How does a user determine which app actions are available?
When working with complex datapaths, which operator is used to access a sub-element inside another element?
Which Splunk search command is used to send a notable event to SOAR?
Which of the following is a reason to create a new role in SOAR?
Which of the following roles is appropriate for a Splunk SOAR account that will only be used to execute automated tasks?
If two or more conditions apply to data in a filter block, which path is followed in the playbook?
