Which two alert notification options can be configured without creating a playbook? (Choose two.)
Which two alert notification options can be configured without creating a playbook? (Choose two.)
A Cortex XSIAM engineer is developing a playbook that uses reputation commands such as '!ip' to enrich and analyze indicators.
Which statement applies to the use of reputation commands in this scenario?
While using the remote repository on a Development XSIAM tenant, which two objects can be pushed or pulled to the remote repository? (Choose two.)
Which common issue can result in sudden data ingestion loss for a data source that was previously successful?
Based on the image below, which statement applies to the ability to remove tabs when creating a new alert layout?

How can a Cortex XSIAM engineer resolve the issue when a SOC analyst escalates missing details after merging two similar incidents?
Based on the images below, which command will allow the context data to be displayed as a table when troubleshooting a playbook task?

A vulnerability analyst asks a Cortex XSIAM engineer to identify assets vulnerable to newly reported zero-day CVE affecting the "ai_app" application and versions 12.1, 12.2, 12.4, and 12.5.
Which XQL query will provide the required result?
A)

B)

C)

D)

A Cortex XSIAM engineer at a SOC downgrades a critical threat intelligence content pack from the Cortex Marketplace while performing routine maintenance. As a result, the SOC team loses access to the latest threat intelligence data.
Which action will restore the functionality of the content pack to its previously installed version?
Exam style questions across every XSIAM-Engineer domain
Last Update 1 hour ago
Total Questions : 59
Start with our free XSIAM-Engineer practice questions, carefully crafted to mirror the domains, phrasing, and difficulty of the real Security Operations exam. Each XSIAM-Engineer exam question comes with a detailed rationale that explains not just which answer is correct but why the others fall short. That's how concepts stick. Use the free set to benchmark yourself: identify your Paloalto Networks weak domains, see where you're losing marks, and build a focused study plan in minutes.
