flashcards, learning objectives, trying their hands-on practice test, etc.
When will I receive my results for the Splunk Phantom Certified Admin?
Immediately after submitting the exam, the candidate’s results (pass or fail) will be displayed. For candidates testing onsite, a printout of these results will be provided by the on site proctor.
How are the exam scores are calculated?
After the completion of your exam, the points you earned on each question are totaled and then compared with the cut score to determine whether the result is pass or fail.
