Candidates will get the exam result immediately after submitting the exam. For candidates testing onsite, a printout of these results will be provided by the on-site proctor. Candidates testing via online proctoring will not receive a hard copy of their results, but will have the option to print a score report via their Pearson online account. Candidates (both onsite and online) who pass the exam will not receive any additional feedback regarding exam performance.

To change or cancel an existing appointment less than 48 hours in advance, please contact Pearson VUE Customer Support. All other appointment changes can be made via your Pearson VUE account.

The course includes: • Administering Phantom • Developing Phantom Playbooks • Advanced Phantom Implementation

Candidates for the exam are recommended to complete the lecture, hands-on labs, and quizzes that are part of the course which are Administering Phantom, Developing Phantom Playbooks and Advanced Phantom Implementation.

All certifications are now subject to a 3-year life cycle. This means that your certification is valid for three years from the date you passed the exam.

Candidates can schedule the Splunk Phantom Certified Admin exam directly from PearsonVUE. Follow the steps for account creation and exam registration provided at home.pearsonvue.com/splunk. Payment will be collected at the time of registration. You can also visit the Pearson VUE voucher store for direct purchase.

Before applying for the Splunk Phantom Certified Admin exam, candidates are not required to pass any exam.

Splunk Phantom Certified Admin exam is the final step towards completion of the Splunk Phantom Certified Admin certification track. This highly technical certification exam evaluates a candidate’s knowledge and skills in installing and configuring a Phantom server and integrating it with Splunk. This also includes planning, designing, creating, and debugging Playbooks.

There will be a total of 121 questions in the exam.

Candidates who do not pass an exam on their first attempt must wait 7 days to retake the exam. Further, candidates who do not pass an exam on their second attempt must wait 14 days to retake the exam. After that, the subsequent retakes are as follows: ● Fourth attempt 4 weeks or 28 days ● Fifth attempt 8 weeks or 56 days ● Sixth attempt 8 weeks or 56 days The retakes beyond the 6th attempt will be considered on a case-by-case basis. Splunk reserves the right to deny a retake beyond the 6th attempt

The topics covered in this exam include: Topic 1: Deployment, Installation, and Initial Configuration 5%; Topic 2: User Management and Multi-tenancy 5%; Topic 3: Apps, Assets, and Playbooks 5%; Topic 4: Analyst Queue 5%; Topic 5: The Investigation Page 10%; Topic 6: Case Management and Workbooks 5%; Topic 7: Customizations 5%; Topic 8: System Maintenance 5%; Topic 9: Introduction to Playbooks 5%; Topic 10: Visual Playbook Editor 5%; Topic 11: Logic, Filters, and User Interaction 5%; Topic 12: Formatted Output and Data Access 5%; Topic 13: Modular Playbook Development 5%; Topic 14: Custom Lists and Data Routing 5%; Topic 15: Configuring External Splunk Search 5%; Topic 16: Integrating Phantom into Splunk 10%; Topic 17: Custom Coding 5%; Topic 18: Using REST 5%

Total seat time for the exam is 120 minutes out of which 3 minutes will be given for reviewing the exam agreement and 117 minutes to complete the exam.

The exam will cost you $125 USD with additional taxes.

The following content areas are general guidelines for the content to be included on the exam: • Installation/Initial configuration • Apps and assets • User management • Ingesting data • Events and containers • Mission control • Running actions and playbooks • Case management/workflows • Multi-tenacity • Clustering • Automation best practices • The visual playbook editor • Using actions and decisions • Using action results • Testing and debugging playbooks • Using interaction • Output formatting • Complex logic • Interacting with artifacts • Using the vault in a playbook • Custom lists • Integrating Splunk with Phantom

A Splunk Phantom Certified Admin has ability to install, configure, and use Phantom servers and plan, designs, creates, and debugs basic playbooks for Phantom. These highly skilled individuals are well proficient in complex Phantom solution development. They can integrate Phantom with Splunk as well as develop playbooks requiring custom coding and REST API usage.

Yes, we offer nearly 50% discount for the order more than 10 products at a time. You can reach the test prep training Helpdesk for more details. The member of the support staff will respond as soon as possible.

Yes, Testprep Training offers email support for any certification related query while you are preparing for the exam using our practice exams. Your query will be handled by experts in due course.

Yes our experts frequently blog about the tips and tricks for exam preparation.

Yes testprep training offers free practice tests for Exam which can be used before the final purchase for complete test.

Once purchased, the practice exams can be accessed for the lifetime.