Halloween Sale Limited Time 70% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: merry71

Free Palo Alto Networks XSOAR Engineer Practice Questions

Question # 21

In which three locations can an engineer try to find information, when troubleshooting a failed integration instance error produced by the test button? (Choose three.)

Options:

A.  

The audit log

B.  

The log bundle

C.  

The source code for an integration

D.  

The error message returned directly below the button

E.  

The playground war room

Discussion 0
Question # 22

What is an outcome of using sections within a tab when customizing an incident layout?.

Options:

A.  

Triggering specific automations or playbooks when data within that section is modified during an investigation.

B.  

Enforcing mandatory fields that must be completed before an incident can be closed.

C.  

Grouping related fields and information logically, improving readability and data entry efficiency.

D.  

Restricting access to sensitive fields based on user roles, ensuring data privacy within the specific incident type.

Discussion 0
Question # 23

Based on the integration and classifier configuration images below,

Question # 23

which incident type will be created for incidents ingested using this integration when the incoming "type" field is set to "url allowed"?.

Options:

A.  

XSOAR ENGINEER- URL Alerts.

B.  

Case.

C.  

Access.

D.  

URL Allowed.

Discussion 0
Question # 24

Threat Intel search queries can be shared with which of the following? (Select 1)

Options:

A.  

Users defined in the platform (email or username)

B.  

Other organizations via the Marketplace

C.  

Users outside XSOAR via email invite

D.  

Roles defined in the platform

Discussion 0
Question # 25

An XSOAR engineer has been tasked with exporting all indicators from the production environment in the last 90 days. The final report needs to be in CSV format containing all indicator fields. How can this task be achieved?

Options:

A.  

Run the command !GetIndicatorsByQuery in CLI with its default arguments and export all indicators in the last 90 days.

B.  

SSH into the server and copy the indicator's database.

C.  

In the Threat Intel page, add query firstSeen:>="90 days ago", select All columns in Table View, and click Export to export as a CSV.

D.  

Run the command !findIndicators in CLI with the query firstSeen:>="90 days ago" and export to CSV.

Discussion 0
Question # 26

An engineer defined a dashboard which allows important metrics to be displayed. The engineer would like to make this dashboard the default dashboard.

How can it be accomplished?

Options:

A.  

Default Dashboard can be defined by ‘Role’

B.  

Use the server configuration key: default.dashboards

C.  

Save the dashboard as a widget and apply it to all users

D.  

Right click on the dashboard tab and ‘Set as Default’

Discussion 0
Question # 27

What is the default landing page for a new user in XSOAR?

Options:

A.  

Dashboards

B.  

Threat Intel

C.  

Settings

D.  

Marketplace

Discussion 0
Question # 28

An analyst wants to run a script to remove usernames from an incident before the incident becomes active in XSOAR. How can this be achieved?

Options:

A.  

Run an automation script in the Playground to remove usernames from the incident.

B.  

Create a pre-processing rule that runs an automation script to remove usernames from the incident as it comes into XSOAR.

C.  

Run an automation script on the XSOAR server to remove usernames from the incident.

D.  

Create a playbook task to remove the usernames from the incident.

Discussion 0
Question # 29

How can Cortex XSOAR administrators prevent junior analysts from viewing a senior analyst dashboard?

Options:

A.  

Share the dashboard in Read and Edit mode for senior analysts.

B.  

Share the dashboard in ReadandEdit mode for senior analysts and Read Only for juniors analysts.

C.  

Share the dashboard in Read and Write mode for senior analysts.

D.  

Share the dashboard in Read Only mode for junior analysts and senior analysts.

Discussion 0
Question # 30

Arrange these steps in the order that they occur during an incident fetch.

Question # 30

Options:

Discussion 0

XSOAR-Engineer PDF

XSOAR-Engineer PDF (Printable)
$46.5
$154.99

XSOAR-Engineer Testing Engine

XSOAR-Engineer PDF (Printable)
$51
$169.99

XSOAR-Engineer PDF + Testing Engine

XSOAR-Engineer PDF (Printable)
$63.9
$212.99

Free Exams Sample Questions