XSOAR-Engineer Practice Questions

A.  

Create content and add it to the standard content by contributing through the Marketplace

B.  

Use the XSOAR GitHub Contribution Guide to add the contribution to the standard content

C.  

Create a support ticket with the custom content for review by the support team

D.  

Any custom content will be automatically uploaded to the content repository

A.  

Sub-playbook

B.  

Task

C.  

Field

D.  

Incident

A.  

Mirroring

B.  

Classification

C.  

Dynamic fields

D.  

Pre-processing

A.  

To highlight different paths in a playbook

B.  

To generate new widgets for a dashboard

C.  

To create an incident or escalate an existing incident

D.  

To automate tasks such as parsing a file or enriching indicators

A.  

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with no argument

B.  

Edit the incident layout to add a new button that calls the AssignToMeButton automation with argument assignBy={me}

C.  

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with argument owner={me}

D.  

Edit the incident layout to add a new button that calls the AssignAnalystToIncident automation with argument assignBy=current

A.  

Active.

B.  

Pending.

C.  

Waiting.

D.  

In-progress.

A.  

Cron job

B.  

Time triggered job

C.  

Feed triggered job

D.  

REST API job

A.  

Verdict: Malicious

Other Fields: Values from Integration

A.  

B.  

Verdict: Malicious

Other Fields: Values from Integration

B.  

C.  

Verdict: Benign

Other Fields: Values from Integration

A.  

D.  

Verdict: Benign

Other Fields: Values from Integration

B.  

A.  

Contains/Includes

B.  

Equals/Matches

C.  

In/In list

D.  

Is defined/Exist

A.  

To run dedicated playbooks for different event types

B.  

To classify events ingested from various sources into the relevant types

C.  

To classify indicators extracted in XSOAR incidents to their respective types

D.  

To facilitate role based access to XSOAR incidents